This repository contains utilities to process DNS trust anchors formatted in XML.
python3 dnssec_ta_tool.py --format dnskey --verbose
python3 dnssec_ta_tool.py --format ds --output trust-anchor-file.conf
python3 dnssec_ta_tool.py --format bind-managed --output managed-keys.bind
python3 dnssec_ta_tool.py --format bind-trusted --output trusted-keys.bind
Before use, all trust anchors should be validated. Example code for how to do this using OpenSSL is available in the Makefile.