spx $ ls dummy.keys dummy.zsk named.localhost.signed wizard.pl dummy.ksk named.localhost named.localhost.zs wizard.pl~ spx $ ls dummy.* dummy.keys: dummy.ksk: dummy.zsk: spx $ zonesigner -genkeys -gends -ksdir dummy.keysets -kskdirectory dummy.ksk -zskdirectory dummy.zsk -zone dummy named.localhost named.localhost.signed if zonesigner appears hung, strike keys until the program completes (see the "Entropy" section in the man page for details) /bin/mv: cannot move `.' to `dummy.zsk/.': Device or resource busy /bin/mv: cannot move `..' to `dummy.zsk/..': Device or resource busy /bin/mv: cannot move `.' to `dummy.zsk/.': Device or resource busy /bin/mv: cannot move `..' to `dummy.zsk/..': Device or resource busy dnssec-signzone: error: dns_master_load: named.localhost.zs:23: dummy.zsk/Kdummy.+005+05931.key: file not found dnssec-signzone: failed loading zone from 'named.localhost.zs': file not found unable to sign zone spx $ ls Kdummy.+005+05931.key dummy.keys named.localhost wizard.pl~ Kdummy.+005+05931.private dummy.krf named.localhost.signed Kdummy.+005+36843.key dummy.ksk named.localhost.zs Kdummy.+005+36843.private dummy.zsk wizard.pl spx $ ls dummy.* dummy.krf dummy.keys: dummy.ksk: Kdummy.+005+16057.key Kdummy.+005+16057.private dummy.zsk: check existence of zone file initial zone verification zone dummy/IN: loaded serial 3 OK zone verified if zonesigner appears hung, strike keys until the program completes (see the "Entropy" section in the man page for details) generating key files generating new "cur" ZSK /usr/sbin/dnssec-keygen -r /dev/urandom -a rsasha1 -b 1024 -n zone dummy new "cur" ZSK - Kdummy.+005+50778 generating new "pub" ZSK /usr/sbin/dnssec-keygen -r /dev/urandom -a rsasha1 -b 1024 -n zone dummy new "pub" ZSK - Kdummy.+005+09276 updating the keyrec file for the zone generating KSK /usr/sbin/dnssec-keygen -r /dev/urandom -a rsasha1 -b 2048 -n zone -f KSK dummy new KSK - Kdummy.+005+06127 updating the keyrec file for the zone updating the keyrec file for the zone checking key directories /bin/mv: cannot move `.' to `dummy.zsk/.': Device or resource busy /bin/mv: cannot move `..' to `dummy.zsk/..': Device or resource busy /bin/mv: cannot move `.' to `dummy.zsk/.': Device or resource busy /bin/mv: cannot move `..' to `dummy.zsk/..': Device or resource busy adding key includes to zone file dummy's new serial number - 4 signing zone /usr/sbin/dnssec-signzone -g -d dummy.keysets -k Kdummy.+005+06127 -o dummy -e +2592000 -f named.localhost.signed named.localhost.zs Kdummy.+005+50778 dnssec-signzone: error: dns_master_load: named.localhost.zs:23: dummy.zsk/Kdummy.+005+50778.key: file not found dnssec-signzone: failed loading zone from 'named.localhost.zs': file not found unable to sign zone