[Opendnssec-user] DNSSEC check tools (CLI, not GUI)?

Jakob Schlyter jakob at kirei.se
Mon Dec 17 07:30:44 UTC 2012


On 17 dec 2012, at 03:20, Peter Olsson <pol at leissner.se> wrote:

> * Run from cron
> 
> * Preferably written in python, perl, C or bash script
> 
> * I want the tool to check, at least, that the DNSSEC
>  zone and its keys and signatures are working and valid
>  from the Internet point of view, and that there are no
>  keys expiring in less than X days

validns, https://github.com/tobez/validns, is nice (although does not check signature lifetime deltas, perhaps this could be added?)

For NAGIOS you also have https://github.com/dotse/dnssec-monitor from the merry people at .SE.



	jakob




More information about the Opendnssec-user mailing list