.TH s/qmail: dnstlsa 8
.SH NAME
dnstlsa
.SH SYNOPSIS
.B dnstlsa 
.I [-v] [-p port] [-u(dp)|-t(cp)] fqdn
.SH DESCRIPTION
.B dnstlsa
uses the 
.I fqdn
for a host employing a
DNS query for a synthesized hostname given as
.I _port._[tcp|udp].fqdn
while doing an initial CNAME resolution
followed by a TLSA query
and displays the result(s).
If
.I -p\ port
is missing
.I port\ 25
is assumed.
If either
.I -u
or 
.I -t
is omitted, 
.I tcp 
is used.
Each entry is shown on one line, telling
.IR Usage ,
.IR Selector ,
.IR Matching\ Type
together with the hex-encoded fingerprint or certificate.

In verbose mode
.I -v
the synthezised record is displayed as well.
.SH "EXIT CODES"
.B dnstlsa
returns
.I 0
on success,
.I 1
for DNS query errors, and 
.I 111
in case of memory errors.
.SH "SEE ALSO"
dnstxt(8),
dnsfq(8),
dnsmxip(8),
dnsptr(8).