CC: Tony Finch <dot@dotat.at>
MIME-Version: 1.0
content-type: TEXT/PLAIN; charset="utf-8"
Message-ID: <alpine.LSU.2.00.1007161826270.13988@hermes-2.csi.cam.ac.uk>
Subject: bogus "file not found" error from dnssec-dsfromkey
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
Sender: Tony Finch <fanf2@hermes.cam.ac.uk>
Date: Fri, 16 Jul 2010 18:30:39 +0100
To: bind9-bugs@isc.org
From: Tony Finch <dot@dotat.at>
Content-Length: 1362

dnssec-dsfromkey incorrectly reports "file not found" if it is given a
filename that doesn't end in .key:

$ dig +noall +answer dnskey . >root-dnskey
$ dnssec-dsfromkey root-dnskey >root-ds
dnssec-dsfromkey: fatal: invalid keyfile name root-dnskey: file not found
$ mv root-dnskey root-dnskey.key
$ dnssec-dsfromkey root-dnskey.key >root-ds
$ dnssec-dsfromkey -?
Usage:
    dnssec-dsfromkey options [-K dir] keyfile

    dnssec-dsfromkey options [-K dir] [-c class] -s dnsname

    dnssec-dsfromkey options -f zonefile (as zone name)

    dnssec-dsfromkey options -f zonefile zonename

Version: 9.7.1-P2
Options:
    -v <verbose level>
    -K <directory>: directory in which to find key file or keyset file
    -a algorithm: digest algorithm (SHA-1 or SHA-256)
    -1: use SHA-1
    -2: use SHA-256
    -l: add lookaside zone and print DLV records
    -s: read keyset from keyset-<dnsname> file
    -c class: rdata class for DS set (default: IN)
    -f file: read keyset from zone file
    -A: when used with -f, include all keys in DS set, not just KSKs
Output: DS or DLV RRs
$

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
FAIR ISLE FAEROES: CYCLONIC BECOMING SOUTHWESTERLY 5 TO 7, OCCASIONALLY GALE 8
AT FIRST, DECREASING 4 AT TIMES. MODERATE OR ROUGH, OCCASIONALLY VERY ROUGH AT
FIRST. RAIN OR SQUALLY SHOWERS. MODERATE, OCCASIONALLY POOR.