1autotrust(8) automated updates for trust anchors autotrust(8)
2
6 autotrust - automated updates of DNSSEC trust anchors.
7
9 autotrust [-c configfile] [-d] [-h] [-v verbosity]
10
12 autotrust is a standalone application that automatically updates DNSSEC
13 trust anchors. These can be used for DNSSEC aware resolvers like
14 Unbound or BIND9. It is compliant with RFC 5011, with the exception of
15 query intervals and retry times. In order to follow these time recom‐
16 mendations, autotrust should run as a daemon. It is to be called from
17 the commandline once in a while, or from a cron job.
18
20 All the configurations need to be set in the configuration file. For
21 more information, see the autotrust.conf.sample.
22 -c configfile
25 Use this configfile.
26 -d Run as daemon.
28 -h Print help information and exit.
30 -v verbosity
32 Specify a verbosity level. Setting it to zero will produce no
33 output. Default verbosity level is 1. If verbosity is given in
34 the configfile, the commandline value will be overrided.
35
37 /etc/autotrust/autotrust.conf
38 default configuration file.
39 /var/lib/autotrust/autotrust.state default file to store trust anchor
41 state.
42
44 autotrust will log all notifications and problems to the specified log‐
45 file. If no logfile was specified, output is directed to stderr. If
46 autotrust is not daemonized, it will perform a single active refresh
47 and will return zero code if the refresh was successfull, 1 otherwise.
48
50 autotrust was written by NLnet Labs.
51
53 Bugreports can be send to autotrust-users@nlnetlabs.nl. See TODO for
54 more information.
55autotrust NLnet Labs autotrust(8)