[Opendnssec-user] DNSSEC check tools (CLI, not GUI)?

[Jakob Schlyter]

On 17 dec 2012, at 03:20, Peter Olsson <pol at leissner.se> wrote:

> * Run from cron
> 
> * Preferably written in python, perl, C or bash script
> 
> * I want the tool to check, at least, that the DNSSEC
>  zone and its keys and signatures are working and valid
>  from the Internet point of view, and that there are no
>  keys expiring in less than X days

validns, https://github.com/tobez/validns, is nice (although does not check signature lifetime deltas, perhaps this could be added?)

For NAGIOS you also have https://github.com/dotse/dnssec-monitor from the merry people at .SE.



	jakob