5253N/A - Copyright (C) 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC") 5253N/A - Permission to use, copy, modify, and/or distribute this software for any 5253N/A - purpose with or without fee is hereby granted, provided that the above 5253N/A - copyright notice and this permission notice appear in all copies. 5253N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 5253N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 5253N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 5253N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 5253N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 5253N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 5253N/A - PERFORMANCE OF THIS SOFTWARE. 5253N/A<!-- Converted by db4-upgrade version 1.0 --> 5253N/A <
corpauthor>Internet Systems Consortium, Inc.</
corpauthor>
5254N/A <
refentrytitle><
application>dnssec-revoke</
application></
refentrytitle>
6917N/A <
refmiscinfo>BIND9</
refmiscinfo>
6917N/A <
refname><
application>dnssec-revoke</
application></
refname>
5786N/A <
refpurpose>Set the REVOKED bit on a DNSSEC key</
refpurpose>
6917N/A <
holder>Internet Systems Consortium, Inc. ("ISC")</
holder>
5253N/A <
command>dnssec-revoke</
command>
6917N/A <
arg choice="opt" rep="norepeat"><
option>-hr</
option></
arg>
5253N/A <
arg choice="opt" rep="norepeat"><
option>-v <
replaceable class="parameter">level</
replaceable></
option></
arg>
5253N/A <
arg choice="opt" rep="norepeat"><
option>-V</
option></
arg>
5253N/A <
arg choice="opt" rep="norepeat"><
option>-K <
replaceable class="parameter">directory</
replaceable></
option></
arg>
5253N/A <
arg choice="opt" rep="norepeat"><
option>-E <
replaceable class="parameter">engine</
replaceable></
option></
arg>
5256N/A <
arg choice="opt" rep="norepeat"><
option>-f</
option></
arg>
5256N/A <
arg choice="opt" rep="norepeat"><
option>-R</
option></
arg>
5256N/A <
arg choice="req" rep="norepeat">keyfile</
arg>
6917N/A <
refsection><
info><
title>DESCRIPTION</
title></
info>
5253N/A <
para><
command>dnssec-revoke</
command>
5253N/A reads a DNSSEC key file, sets the REVOKED bit on the key as defined
5253N/A in RFC 5011, and creates a new pair of key files containing the
5578N/A <
refsection><
info><
title>OPTIONS</
title></
info>
6917N/A Emit usage message and exit.
5305N/A <
term>-K <
replaceable class="parameter">directory</
replaceable></
term>
5305N/A Sets the directory in which the key files are to reside.
6917N/A After writing the new keyset files remove the original keyset
6917N/A <
term>-v <
replaceable class="parameter">level</
replaceable></
term>
5253N/A Prints version information.
5253N/A <
term>-E <
replaceable class="parameter">engine</
replaceable></
term>
5525N/A Specifies the cryptographic hardware to use, when applicable.
5253N/A When BIND is built with OpenSSL PKCS#11 support, this defaults
5305N/A to the string "pkcs11", which identifies an OpenSSL engine
5253N/A that can drive a cryptographic accelerator or hardware service
5253N/A module. When BIND is built with native PKCS#11 cryptography
5253N/A (--enable-native-pkcs11), it defaults to the path of the PKCS#11
5253N/A provider library specified via "--with-pkcs11".
5253N/A Force overwrite: Causes <
command>dnssec-revoke</
command> to
5253N/A write the new key pair even if a file already exists matching
5253N/A the algorithm and key ID of the revoked key.
5256N/A Print the key tag of the key with the REVOKE bit set but do
6917N/A <
refsection><
info><
title>SEE ALSO</
title></
info>
6917N/A <
refentrytitle>dnssec-keygen</
refentrytitle><
manvolnum>8</
manvolnum>
6917N/A <
citetitle>BIND 9 Administrator Reference Manual</
citetitle>,
6917N/A <
citetitle>RFC 5011</
citetitle>.