Resign the Zone with zonesigner

# zonesigner -gends -zone zone-name zone-file output-file [ENTER]

Signing may take a few minutes to complete depending on the size of the zone file. This operation may appear to be unresponsive for a period of time, depending on the operating system's random number generator device. (See Chapter 2, Configure DNSSEC-Tools for more information on random number generators and DNSSEC-Tools.)

The output is a set of files outlined below.

Table 6.1. zonesigner Output Files

FileDescription
output-file.signedThe signed zone file. The .signed is added by zonesigner.
keyset-zone-nameThe keyset for the zone. This is stored in the directory specified by the configuration file and may have to be sent to the parent zone - see Chapter 7, Creating a Signed Delegation - Child Zone Activity.
dsset-zone-nameThe dsset for the zone. This is stored in the directory specified by the configuration file and may have to be sent to the parent zone - see Chapter 7, Creating a Signed Delegation - Child Zone Activity.