dnssec-revoke.docbook revision 85f5bb5274e7d4e829646cf47dae8f9f95c227f8
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync [<!ENTITY mdash "&#8212;">]>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync<!--
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync -
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - Permission to use, copy, modify, and/or distribute this software for any
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - purpose with or without fee is hereby granted, provided that the above
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - copyright notice and this permission notice appear in all copies.
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync -
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync - PERFORMANCE OF THIS SOFTWARE.
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync-->
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync<!-- $Id: dnssec-revoke.docbook,v 1.5 2009/07/20 11:56:35 fdupont Exp $ -->
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync<refentry id="man.dnssec-revoke">
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <refentryinfo>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <date>June 1, 2009</date>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </refentryinfo>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <refmeta>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <refentrytitle><application>dnssec-revoke</application></refentrytitle>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <manvolnum>8</manvolnum>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <refmiscinfo>BIND9</refmiscinfo>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </refmeta>
8161020821499b941febdacc7d42e994b84630ddvboxsync
8161020821499b941febdacc7d42e994b84630ddvboxsync <refnamediv>
8161020821499b941febdacc7d42e994b84630ddvboxsync <refname><application>dnssec-revoke</application></refname>
8161020821499b941febdacc7d42e994b84630ddvboxsync <refpurpose>Set the REVOKED bit on a DNSSEC key</refpurpose>
8161020821499b941febdacc7d42e994b84630ddvboxsync </refnamediv>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <docinfo>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <copyright>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <year>2009</year>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
8161020821499b941febdacc7d42e994b84630ddvboxsync </copyright>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </docinfo>
8161020821499b941febdacc7d42e994b84630ddvboxsync
8161020821499b941febdacc7d42e994b84630ddvboxsync <refsynopsisdiv>
8161020821499b941febdacc7d42e994b84630ddvboxsync <cmdsynopsis>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <command>dnssec-revoke</command>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <arg><option>-hr</option></arg>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <arg><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <arg><option>-f</option></arg>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <arg choice="req">keyfile</arg>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </cmdsynopsis>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </refsynopsisdiv>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <refsect1>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <title>DESCRIPTION</title>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <para><command>dnssec-revoke</command>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync reads a DNSSEC key file, sets the REVOKED bit on the key as defined
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync in RFC 5011, and creates a new pair of key files containing the
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync now-revoked key.
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </para>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </refsect1>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <refsect1>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <title>OPTIONS</title>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <variablelist>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <varlistentry>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <term>-h</term>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <listitem>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <para>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync Emit usage message and exit.
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </para>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </listitem>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </varlistentry>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <varlistentry>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <term>-K <replaceable class="parameter">directory</replaceable></term>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <listitem>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync <para>
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync Sets the directory in which the key files are to reside.
13fdd42f1fc3e519650037a920e6a54c24973866vboxsync </para>
</listitem>
</varlistentry>
<varlistentry>
<term>-r</term>
<listitem>
<para>
After writing the new keyset files remove the original keyset
files.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>-v <replaceable class="parameter">level</replaceable></term>
<listitem>
<para>
Sets the debugging level.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>-f</term>
<listitem>
<para>
Force overwrite: Causes <command>dnssec-revoke</command> to
write the new key pair even if a file already exists matching
the algorithm and key ID of the revoked key.
</para>
</listitem>
</varlistentry>
</variablelist>
</refsect1>
<refsect1>
<title>SEE ALSO</title>
<para><citerefentry>
<refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citetitle>BIND 9 Administrator Reference Manual</citetitle>,
<citetitle>RFC 5011</citetitle>.
</para>
</refsect1>
<refsect1>
<title>AUTHOR</title>
<para><corpauthor>Internet Systems Consortium</corpauthor>
</para>
</refsect1>
</refentry><!--
- Local variables:
- mode: sgml
- End:
-->