dnssec-revoke.docbook revision cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen [<!ENTITY mdash "&#8212;">]>
dbffb9e8b87b771851700a1acc353aa62b5ab7d7Timo Sirainen<!--
dbffb9e8b87b771851700a1acc353aa62b5ab7d7Timo Sirainen - Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC")
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen -
258adfa09081ea8600a39759d486e678b5aa5f60Timo Sirainen - Permission to use, copy, modify, and/or distribute this software for any
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen - purpose with or without fee is hereby granted, provided that the above
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen - copyright notice and this permission notice appear in all copies.
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen -
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dbffb9e8b87b771851700a1acc353aa62b5ab7d7Timo Sirainen - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dbffb9e8b87b771851700a1acc353aa62b5ab7d7Timo Sirainen - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen - PERFORMANCE OF THIS SOFTWARE.
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen-->
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen<!-- $Id: dnssec-revoke.docbook,v 1.2 2009/06/30 02:52:32 each Exp $ -->
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen<refentry id="man.dnssec-revoke">
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen <refentryinfo>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <date>June 1, 2009</date>
4afaedfcbd43896befbe1fd5c10eba42246f3fdeTimo Sirainen </refentryinfo>
4afaedfcbd43896befbe1fd5c10eba42246f3fdeTimo Sirainen
eed03830015b7138b9d4522e72bef650aa24b45fTimo Sirainen <refmeta>
eed03830015b7138b9d4522e72bef650aa24b45fTimo Sirainen <refentrytitle><application>dnssec-revoke</application></refentrytitle>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <manvolnum>8</manvolnum>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <refmiscinfo>BIND9</refmiscinfo>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </refmeta>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <refnamediv>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <refname><application>dnssec-revoke</application></refname>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <refpurpose>Set the REVOKED bit on a DNSSEC key</refpurpose>
9c45821d7448c6f63391d318a6dff785e46e58eeTimo Sirainen </refnamediv>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen
9c45821d7448c6f63391d318a6dff785e46e58eeTimo Sirainen <docinfo>
9c45821d7448c6f63391d318a6dff785e46e58eeTimo Sirainen <copyright>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <year>2009</year>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </copyright>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </docinfo>
2ef5254ab6b446b93ce7733bc96eeefa6f731ee4Timo Sirainen
2ef5254ab6b446b93ce7733bc96eeefa6f731ee4Timo Sirainen <refsynopsisdiv>
2ef5254ab6b446b93ce7733bc96eeefa6f731ee4Timo Sirainen <cmdsynopsis>
2ef5254ab6b446b93ce7733bc96eeefa6f731ee4Timo Sirainen <command>dnssec-revoke</command>
2ef5254ab6b446b93ce7733bc96eeefa6f731ee4Timo Sirainen <arg><option>-hr</option><arg>
291f1e54dcb8c7f38e5b78afc1eaf518e3756692Timo Sirainen <arg><option>-v <replaceable class="parameter">level</replaceable></option></arg>
291f1e54dcb8c7f38e5b78afc1eaf518e3756692Timo Sirainen <arg><option>-d <replaceable class="parameter">directory</replaceable></option></arg>
291f1e54dcb8c7f38e5b78afc1eaf518e3756692Timo Sirainen <arg><option>-f</option></arg>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <arg choice="req">keyfile</arg>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </cmdsynopsis>
2ef5254ab6b446b93ce7733bc96eeefa6f731ee4Timo Sirainen </refsynopsisdiv>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <refsect1>
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen <title>DESCRIPTION</title>
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen <para><command>dnssec-revoke</command>
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen reads a DNSSEC key file, sets the REVOKED bit on the key as defined
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen in RFC 5011, and creates a new pair of key files containing the now-
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen revoked key.
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen </para>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </refsect1>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <refsect1>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <title>OPTIONS</title>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen
16d8197506b63d2ca7e38447df9faf1612c1f288Timo Sirainen <variablelist>
16d8197506b63d2ca7e38447df9faf1612c1f288Timo Sirainen <varlistentry>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <term>-h</term>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <listitem>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <para>
16d8197506b63d2ca7e38447df9faf1612c1f288Timo Sirainen Emit usage message and exit.
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </para>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </listitem>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </varlistentry>
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen <varlistentry>
44f3f472a49078312432b785fddcfe7b95928391Timo Sirainen <term>-d <replaceable class="parameter">directory</replaceable></term>
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen <listitem>
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen <para>
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen Sets the directory in which the key files are to reside.
f9db221d0793f05c4631885e71f98145428a7e1bTimo Sirainen </para>
258adfa09081ea8600a39759d486e678b5aa5f60Timo Sirainen </listitem>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </varlistentry>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <varlistentry>
21fdf5394fbc307673b6c4b33f2497751a9ca1feTimo Sirainen <term>-r</term>
21fdf5394fbc307673b6c4b33f2497751a9ca1feTimo Sirainen <listitem>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <para>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen After writing the new keyset files remove the original keyset
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen files.
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen </para>
92e6bb6497f8c9d57bff334a5c9f31bc2f040394Timo Sirainen </listitem>
92e6bb6497f8c9d57bff334a5c9f31bc2f040394Timo Sirainen </varlistentry>
92e6bb6497f8c9d57bff334a5c9f31bc2f040394Timo Sirainen
92e6bb6497f8c9d57bff334a5c9f31bc2f040394Timo Sirainen <varlistentry>
58c61ac5650583d21c891e61e051c614290d31fbTimo Sirainen <term>-v <replaceable class="parameter">level</replaceable></term>
<listitem>
<para>
Sets the debugging level.
</para>
</listitem>
</varlistentry>
<varlistentry>
<term>-f</term>
<listitem>
<para>
Force overwrite: Causes <command>dnssec-revoke</command> to
write the new key pair even if a file already exists matching
the algorithm and key ID of the revoked key.
</para>
</listitem>
</varlistentry>
</variablelist>
</refsect1>
<refsect1>
<title>SEE ALSO</title>
<para><citerefentry>
<refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
</citerefentry>,
<citetitle>BIND 9 Administrator Reference Manual</citetitle>,
<citetitle>RFC 5011</citetitle>.
</para>
</refsect1>
<refsect1>
<title>AUTHOR</title>
<para><corpauthor>Internet Systems Consortium</corpauthor>
</para>
</refsect1>
</refentry><!--
- Local variables:
- mode: sgml
- End:
-->