dnssec-revoke.docbook revision 6ea2385360e9e2167e65f9286447da9eea189457
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
bef75d63d74f58abc0f834ed271526672777ba29Automatic Updater [<!ENTITY mdash "&#8212;">]>
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User<!--
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Copyright (C) 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User -
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater - Permission to use, copy, modify, and/or distribute this software for any
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater - purpose with or without fee is hereby granted, provided that the above
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater - copyright notice and this permission notice appear in all copies.
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater -
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
b6b8f8a0362da8c749021c4b6376cfb96047912bTinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater - PERFORMANCE OF THIS SOFTWARE.
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater-->
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater<!-- $Id: dnssec-revoke.docbook,v 1.9 2011/10/20 23:46:51 tbox Exp $ -->
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater<refentry id="man.dnssec-revoke">
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <refentryinfo>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <date>June 1, 2009</date>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refentryinfo>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater
b6b8f8a0362da8c749021c4b6376cfb96047912bTinderbox User <refmeta>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <refentrytitle><application>dnssec-revoke</application></refentrytitle>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <manvolnum>8</manvolnum>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <refmiscinfo>BIND9</refmiscinfo>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </refmeta>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <refnamediv>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <refname><application>dnssec-revoke</application></refname>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <refpurpose>Set the REVOKED bit on a DNSSEC key</refpurpose>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </refnamediv>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <docinfo>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <copyright>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <year>2009</year>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <year>2011</year>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <year>2014</year>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User </copyright>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User </docinfo>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <refsynopsisdiv>
9d557856c2a19ec95ee73245f60a92f8675cf5baTinderbox User <cmdsynopsis>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <command>dnssec-revoke</command>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <arg><option>-hr</option></arg>
9d557856c2a19ec95ee73245f60a92f8675cf5baTinderbox User <arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <arg><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg><option>-E <replaceable class="parameter">engine</replaceable></option></arg>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <arg><option>-f</option></arg>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <arg><option>-R</option></arg>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <arg choice="req">keyfile</arg>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </cmdsynopsis>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </refsynopsisdiv>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <refsect1>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <title>DESCRIPTION</title>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <para><command>dnssec-revoke</command>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater reads a DNSSEC key file, sets the REVOKED bit on the key as defined
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater in RFC 5011, and creates a new pair of key files containing the
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater now-revoked key.
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </para>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </refsect1>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <refsect1>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <title>OPTIONS</title>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <variablelist>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <varlistentry>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <term>-h</term>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <listitem>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <para>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater Emit usage message and exit.
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </para>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </listitem>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </varlistentry>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <varlistentry>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <term>-K <replaceable class="parameter">directory</replaceable></term>
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User <listitem>
b6b8f8a0362da8c749021c4b6376cfb96047912bTinderbox User <para>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater Sets the directory in which the key files are to reside.
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </para>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </listitem>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </varlistentry>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <varlistentry>
b6b8f8a0362da8c749021c4b6376cfb96047912bTinderbox User <term>-r</term>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <listitem>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater <para>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater After writing the new keyset files remove the original keyset
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater files.
1700442a7751c2bbdafe2d039cebbd8316496957Tinderbox User </para>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </listitem>
fc2381b901eb162810f54a11cc512b95f55a60dfAutomatic Updater </varlistentry>
<varlistentry>
<term>-v <replaceable class="parameter">level</replaceable></term>
<listitem>
<para>
Sets the debugging level.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>-E <replaceable class="parameter">engine</replaceable></term>
<listitem>
<para>
Specifies the cryptographic hardware to use, when applicable.
</para>
<para>
When BIND is built with OpenSSL PKCS#11 support, this defaults
to the string "pkcs11", which identifies an OpenSSL engine
that can drive a cryptographic accelerator or hardware service
module. When BIND is built with native PKCS#11 cryptography
(--enable-native-pkcs11), it defaults to the path of the PKCS#11
provider library specified via "--with-pkcs11".
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>-f</term>
<listitem>
<para>
Force overwrite: Causes <command>dnssec-revoke</command> to
write the new key pair even if a file already exists matching
the algorithm and key ID of the revoked key.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>-R</term>
<listitem>
<para>
Print the key tag of the key with the REVOKE bit set but do
not revoke the key.
</para>
</listitem>
</varlistentry>
</variablelist>
</refsect1>
<refsect1>
<title>SEE ALSO</title>
<para><citerefentry>
<refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citetitle>BIND 9 Administrator Reference Manual</citetitle>,
<citetitle>RFC 5011</citetitle>.
</para>
</refsect1>
<refsect1>
<title>AUTHOR</title>
<para><corpauthor>Internet Systems Consortium</corpauthor>
</para>
</refsect1>
</refentry><!--
- Local variables:
- mode: sgml
- End:
-->