dnssec-revoke.docbook revision 8b78c993cb475cc94e88560941b28c37684789d9
0N/A<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
0N/A "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
0N/A [<!ENTITY mdash "&#8212;">]>
0N/A<!--
0N/A - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
0N/A -
0N/A - Permission to use, copy, modify, and/or distribute this software for any
0N/A - purpose with or without fee is hereby granted, provided that the above
0N/A - copyright notice and this permission notice appear in all copies.
0N/A -
0N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
0N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
0N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
0N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
0N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
0N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
0N/A - PERFORMANCE OF THIS SOFTWARE.
0N/A-->
0N/A
0N/A<!-- $Id: dnssec-revoke.docbook,v 1.6 2009/10/05 17:30:49 fdupont Exp $ -->
0N/A<refentry id="man.dnssec-revoke">
0N/A <refentryinfo>
0N/A <date>June 1, 2009</date>
0N/A </refentryinfo>
0N/A
0N/A <refmeta>
0N/A <refentrytitle><application>dnssec-revoke</application></refentrytitle>
0N/A <manvolnum>8</manvolnum>
0N/A <refmiscinfo>BIND9</refmiscinfo>
0N/A </refmeta>
0N/A
0N/A <refnamediv>
0N/A <refname><application>dnssec-revoke</application></refname>
0N/A <refpurpose>Set the REVOKED bit on a DNSSEC key</refpurpose>
0N/A </refnamediv>
0N/A
0N/A <docinfo>
0N/A <copyright>
0N/A <year>2009</year>
0N/A <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
0N/A </copyright>
0N/A </docinfo>
0N/A
0N/A <refsynopsisdiv>
0N/A <cmdsynopsis>
0N/A <command>dnssec-revoke</command>
0N/A <arg><option>-hr</option></arg>
0N/A <arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
0N/A <arg><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
0N/A <arg><option>-E <replaceable class="parameter">engine</replaceable></option></arg>
0N/A <arg><option>-f</option></arg>
0N/A <arg choice="req">keyfile</arg>
0N/A </cmdsynopsis>
0N/A </refsynopsisdiv>
0N/A
0N/A <refsect1>
0N/A <title>DESCRIPTION</title>
0N/A <para><command>dnssec-revoke</command>
0N/A reads a DNSSEC key file, sets the REVOKED bit on the key as defined
0N/A in RFC 5011, and creates a new pair of key files containing the
0N/A now-revoked key.
0N/A </para>
0N/A </refsect1>
0N/A
0N/A <refsect1>
0N/A <title>OPTIONS</title>
0N/A
0N/A <variablelist>
0N/A <varlistentry>
0N/A <term>-h</term>
0N/A <listitem>
0N/A <para>
0N/A Emit usage message and exit.
0N/A </para>
0N/A </listitem>
0N/A </varlistentry>
0N/A
0N/A <varlistentry>
0N/A <term>-K <replaceable class="parameter">directory</replaceable></term>
0N/A <listitem>
0N/A <para>
0N/A Sets the directory in which the key files are to reside.
0N/A </para>
0N/A </listitem>
0N/A </varlistentry>
0N/A
0N/A <varlistentry>
0N/A <term>-r</term>
0N/A <listitem>
0N/A <para>
0N/A After writing the new keyset files remove the original keyset
0N/A files.
0N/A </para>
0N/A </listitem>
0N/A </varlistentry>
0N/A
0N/A <varlistentry>
0N/A <term>-v <replaceable class="parameter">level</replaceable></term>
0N/A <listitem>
0N/A <para>
0N/A Sets the debugging level.
0N/A </para>
0N/A </listitem>
</varlistentry>
<varlistentry>
<term>-E <replaceable class="parameter">engine</replaceable></term>
<listitem>
<para>
Use the given OpenSSL engine. When compiled with PKCS#11 support
it defaults to pcks11, the empty name resets it to no engine.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>-f</term>
<listitem>
<para>
Force overwrite: Causes <command>dnssec-revoke</command> to
write the new key pair even if a file already exists matching
the algorithm and key ID of the revoked key.
</para>
</listitem>
</varlistentry>
</variablelist>
</refsect1>
<refsect1>
<title>SEE ALSO</title>
<para><citerefentry>
<refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citetitle>BIND 9 Administrator Reference Manual</citetitle>,
<citetitle>RFC 5011</citetitle>.
</para>
</refsect1>
<refsect1>
<title>AUTHOR</title>
<para><corpauthor>Internet Systems Consortium</corpauthor>
</para>
</refsect1>
</refentry><!--
- Local variables:
- mode: sgml
- End:
-->