if [ -z "$DOMAIN" ]; then echo "You must \"export DOMAIN=yourdomain\" first"; exit 1; fi
read -p "Temporary filename for KSK: " fname
echo "Generating 2048 bit RSA KSK"
openssl genrsa -rand /dev/random 2048 > $fname
pem2dnskey $fname $DOMAIN. 8 | tee $fname.out