cascade keyset
Synopsis
cascade keyset [OPTIONS] ksk|zsk|csk|algorithm <ROLL COMMAND> [OPTIONS]
cascade keyset [OPTIONS] remove-key [OPTIONS] <KEY>
Description
Execute manual key roll or key removal commands.
Options
- -h, --help
Print the help text (short summary with
-h, long help with--help).
Commands
- ksk
Command for KSK rolls.
- zsk
Command for ZSK rolls.
- csk
Command for CSK rolls.
- algorithm
Command for algorithm rolls.
- remove-key
Remove a key from the key set.
Key roll commands for ksk|zsk|csk|algorithm
- start-roll
Start a key roll.
- propagation1-complete <TTL>
Inform keyset that the changed RRsets and signatures have propagated.
TTL is the maximum TTL of the zone.
- cache-expired1
Inform keyset that enough time has passed that caches should have expired.
- propagation2-complete <TTL>
Inform keyset that the changed RRsets and signatures have propagated.
TTL is the maximum TTL of the zone.
- cache-expired2
Inform keyset that enough time has passed that caches should have expired.
- roll-done
Report that the final changes have propagated and the roll is done
Arguments for keyset remove-key
- <KEY>
The key to remove. This is the key’s URI as reported by
cascade zone status.
Options for keyset remove-key
- --force
Force a key to be removed even if the key is not stale.
- --continue
Continue when removing the underlying keys fails.
See Also
- https://cascade.docs.nlnetlabs.nl
Cascade online documentation
- cascade(1)
- cascaded(1)
- cascade-dnst-keyset(1)
Further documentation of the key roll commands (and more)