# Install jdnssec-tools with Homebrew Java command-line tools for DNSSEC. Version 0.20.1 via Homebrew; verified 2026-06-22. ## Install ```sh sudo av install brew:jdnssec-tools ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install jdnssec-tools ``` Evidence: local Homebrew formula metadata ## Package facts - **Package key:** brew:jdnssec-tools - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.20.1 - **Source summary:** Java command-line tools for DNSSEC - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** LGPL-2.1-or-later - **Source archive:** - **Last updated:** 2026-06-22T14:03:48-07:00 - **Generated:** 2026-07-08T18:08:21+00:00 ## Executables - jdnssec-dstool (cli) - jdnssec-keygen (cli) - jdnssec-keyinfo (cli) - jdnssec-signkeyset (cli) - jdnssec-signrrset (cli) - jdnssec-signzone (cli) - jdnssec-tools (cli) - jdnssec-verifyzone (cli) - jdnssec-zoneformat (cli) - jdnssec-dstool (alias) - jdnssec-keygen (alias) - jdnssec-keyinfo (alias) - jdnssec-signkeyset (alias) - jdnssec-signrrset (alias) - jdnssec-signzone (alias) - jdnssec-tools (alias) - jdnssec-verifyzone (alias) - jdnssec-zoneformat (alias) ## Dependencies - openjdk ## Install behavior - Post-install hook: not defined - Bottle: available on all ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.20.1 - Package-manager updated: 2026-06-22 - Local data: ok - Upstream repository: https://github.com/dblacka/jdnssec-tools - info: No cached GitHub release or tag data was available. ## Project history and usage jdnssec-tools is a small Java command-line toolkit for DNSSEC operations. Its README describes it as a collection of DNSSEC tools intended as an addition or replacement for the DNSSEC tools shipped with BIND 9. ### Project history David Blacka authored the project and hosted its source on GitHub. The README ties the toolkit to dnsjava, Jakarta Commons CLI, slf4j, and Java cryptography support, which explains its role as a portable Java DNSSEC utility set rather than a daemon-centered DNS package. The ChangeLog shows a long-maintained niche tool: release 0.10 appeared in 2011, release 0.12 in 2012, elliptic-curve DNSSEC algorithm support arrived in the 2016-2017 period, and later releases updated dnsjava, logging, DS algorithm handling, and distribution formats. ### Adoption history Adoption appears package-oriented and specialist: Homebrew packages it as jdnssec-tools, while the upstream project distributes source, binary tarballs, and an executable jar through GitHub releases. Its audience is DNSSEC operators and testers who want Java-based zone signing, key generation, and verification tools. ### How it is used The package exposes commands such as jdnssec-keygen, jdnssec-signzone, jdnssec-verifyzone, jdnssec-signrrset, and jdnssec-zoneformat. The README demonstrates unpacking a release and running tools from the bin directory, with a later one-jar invocation path using java -jar. ### Why package nerds care For package nerds, jdnssec-tools is interesting because it packages DNSSEC maintenance primitives outside the usual BIND toolchain and keeps them tied to the Java DNS ecosystem. It is obscure, but it covers a real operational corner: reproducible command-line DNSSEC work in environments where Java is already the portable runtime. ### Timeline - 2011: ChangeLog records release 0.10 and refactoring of the command-line classes. - 2012: Release 0.12 updated dnsjava integration and verification behavior. - 2016: ECDSA P-256 and P-384 support was added for key generation, signing, and verification. - 2022: Release 0.17 updated dnsjava, switched from log4j to slf4j, and added CDS record generation. - 2024: Release 0.20 introduced Java 15 requirements for EdDSA support and a one-jar distribution. - 2026: The ChangeLog records a dnsjava 3.6.4 update adding DNS RR type coverage such as SVCB, HTTPS, and ZONEMD. ### Related projects - Related projects include BIND 9, whose DNSSEC utilities are the comparison point in the README, and dnsjava, the Java DNS library on which jdnssec-tools depends. ### Sources - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** jdnssec-tools - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Related links - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [openjdk](https://www.automicvault.com/pkg/brew/openjdk/) - Runtime dependency declared by Homebrew. - [bind](https://www.automicvault.com/pkg/brew/bind/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [dnsviz](https://www.automicvault.com/pkg/brew/dnsviz/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [getdns](https://www.automicvault.com/pkg/brew/getdns/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [knot](https://www.automicvault.com/pkg/brew/knot/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [knot-resolver](https://www.automicvault.com/pkg/brew/knot-resolver/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [ldns](https://www.automicvault.com/pkg/brew/ldns/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [sdns](https://www.automicvault.com/pkg/brew/sdns/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [unbound](https://www.automicvault.com/pkg/brew/unbound/) - Shares av.db curated category or tags: cli, dns, dnssec, networking. - [q](https://www.automicvault.com/pkg/brew/q/) - Local package facts share a topical domain. Shared terms: cli, command-line, dns, line, networking. - [aliddns](https://www.automicvault.com/pkg/brew/aliddns/) - Local package facts share a topical domain. Shared terms: cli, dns, networking. ## Combined YAML source View the package source record on GitHub. [combined/jdnssec-tools.yml](https://github.com/automic-vault/db/blob/main/combined/jdnssec-tools.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - cross-ecosystem install command graph