[Opendnssec-user] how to match/correlate key's CKA_ID & PUBKEY?

Wed Feb 22 22:14:17 UTC 2017

Hi,

On 22-02-17 19:59, PGNet Dev wrote:
> E.g., if @ an external observer, I identify a DNSKEY I want removed,
> 
> 	dig DNSKEY example.com | grep 257
> 		example.com.             300     IN      DNSKEY  257 3 14 YJ9...
> 		example.com.             300     IN      DNSKEY  257 3 14 UWB...   <====== WANT TO PURGE THIS KEY

Try
	dig example.com DNSKEY +rrcomments
It'll show you the keytag.

//Yuri

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20170222/d98883e3/attachment.bin>