Path: csiph.com!news.uzoreto.com!news.etla.org!nntp-feed.chiark.greenend.org.uk!ewrotcd!usenet-its.stanford.edu!usenet.stanford.edu!not-for-mail From: Jelle de Jong Newsgroups: comp.protocols.dns.bind Subject: how to revert signed db zone file to unsgined plain text (remove dnssec keys) Date: Sat, 8 Aug 2020 21:17:09 +0200 Lines: 18 Approved: bind-users@lists.isc.org Message-ID: References: <9010d1a0-fc3c-3fc3-c94e-bfcae79fab57@powercraft.nl> NNTP-Posting-Host: lists.isc.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: usenet.stanford.edu 1596914303 23817 149.20.1.60 (8 Aug 2020 19:18:23 GMT) X-Complaints-To: action@cs.stanford.edu To: bind-users@lists.isc.org Return-Path: X-Original-To: bind-users@lists.isc.org Delivered-To: bind-users@lists.isc.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 Content-Language: en-US X-CMAE-Envelope: MS4wfD5j62S9ivQA0EZewDfEYsSeQsC6rxKihM0hV0l4gezbctxw9SbifWvW4Ec49V/LOIf5TBqTpqz5u76N6RJGeDRrrKcPMvkkD8H/cY5NSD2/OsAHtuj+ 6MBPAxHqo86KEzl1z8cgpjJo2S5+2iNDvKZ88lB/vafa7VyVOrh8eIYjDR3xSIaltFA1SUhEM2VmWA== X-Spam-Status: No, score=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS autolearn=disabled version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mx.pao1.isc.org X-BeenThere: bind-users@lists.isc.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: BIND Users Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-Mailman-Original-Message-ID: <9010d1a0-fc3c-3fc3-c94e-bfcae79fab57@powercraft.nl> Xref: csiph.com comp.protocols.dns.bind:16044 Hello everybody, This will sound counter intuitive but I want to convert a db.powercraft.nl.signed file to db.powercraft.nl (unsigned without keys). I do have the keys used, but not the original file that got singed. I know I can convert the raw format to text but the zone file is rather big and i want to get rid of all the sign keys. named-compilezone -f raw -F text -o powercraft.nl.text powercraft.nl /var/cache/bind/db.powercraft.nl.signed named-checkzone -D -f raw powercraft.nl /var/cache/bind/db.powercraft.nl.signed Kind regards, Jelle de Jong