@@ -564,14 +564,15 @@ that yourself by outputting records in the well-known Bind9 zonefile format.
564564When performing a key rollover, and when performing any of the checks, any
565565superfluous records that are to be removed are output in the form of
566566comments where the leading semicolon (";") is not followed by a space (" ").
567- That makes them easy to identify with grep (i.e., grep "^;[^ ]" for
568- superfluous records to be removed, and grep -v "^;[^ ]" for missing records
569- to be published). Perhaps a plugin system could be added to automate updates
570- for different DNS server software and different DNS service providers, but
571- it should be easy enough to write a separate script to read the output of
572- danectl and do what you need with it. And anyway, DANE-related DNS updates
573- probably won't be frequent enough for their automation to be important. But
574- of course, your mileage may vary.
567+ That makes them easy to identify with grep (i.e., grep '^;[^ ]' for
568+ superfluous records to be removed, and grep -v '^;[^ ]' for missing records
569+ to be published). In either case, the grep output includes a comment that can
570+ be removed by piping through grep -v '; ' as well. Perhaps a plugin system
571+ could be added to automate updates for different DNS server software and
572+ different DNS service providers, but it should be easy enough to write a
573+ separate script to read the output of danectl and do what you need with it.
574+ And anyway, DANE-related DNS updates probably won't be frequent enough for
575+ their automation to be important. But of course, your mileage may vary.
575576
576577REQUIREMENTS
577578
0 commit comments