[dns-operations] anybody awake over at comcast.net?

[Matthew Richardson]

On Tue, 9 Feb 2021 16:43:20 +0000, Duane Wessels wrote:-

>If you use Nagios or something compatible, there is this:
>
>http://dns.measurement-factory.com/tools/nagios-plugins/check_zone_rrsig_expiration.html
>
>But it only checks one RR (default SOA) since it doesn't assume access to the whole zone.
>That would be a good upgrade, though, to have it axfr the zone and check everything.

Are there any existing tools which would take a whole zonefile and check
the expirations?  In a similar way to (for example) dnssec-verify from
Bind.

Best wishes,
Matthew