diff --git a/examples/ldns-signzone.1 b/examples/ldns-signzone.1 index b1cdeebf..27c51144 100644 --- a/examples/ldns-signzone.1 +++ b/examples/ldns-signzone.1 @@ -16,8 +16,8 @@ KEY .SH DESCRIPTION \fBldns-signzone\fR is used to generate a DNSSEC signed zone. When run it -will create a new zonefile that contains RRSIG and NSEC resource records, as -specified in RFC 4033, RFC 4034 and RFC 4035. +will create a new zonefile that contains RRSIG and NSEC(3) resource records, +as specified in RFC 4033, RFC 4034 and RFC 4035. Keys must be specified by their base name (i.e. without .private). If the DNSKEY that belongs to the key in the .private file is not present @@ -25,9 +25,9 @@ in the zone, it will be read from the file .key. If that file does not exist, the DNSKEY value will be generated from the private key. -Multiple keys can be specified, Key Signing Keys are used as such when +Multiple keys can be specified. Key Signing Keys are used as such when they are either already present in the zone, or specified in a .key -file, and have the KSK bit set. +file, and have the SEP bit set. .SH OPTIONS .TP