dnssec-revoke.docbook revision 42782931073786f98d3d0a617351db40066949a4
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync [<!ENTITY mdash "—">]>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - Copyright (C) 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - Permission to use, copy, modify, and/or distribute this software for any
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - purpose with or without fee is hereby granted, provided that the above
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - copyright notice and this permission notice appear in all copies.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - PERFORMANCE OF THIS SOFTWARE.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <refentryinfo>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </refentryinfo>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <refentrytitle><application>dnssec-revoke</application></refentrytitle>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <refnamediv>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <refname><application>dnssec-revoke</application></refname>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <refpurpose>Set the REVOKED bit on a DNSSEC key</refpurpose>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </refnamediv>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <copyright>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </copyright>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <refsynopsisdiv>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <cmdsynopsis>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <arg><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <arg><option>-E <replaceable class="parameter">engine</replaceable></option></arg>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </cmdsynopsis>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </refsynopsisdiv>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync reads a DNSSEC key file, sets the REVOKED bit on the key as defined
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync in RFC 5011, and creates a new pair of key files containing the
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync now-revoked key.
4136ffde6159b375ef0fe72f862f8b84bf9b2e8bvboxsync </refsect1>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <variablelist>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync Emit usage message and exit.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </listitem>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <term>-K <replaceable class="parameter">directory</replaceable></term>
4136ffde6159b375ef0fe72f862f8b84bf9b2e8bvboxsync Sets the directory in which the key files are to reside.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </listitem>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </varlistentry>
4136ffde6159b375ef0fe72f862f8b84bf9b2e8bvboxsync <varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync After writing the new keyset files remove the original keyset
76a9bce2b9ca58813ae03900c71fa04b93a04f1avboxsync </listitem>
76a9bce2b9ca58813ae03900c71fa04b93a04f1avboxsync </varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <varlistentry>
4136ffde6159b375ef0fe72f862f8b84bf9b2e8bvboxsync <term>-v <replaceable class="parameter">level</replaceable></term>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync Sets the debugging level.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </listitem>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </varlistentry>
76a9bce2b9ca58813ae03900c71fa04b93a04f1avboxsync <varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync Prints version information.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </listitem>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <term>-E <replaceable class="parameter">engine</replaceable></term>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync Specifies the cryptographic hardware to use, when applicable.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync When BIND is built with OpenSSL PKCS#11 support, this defaults
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync to the string "pkcs11", which identifies an OpenSSL engine
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync that can drive a cryptographic accelerator or hardware service
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync module. When BIND is built with native PKCS#11 cryptography
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync (--enable-native-pkcs11), it defaults to the path of the PKCS#11
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync provider library specified via "--with-pkcs11".
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </listitem>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync Force overwrite: Causes <command>dnssec-revoke</command> to
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync write the new key pair even if a file already exists matching
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync the algorithm and key ID of the revoked key.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </listitem>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync Print the key tag of the key with the REVOKE bit set but do
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync not revoke the key.
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </listitem>
76a9bce2b9ca58813ae03900c71fa04b93a04f1avboxsync </varlistentry>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </variablelist>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </refsect1>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </citerefentry>,
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync <citetitle>BIND 9 Administrator Reference Manual</citetitle>,
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </refsect1>
76a9bce2b9ca58813ae03900c71fa04b93a04f1avboxsync <para><corpauthor>Internet Systems Consortium</corpauthor>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync </refsect1>
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - Local variables:
4fd606d1f5abe38e1f42c38de1d2e895166bd0f4vboxsync - mode: sgml