danetool 3.5.8 Copyright (C) 2000-2017 Free Software Foundation, and others, all rights reserved. This is free software. It is licensed for use, modification and redistribution under the terms of the GNU General Public License, version 3 or later <http://gnu.org/licenses/gpl.html> Please send bug reports to: <bugs@gnutls.org>

danetool - GnuTLS DANE tool Usage: danetool [ -<flag> [<val>] | --<name>[{=| }<val>] ]... -d, --debug=num Enable debugging - it must be in the range: 0 to 9999 -V, --verbose More verbose output - may appear multiple times --infile=file Input file - file must pre-exist --outfile=str Output file --load-pubkey=str Loads a public key file --load-certificate=str Loads a certificate file --dlv=str Sets a DLV file --hash=str Hash algorithm to use for signing --check=str Check a host's DANE TLSA entry --check-ee Check only the end-entity's certificate --check-ca Check only the CA's certificate --tlsa-rr Print the DANE RR data on a certificate or public key - requires the option 'host' --host=str Specify the hostname to be used in the DANE RR --proto=str The protocol set for DANE data (tcp, udp etc.) --port=str The port or service to connect to, for DANE data --app-proto=str an alias for the 'starttls-proto' option --starttls-proto=str The application protocol to be used to obtain the server's certificate (https, ftp, smtp, imap, ldap, xmpp) --ca Whether the provided certificate or public key is a Certificate Authority --x509 Use the hash of the X.509 certificate, rather than the public key --local an alias for the 'domain' option - enabled by default --domain The provided certificate or public key is issued by the local domain - disabled as '--no-domain' - enabled by default --local-dns Use the local DNS server for DNSSEC resolving - disabled as '--no-local-dns' --insecure Do not verify any DNSSEC signature --inder Use DER format for input certificates and private keys - disabled as '--no-inder' --inraw an alias for the 'inder' option --print-raw Print the received DANE data in raw format - disabled as '--no-print-raw' --quiet Suppress several informational messages -v, --version[=arg] output version information and exit -h, --help display extended usage information and exit -!, --more-help extended usage information passed thru pager Options are specified by doubled hyphens and their name or by a single hyphen and the flag character. Tool to generate and check DNS resource records for the DANE protocol. Please send bug reports to: <bugs@gnutls.org>