A set of tools for working with DNSSEC, using BearSSL for cryptography.

- dnskey: generate DNSKEY records from private keys
- ds: generate DS records for parent zones
- nsec: generate NSEC records for zones
- rrsig: sign records in zones, generating RRSIG records
- tlsa: generate DANE TLSA records for certificates

See also https://mforney.org/blog/2020-05-21-securing-your-zone-with-dnssec-and-dane.html
