Changeset 1894

Timestamp:

01/18/11 16:33:31 (2 years ago)

Author:

ahu

Message:

document (un)set-presigned

Location:

trunk/pdns/pdns

Files:

• docs/pdns.xml (modified) (2 diffs)
• pdnssec.cc (modified) (2 diffs)

trunk/pdns/pdns/docs/pdns.xml

@@ -9385 +9385 @@
                 Sets NSEC3 parameters for this zone. A sample commandline is: "pdnssec set-nsec3 powerdnssec.org '1 0 1 ab' narrow".
                 The NSEC3 parameters must be quoted on the command line.
-                WARNING: an empty salt is not yet supported!
                 WARNING: This requires updating the 'DS" over at the parent zone!
+              </para>
+            </listitem>
+        </varlistentry>
+        <varlistentry>
+            <term>set-presigned ZONE</term>
+            <listitem>
+              <para>
+                        Switches zone to presigned operation, utilizing in-zone RRSIGs.
               </para>
             </listitem>
@@ -9403 +9410 @@
               <para>
                 Converts a zone to NSEC operations. WARNING: This requires updating the 'DS" over at the parent zone!
+              </para>
+            </listitem>
+        </varlistentry>
+        <varlistentry>
+            <term>unset-presigned ZONE</term>
+            <listitem>
+              <para>
+                        Disables presigned operation for ZONE.
               </para>
             </listitem>

trunk/pdns/pdns/pdnssec.cc

@@ -235 +235 @@
   if(cmds.empty() || g_vm.count("help")) {
     cerr<<"Usage: \npdnssec [options] [show-zone] [secure-zone] [rectify-zone] [add-zone-key] [deactivate-zone-key] [remove-zone-key] [activate-zone-key]\n";
-    cerr<<"         [import-zone-key] [export-zone-key] [set-nsec3] [unset-nsec3] [export-zone-dnskey]\n\n";
+    cerr<<"         [import-zone-key] [export-zone-key] [set-nsec3] [set-presigned] [unset-nsec3] [unset-presigned] [export-zone-dnskey]\n\n";
     cerr<<"activate-zone-key ZONE KEY-ID   Activate the key with key id KEY-ID in ZONE\n";
     cerr<<"add-zone-key ZONE [zsk|ksk]     Add a ZSK or KSK to a zone\n";
@@ -248 +248 @@
     cerr<<"remove-zone-key ZONE KEY-ID     Remove key with KEY-ID from ZONE\n";
     cerr<<"secure-zone                     Add KSK and two ZSKs\n";
-    cerr<<"set-nsec3 'params' [narrow]     Enable NSEC3 with PARAMs. Optionally narrow\n";
+    cerr<<"set-nsec3 ZONE 'params' [narrow]     Enable NSEC3 with PARAMs. Optionally narrow\n";
+    cerr<<"set-presigned ZONE              Use presigned RRSIGs from storage\n";
     cerr<<"show-zone ZONE                  Show DNSSEC (public) key details about a zone\n";
-    cerr<<"unset-nsec3 ZONE                Switch back to NSEC\n\n";
-
+    cerr<<"unset-nsec3 ZONE                Switch back to NSEC\n";
+        cerr<<"unset-presigned ZONE            No longer use presigned RRSIGs\n\n";
     cerr<<"Options:"<<endl;
     cerr<<desc<<endl;