2N/A<!
DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN" 2N/A [<!ENTITY mdash "—">]>
2N/A - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") 2N/A - Permission to use, copy, modify, and/or distribute this software for any 2N/A - purpose with or without fee is hereby granted, provided that the above 2N/A - copyright notice and this permission notice appear in all copies. 2N/A - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 2N/A - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 2N/A - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 2N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 2N/A - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 2N/A - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 2N/A - PERFORMANCE OF THIS SOFTWARE. 2N/A <
date>June 1, 2009</
date>
2N/A <
refentrytitle><
application>dnssec-revoke</
application></
refentrytitle>
2N/A <
manvolnum>8</
manvolnum>
2N/A <
refmiscinfo>BIND9</
refmiscinfo>
2N/A <
refname><
application>dnssec-revoke</
application></
refname>
2N/A <
refpurpose>Set the REVOKED bit on a DNSSEC key</
refpurpose>
2N/A <
holder>Internet Systems Consortium, Inc. ("ISC")</
holder>
2N/A <
command>dnssec-revoke</
command>
2N/A <
arg><
option>-hr</
option><
arg>
2N/A <
arg><
option>-v <
replaceable class="parameter">level</
replaceable></
option></
arg>
2N/A <
arg><
option>-d <
replaceable class="parameter">directory</
replaceable></
option></
arg>
2N/A <
arg><
option>-f</
option></
arg>
2N/A <
arg choice="req">keyfile</
arg>
2N/A <
title>DESCRIPTION</
title>
2N/A <
para><
command>dnssec-revoke</
command>
2N/A reads a DNSSEC key file, sets the REVOKED bit on the key as defined
2N/A in RFC 5011, and creates a new pair of key files containing the now-
2N/A <
title>OPTIONS</
title>
2N/A Emit usage message and exit.
2N/A <
term>-d <
replaceable class="parameter">directory</
replaceable></
term>
2N/A Sets the directory in which the key files are to reside.
2N/A After writing the new keyset files remove the original keyset
<
term>-v <
replaceable class="parameter">level</
replaceable></
term>
Sets the debugging level.
Force overwrite: Causes <
command>dnssec-revoke</
command> to
write the new key pair even if a file already exists matching
the algorithm and key ID of the revoked key.
<
refentrytitle>dnssec-keygen</
refentrytitle><
manvolnum>8</
manvolnum>
<
citetitle>BIND 9 Administrator Reference Manual</
citetitle>,
<
citetitle>RFC 5011</
citetitle>.
<
para><
corpauthor>Internet Systems Consortium</
corpauthor>