Home / server / Questions / 962640
Accepted
James B. Byrne
Asked: 2019-04-12 08:18:30 +0800 CST

On FreeBSD what tool is used to dislay the DNSSEC signature expiry date for a zone?

  • 772

We use FreeBSD-12 and Bind-9.11.6. We have DNSSEC enabled for some of our domains. I wish to verify the signature expiry date for these zones. I cannot seem to locate any information on exactly how this is done. Can someone provide me with this information?

bind

1 Answers

  1. Best Answer

    drill -D [domain] should return the RRSIG value for your domain (if DNSSEC is working) with the expiration as well

    • 0