1ldns-test-edns(1)           General Commands Manual          ldns-test-edns(1)
2
3
4

NAME

6       ldns-test-edns - test if dns cache supports EDNS and DNSSEC.
7

SYNOPSIS

9       ldns-test-edns [ -i ] { ip }
10

DESCRIPTION

12       ldns-test-edns  tests  a  DNS cache and checks if it supports EDNS0 and
13       DNSSEC types so that it can be used as a dnssec-enabled DNS cache.   It
14       sends  two  queries to the cache, one for the root key and one for a DS
15       record.  These must succeed, the answer must have EDNS, that  type  and
16       signatures.
17
18       If  the IP address is good for DNSSEC, it is printed with 'OK'.  Other‐
19       wise short description is given of the failure.  If OK  is  given,  the
20       cache  should  be  good to use as a cache for a local configured DNSSEC
21       validator.
22
23       The tool assumes the root is signed and Sweden is  signed.   Also,  the
24       queries  are  sent  with  the CD flag, the tool does not check that the
25       results are validated, but that they can be validated.
26

OPTIONS

28       -i option enables a mode where the working  IP  addresses  are  printed
29       after  another,  with  no other explanations, and if none work or no IP
30       addresses are on the input, 'off' is printed.
31
32       ldns-test-edns takes one or more IP addresses, it checks them in  turn.
33       IPv4  and  IPv6 addresses can be given.  The exit value is for the last
34       checked IP address: 0 is OK, 1 is failure, 2 is some  sort  of  network
35       failure.
36

AUTHOR

38       Written by the ldns team as an example for ldns usage.
39

REPORTING BUGS

41       Report bugs to <ldns-team@nlnetlabs.nl>.
42
44       Copyright  (C) 2010 NLnet Labs. This is free software. There is NO war‐
45       ranty; not even for MERCHANTABILITY or FITNESS FOR  A  PARTICULAR  PUR‐
46       POSE.
47
48
49
50                                  14 Dec 2010                ldns-test-edns(1)
Impressum