dnssec-importkey.docbook revision 0c91911b4d1e872b87eaf6431ed47fe24d18dd43
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
19c7b1a0293498a3e36692c59646ed6e15ffc8d0Tinderbox User "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont [<!ENTITY mdash "—">]>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - Copyright (C) 2009-2011 Internet Systems Consortium, Inc. ("ISC")
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - Permission to use, copy, modify, and/or distribute this software for any
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - purpose with or without fee is hereby granted, provided that the above
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - copyright notice and this permission notice appear in all copies.
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt - PERFORMANCE OF THIS SOFTWARE.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<!-- $Id: dnssec-importkey.docbook,v 1.15 2011/11/03 20:21:37 each Exp $ -->
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <refentryinfo>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refentryinfo>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <refentrytitle><application>dnssec-importkey</application></refentrytitle>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <refname><application>dnssec-importkey</application></refname>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <refpurpose>Import DNSKEY records from external systems so they can be managed.</refpurpose>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont </refnamediv>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
784a904bd06c7492361ed09a882d10c636b1291bAutomatic Updater <refsynopsisdiv>
99d8f5a70440ee8b63ab1745d713b96dde890546Tinderbox User <cmdsynopsis>
19c7b1a0293498a3e36692c59646ed6e15ffc8d0Tinderbox User <arg><option>-f <replaceable class="parameter">filename</replaceable></option></arg>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <arg><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <arg><option>-P <replaceable class="parameter">date/offset</replaceable></option></arg>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <arg><option>-D <replaceable class="parameter">date/offset</replaceable></option></arg>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont </cmdsynopsis>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsynopsisdiv>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt read a DNSKEY record and generated a .key/.private key pair.
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews Publication (<option>-P</option>) and deletions (<option>-D</option>)
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt times can be set for the key.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <variablelist>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <varlistentry>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <term>-f <replaceable class="parameter">filename</replaceable></term>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Filename to read the key from.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </varlistentry>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <varlistentry>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <term>-K <replaceable class="parameter">directory</replaceable></term>
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont Sets the directory in which the key files are to reside.
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont </varlistentry>
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt <varlistentry>
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt <term>-L <replaceable class="parameter">ttl</replaceable></term>
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt Sets the default TTL to use for this key when it is converted
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont into a DNSKEY RR. If the key is imported into a zone,
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont this is the TTL that will be used for it, unless there was
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont already a DNSKEY RRset in place, in which case the existing TTL
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont would take precedence. importkey the default TTL to
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont <literal>0</literal> or <literal>none</literal> removes it.
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont </varlistentry>
30eec077db2bdcb6f2a0dc388a3cdde2ede75ec1Mark Andrews <varlistentry>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews Emit usage message and exit.
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont </varlistentry>
aaaf8d4f4873d21e55c3ffb4f656203d08339865Mark Andrews <varlistentry>
aaaf8d4f4873d21e55c3ffb4f656203d08339865Mark Andrews <term>-v <replaceable class="parameter">level</replaceable></term>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews Sets the debugging level.
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews </varlistentry>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews </variablelist>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews If the argument begins with a '+' or '-', it is interpreted as
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews an offset from the present time. For convenience, if such an offset
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont then the offset is computed in years (defined as 365 24-hour days,
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont ignoring leap years), months (defined as 30 24-hour days), weeks,
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt days, hours, or minutes, respectively. Without a suffix, the offset
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews is computed in seconds. To unset a date, use 'none'.
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt <variablelist>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <varlistentry>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <term>-P <replaceable class="parameter">date/offset</replaceable></term>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews Sets the date on which a key is to be published to the zone.
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt After that date, the key will be included in the zone but will
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt not be used to sign it.
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews </varlistentry>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <varlistentry>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <term>-D <replaceable class="parameter">date/offset</replaceable></term>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews Sets the date on which the key is to be deleted. After that
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews date, the key will no longer be included in the zone. (It
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews may remain in the key repository, however.)
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews </varlistentry>
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont </variablelist>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews </citerefentry>,
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <citerefentry>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <refentrytitle>dnssec-signzone</refentrytitle><manvolnum>8</manvolnum>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews </citerefentry>,
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <citetitle>BIND 9 Administrator Reference Manual</citetitle>,
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews <para><corpauthor>Internet Systems Consortium</corpauthor>
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews - Local variables:
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews - mode: sgml