f D Dž f L At
AH1pD`D9LH L`Dž AD9t}LHDD),L4 tЋj MIHHj HHjP,H uDAD9u L!؉ @ IM * H=;3 HIHLDIM LL苷LM9t.AD$AT$A; H
8- HHHTs AFAVLA; HH
- HHTD ۸ EH , LAMt,Et[AGAWHLA; LHHT
H=j IHt?H=j .MtEuIM * H=1 A Tf=D3tH @ H=cj E1HL H=Ej L%~ 9 3L Ic
Ht}tIM : H=[1 HLHAP HAI} HL 1
A HH8 u1AA ^tU 4 S HEdH3%( He[A\A]A^A_]ËIM H=%5 H=0 1ɷAH HiHu H`d IM H=4 H 4 . H4 L HELE1HHH H HDB< u?C<& u8HB< u*C<' u#HB< uHB< P H+HHHH/ B PHI} G &F 1 HHHNjH!%tHL DHQHDH/ @ H HB H)ك
$HB PG '1I} ; H II HX H
H=h( H=2 1蕵D-H=V H1|
H=f. H1dH=(2 1QH=1 1CH= H1+LHH HLH1LHLDž!fuBHDž HDž HHHDž ƅ
H51 HL1HH=, ~H=O+ rH= + fH=`1 1XH=, 1JH={+ >H=?+ 2f AVAUIATIHUSH ] H+HY1҅t[]A\A]A^ L5] IcHIHtH A[]A\A]A^ÐH1] HK1 I D H] HH] H81AIcHIf. AWIAVIAUAATL%Q UH-Q SL)HHt 1 LLDAHH9uH[]A\A]A^A_ff. HH dns_db_allrdatasets dns_db_deleterdataset rdataset iteration failed: %s dns_db_allrdatasets() dns_db_deleterdataset() %s %s
signature verified
signature failed to verify
dns_difftuple_create dns_master_dumpnodetostream isc_buffer_allocate dns_master_rdatasettotext isc_stdio_write cannot load dnskey %s: %s key %s not at origin
Usage:
Version: %s
-K directory:
-d directory:
-g: -i interval:
-j jitter:
-v debuglevel (0)
-o origin:
-f outfile:
-I format:
-O format:
-N format:
-D:
-r randomdev:
-a: verify generated signatures
-c class (IN)
-E engine:
-p: -P: -Q: -R: -t: print statistics
-u: -k key_signing_key
-l lookasidezone
-3 NSEC3 salt
-H NSEC3 iterations (10)
-A NSEC3 optout
Signing Keys: keyfile (Kname+alg+tag)
result == 0 dns_db_addrdataset path '%s' is too long dns_name_tofilenametext() name '%s' is too long rbt dns_db_create() dsset- found DS records
keyset- found DNSKEY records
dns_db_newversion dns_ds_buildrdata dns_diff_apply dns_db_findrdataset next != ((void *)0) dns_rdatalist_tordataset() addnsec3: dns_db_findnode() entries != 0U dns_name_tofilenametext out of memory %s/ dns_name_concatenate dst_key_todns dns_db_create dns_master_dump dns_dbiterator_current() failed to allocate event
%02x len <= l->length dns_db_createiterator() dns_dbiterator_first() dns_dbiterator_next() dns_db_deleterdataset(rrsig) dns_rdata_fromstruct() dns_db_findnode(gorigin) _r->length >= _l dns_rdata_tostruct dns_rdataset_first/next expired ttl change failed to verify %s/%s:
rrsig by %s retained
rrsig by %s dropped - %s
removing signature by %s
rrsig by %s expired
fixing ttl %s
resigning with dnskey dropped retained dns_nsec_build() clear AA out record trace usage size mctx isc_app_start isc_hex_decodestring(salt) cannot open directory %s: %s too-many iterations must be numeric iterations too big dns_name_fromtext(dlv) maximum TTL must be numeric verbose level must be numeric %s: invalid argument -%c
nonsecify %s: unhandled option -%c
could not initialize dst: %s could not create hash context using %d cpus
%s.signed map raw raw= unknown file format: %s full unknown raw format version
keep increment incr unixtime date unknown soa serial format: %s dns_master_stylecreate dns_rdataset_first dns_nsec3_hashname dns_dnssec_findmatchingkeys dns_nsec_nseconly dns_db_newversion() removing duplicate at %s/%s
rdatasets iteration failed. zone iteration failed. dns_diff_applysilently dlvset- isc_file_mktemplate %a %b %e %H:%M:%S %Y ; File written on %s
failed to create task: %s dns_dbiterator_seek() failed to start task: %s process aborted by user dns_master_dumptostream3 isc_stdio_close (keylist).tail == (key) (keylist).head != (key) (keylist).tail != (key) dnssec-signzone Zone contains NSEC records. Use -u to update to NSEC3. Zone contains NSEC3 chains. Use -u to update to NSEC. dnskey '%s' failed to sign data: %s ((pthread_mutex_lock(((&statslock))) == 0) ? 0 : 34) == 0 ../../../bin/dnssec/dnssec-signzone.c ((pthread_mutex_unlock(((&statslock))) == 0) ? 0 : 34) == 0 cannot sign zone with non-private dnskey %s %s [options] zonefile [keys]
9.11.36-RedHat-9.11.36-16.el8_10.16 Options: (default value in parenthesis)
-S: smart signing: automatically finds key files
for the zone and determines how they are to be used
directory to find key files (.)
directory to find dsset-* files (.)
update DS records based on child zones' dsset-* files
-s [YYYYMMDDHHMMSS|+offset]:
RRSIG start time - absolute|offset (now - 1 hour)
-e [YYYYMMDDHHMMSS|+offset|"now"+offset]:
RRSIG end time - absolute|from start|from now (now + 30 days)
-X [YYYYMMDDHHMMSS|+offset|"now"+offset]:
DNSKEY RRSIG end - absolute|from start|from now (matches -e)
cycle interval - resign if < interval from end ( (end-start)/4 )
randomize signature end time up to jitter seconds
-V: print version information
zone origin (name of zonefile)
file the signed zone is written in (zonefile + .signed)
file format of input zonefile (text)
file format of signed zone file (text)
soa serial format of signed zone file (keep)
output only DNSSEC-related records
a file containing random data
name of an OpenSSL engine to use
use pseudorandom data (faster but less secure)
disable post-sign verification
remove signatures from keys that are no longer active
remove signatures from keys that no longer exist
-T TTL: TTL for newly added DNSKEYs
update or replace an existing NSEC/NSEC3 chain
-x: sign DNSKEY record with KSKs only, not ZSKs
-z: sign all records with KSKs
-C: generate a keyset file, for compatibility
with older versions of dnssec-signzone -g
-n ncpus (number of cpus present)
(default: all zone keys that have private keys)
failed to find the zone's origin: %s User-specified TTL %u conflicts with existing DNSKEY RRset TTL.
Imported keys will use the RRSet TTL %u instead.
failed to load the zone keys: %s %s: warning: Serial number not advanced, zone may not transfer
isc_buffer_availablelength(&b) >= _length isc_buffer_reserve(&_tmp, 1) == ISC_R_SUCCESS isc_buffer_availablelength(&b) >= 1U addnsec3: dns_nsec3_hashname() addnsec3: dns_nsec3_buildrdata() addnsec3: dns_db_addrdataset() isc_buffer_availablelength(&namebuf) >= 1U ((pthread_mutex_lock(((&namelock))) == 0) ? 0 : 34) == 0 failure iterating database: %s ((pthread_mutex_unlock(((&namelock))) == 0) ? 0 : 34) == 0 unable to grow hashlist: out of memory addnowildcardhash: dns_name_concatenate() adding no-wildcardhash for %s
dns_db_deleterdataset(nsec/rrsig) iterating through the database failed: %s l->hashbuf != ((void *)0) || l->length == 0 dddnsec3param: dns_db_deleterdataset() addnsec3param: dns_db_addrdataset() dns_db_subtractrdataset(NSEC3) dns_db_deleterdataset(RRSIG(NSEC3)) Duplicate hash detected. Pick a different salt. '%s': found DS RRset without NS RRset
no existing signatures for %s/%s
failed while looking for '%s RRSIG %s': %s rrsig by %s dropped - invalid validity period
failure looking for '%s DNSKEY' in database: %s rrsig by %s dropped - private dnskey not found
rrsig by %s dropped - key inactive
rrsig by %s dropped - dnskey removed
rdataset iteration for name '%s' failed: %s failed to delete SIGs at node '%s': %s failed to add SIGs at node '%s': %s rrsig by %s %s - dnskey not found
dns_db_deleterdataset(nsec3param/rrsig) 3:AaCc:Dd:E:e:f:FghH:i:I:j:K:k:L:l:m:M:n:N:o:O:PpQRr:s:ST:tuUv:VX:xzZ: DS directory must be non-empty string cycle period must be numeric and positive jitter must be numeric and positive too many key-signing keys specified source serial number must be numeric number of cpus must be numeric WARNING: -e and -X were both set, but have identical values.
WARNING: input format version ignored
option -D can only be used with "-O text" option -D can only be used with "-N keep" option -D cannot be used with -M isc_time_now((&timer_start)) == 0 failed converting name '%s' to dns format: %s failed loading zone from '%s': %s failed to find an SOA at the zone apex: %s %s: warning: Specified key TTL %u exceeds maximum zone TTL; reducing to %u
An NSEC3 chain exists with a different salt. Use -u to update it. An NSEC3 chain exists with different iterations. Use -u to update it. An NSEC3 chain exists with%s OPTOUT. Use -u -%s to %s it. could not initialize keylist_lock: %s failed to update DNSKEY RRset at node '%s': %s %s: warning: No keys specified or found
No signing keys specified or found. failed to find keys at the zone apex: %s %s: warning: No non-KSK DNSKEY found; supply a ZSK or use '-z'.
No non-KSK DNSKEY found; supply a ZSK or use '-z'. %s: warning: NSEC3 generation requested with no DNSKEY; ignoring
NSEC3 generation requested with NSEC-only DNSKEY Ignoring max iterations check.
NSEC3 iterations too big. Maximum iterations allowed %u. reducing ttl of %s/%s from %d to %d
failed to open temporary output file: %s flen > 0U && flen < sizeof(timebuf) ; dnssec_signzone version 9.11.36-RedHat-9.11.36-16.el8_10.16
failed to create task manager: %s isc__mutex_init((&namelock), "../../../bin/dnssec/dnssec-signzone.c", 3817) == 0 isc__mutex_init((&statslock), "../../../bin/dnssec/dnssec-signzone.c", 3819) == 0 isc_time_now((&sign_start)) == 0 isc_time_now((&sign_finish)) == 0 ((pthread_mutex_destroy(((&namelock))) == 0) ? 0 : 34) == 0 ((pthread_mutex_destroy(((&statslock))) == 0) ? 0 : 34) == 0 failed to rename temp file to %s: %s isc_time_now((&timer_finish)) == 0 Signatures generated: %10u
Signatures retained: %10u
Signatures dropped: %10u
Signatures successfully verified: %10u
Signatures unsuccessfully verified: %10u
Signing time in seconds: %7u.%03u
Signatures per second: %7u.%03u
Runtime in seconds: %7u.%03u
p0 p8(P `0p hxh../../../bin/dnssec/dnssectool.c Break in NSEC3 chain at: %.*s
'%s' ambiguous: use 'mi' for minutes or 'mo' for months Missing NSEC3 record for %s (%s)
Bad NSEC3 record for %s, bit map mismatch
Multiple NSEC3 records with the same parameter set for %s TTL mismatch for %s %s keytag %u
No correct %s signature for %s %s
Bad NSEC record for %s, next name mismatch (expected:%s, found:%s)
Bad NSEC record for %s, bit map mismatch
Warning: Found unexpected signatures for %s/%s
isc_log_create(mctx, &log, &logconfig) == 0 isc_log_settag(logconfig, program) == 0 isc_log_usechannel(logconfig, "stderr", ((void *)0), ((void *)0)) == 0 could not create entropy object: %s could not initialize entropy source: %s Key %s has incompatible format version %d.%d, use -f to force upgrade to new version. Key %s has incompatible format version %d.%d, use -f to force downgrade to current version. Key ID %d could collide with %d
DNSKEY is not signed (keys offline or inactive?)
SOA is not signed (keys offline or inactive?)
NSEC is not signed (keys offline or inactive?)
NSEC3PARAM is not signed (keys offline or inactive?)
No valid NSEC/NSEC3 chain for testing
revoked KSK is not self signed:
%s DNSKEY %.*s No self-signed KSK DNSKEY found. Supply an active
key with the KSK flag set, or use '-P'. Verifying the zone using the following algorithms: Expected and found NSEC3 chains not equal
The zone is not fully signed for the following algorithms: DNSSEC completeness test failed. DNSSEC completeness test failed (%s). Algorithm: %s: KSKs: %u active, %u stand-by, %u revoked
%*sZSKs: %u active, %u %s, %u revoked
isc_heap_insert failed: %s
Expected: %.*s
Found: %.*s
%s: fatal: time value %s is invalid unexpected NSEC RRset at %s
dns_rdata_tostruct() dns_nsec3_hashname() dns_rdataset_first() Missing NSEC3 record for %s
record_nsec3() %s: dns_rdatatype_totext() Missing NSEC record for %s
dns_nsec_buildrdata() Multiple NSEC records for %s
No signatures for %s/%s
%s/%s/%d stderr isc_log_createchannel() logp != ((void *)0) ectx != ((void *)0) keyboard (sources).tail == (source) (sources).head == (source) (sources).head != (source) (sources).tail != (source) none never 0123456789 000000 time value %s is invalid: %s now unknown class %s major <= 1 Key ID %d exists
(matchkeys).tail == (key) (matchkeys).head == (key) (matchkeys).head != (key) (matchkeys).tail != (key) ZSK self-signed KSK isc_heap_create() Zone contains no DNSSEC keys
Zone contains no SOA record
NSEC lookup failed
NSEC3PARAM lookup failed
dns_rdata_totext No self-signed DNSKEY found. .
Missing %s for algorithm %s
verifynode Zone fully signed:
present stand-by %s: missing argument -%c %s
pp; @ 0@ ph p `( P
P h ( t 4 @! P$ ) ) -T 5 5 `:L :d @; `; < >\ ? P]P
n
o {p P}
$
`<
`\
0
@ P < X `t P P | @ @, x @ d P 04 ` zR x 0/ D $ 4 @ FJ w ?:*3$" \ 0 H t s BBB B(A0A8GL
8A0A(B BBBI L z BBB E(D0A8IC
8A0A(B BBBA H , BBA A(D0_
(D ABBF D(F ABB \ \ p BEB E(D0I8MFVA
8A0A(B BBBG \ J BBB B(A0A8GF]Ho
8A0A(B BBBH H BBB B(A0A8D`b
8A0A(B BBBF h t EG
AA 0 A w BGB B(A0A8GKXAr
8A0A(B BBBA JIZAHFEI l ( * BBE E(A0A8G
8A0A(B BBBA OG^ANUH ` BBB B(A0A8G L)l)B)O)H)N
8A0A(B BBBF @ 8 BEB B(A0A8J~H\BHXBHWHtNUH}
8A0A(B BBBB JHXB " " BBB B(A0A8G L@LXXTYBYEYIX)XbYBYAYBYBYSXXHY[XFXC
8A0A(B BBBF \ H $&z BBB B(D0A8IQPH
8A0A(B BBBA 8 D- ADG{
AAG MGaA X - BBB B(A0A8G
8A0A(B BBBF VXA @ 2% H \ 4 X $2 FBA D(G@(A ABB 2 L 2D BIE E(A0A8G
8A0A(B BBBA X 3 BBB E(A0A8J
N
Z
O
A
8A0A(B BBBC H P <56 BEE E(D0D8G
8A0A(B BBBA 06d BBE E(A0A8G<GbHG_BAjHJPA#AkI
8A0A(B BBBE D R BBB B(A0A8G L**X*U*B*j
8A0A(B BBBG a*I*S*I+I**]*R*A*Y*l*F*A* 0 c FDA D@
AABA L xd BBB B(A0A8G
8A0A(B BBBG d (/ FBE B(D0A8Nu FHNPSFHH[BI^IVAMEINmO\AH^B& PbH
8A0A(B BBBA NTAI H d
8o BBE J(D0D8GP
8D0A(B BBBB L
p2 BBE B(A0A8G
8A0A(B BBBA |r ^T r9 _Y 0 s EDG 0 P s Dn
F F
B J
F J
F b
F P t BEE D(D0G ` I R A k
0A(A BBBF u u& J (u BBB B(A0A8G L@LR
8A0A(B BBBA RQRGRHRQRiRNRGRHRVRRLRQRARRJRVRAR\ |! BBB B(A0A8GBBBbc
8A0A(B BBBA (
h} EAJ
AAA 0
<~8 EAW L
`~ H`
A h
~ BBB B(A0A8H Q
GK
8A0A(B BBBA IXADDBIjP
L FEB A(H0NWDFAZ
0A(A BBBA ( D EDD`"
AAG p < H R
F 0 FAA D0
AABJ 8 L} FID H(D0
(D ABBM EN B
AJ H : FBL B(D0D8Gp}
8A0A(B BBBD l } ED@R
AD , \ EAG L"L
AAI EG I
AJ H EG0b
AA L FEB E(D0D8G_
8A0A(B BBBF P X FEH D(G0Dq
0A(A BBBE MGYA H FED D(G]GYAe
(A ABBE , D EC
\
A P ( FBE G(A0Y
(C BBBI g
(A BBBB D | `e FEE E(H0H8G@n8A0A(B BBB д! ( ; I U _ n O
Hc ! ȴ! o 0 0
} ȷ! (9 7 o o 6 o o V4 o ش! P 0P @P PP `P pP P P P P P P P P Q Q Q 0Q @Q PQ `Q pQ Q Q Q Q Q Q Q Q R R R 0R @R PR `R pR R R R R R R R R S S S 0S @S PS `S pS S S S S S S S S T T T 0T @T PT `T pT T T T T T T T T U U U 0U @U PU `U pU U U U U U U U U V V V 0V @V PV `V pV V V V V V V V V W W W 0W @W PW `W pW W W W W W W W W X X X 0X @X PX `X pX X X X X X X X X Y Y Y 0Y @Y PY `Y pY Y Y Y Y Y Y Y Y Z Z Z 0Z @Z PZ `Z pZ Z Z Z Z Z Z Z Z [ [ [ 0[ @[ P[ `[ p[ [ [ [ [ [ [ [ [ \ \ \ 0\ @\ P\ `\ p\ \ \ \ \ \ \ \ \ ] ] ] 0] @] P] `] p] ] ] ] ] ] ] ] ] ^ ^ ^ 0^ @^ P^ `^ p^ ^ ^ ^ ^ ^ ^ ^ ^ _ _ _ 0_ @_
/ ! )n GA$3a1 O o GA$3a1 p Uc dnssec-signzone-9.11.36-16.el8_10.16.x86_64.debug p?7zXZ ִF ! t/_] ?Eh=ڊ2NwQ ̕cY8+F2ge:ʇF4G
w.w;̇Ŵd\ G'n=(U xfPF 0 0Nvco ",әaJ 1|LqIѪ7U~&?3 ̳RzSi+nJfqX[g6u1 ً9(5Nӭn!E&L3$j*'wh1 $>:D]Zu=/&29`otƲ^ēsq]BC>$jy"|2,ak'DY,J^1$DgK" k~ń&F=v{#3h)nN&8Eƿ X\Dp9ldREP
Q=YlȂ>K5 Ia h=2)Za%z\봊kȽl2 ztIfOH ,$o\ of\^5 VMz;N`szjgI4Jqx*|ךgs֡U8 4:ig('I]kΎ(Q+w &XwVUIo
E]IwrH 0
ۀNAᦟ*zN&*4aitN+VHN 1y-d+DҷE$T|"n~7~*}Fh&^6
}pG>,. >NFn8+zgݺCcj9Bd "%<VP J1ɘԉXjMDI((w:O%{e8捘W' ?B[bZ/,7`gIOH+6n{pN/ʡ<0 ,f =q2 'fe>uwsaΘE nI^1{tmҠ
a /
E5 45@A9}N)<+xۑx5+gbyVn#pXԸ:7,k?T}gՙlomSb``і !`H5*dD=R!ϭHU>{ձb/k|k_qU%'uDmH^;e[
umsdQJdzAI'S;$9 2)_EsG / |LJ̱g YZ .shstrtab .interp .note.gnu.property .note.ABI-tag .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .got .data .bss .gnu.build.attributes .gnu_debuglink .gnu_debugdata & 4 $ G o 0 0 Q 0 0 Y } a o V4 V4 N n o 6 6 p } 7 7 B (9 (9 O O P P @ P_ P_ 0 n n Hc Hc
Xc Xc 2 ! ȴ! ȴ д! д ش! ش ȷ! ȷ 8 ! 0 @! 0
Ha 0 H x 8 / P >