dnssec-revoke.html revision 2eeb74d1cf5355dd98f6d507a10086e16bb08c4b
dd1ce8b52478fa98c844720af9e77fae2978f18dTinderbox User - Copyright (C) 2009, 2011, 2014 Internet Systems Consortium, Inc. ("ISC")
c6fb85f9500350e5ce58c9a24f5d264c8a8bd6f4Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt - purpose with or without fee is hereby granted, provided that the above
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt - copyright notice and this permission notice appear in all copies.
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
bef75d63d74f58abc0f834ed271526672777ba29Automatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt - PERFORMANCE OF THIS SOFTWARE.
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.76.1">
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="dnssec-revoke">
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="application">dnssec-revoke</span>
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User — Set the REVOKED bit on a DNSSEC key
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <div class="refsynopsisdiv" title="Synopsis">
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User [<code class="option">-v <em class="replaceable"><code>level</code></em></code>]
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>]
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>]
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User<a name="idp60879440"></a><h2>DESCRIPTION</h2>
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <p><span class="command"><strong>dnssec-revoke</strong></span>
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt reads a DNSSEC key file, sets the REVOKED bit on the key as defined
fd0b768f4c23d22c89f8a156a632831583b7fb68Automatic Updater in RFC 5011, and creates a new pair of key files containing the
fd0b768f4c23d22c89f8a156a632831583b7fb68Automatic Updater now-revoked key.
0ae35ecf053a29f61ad6b3659ac2445cf2c3f663Automatic Updater Emit usage message and exit.
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt Sets the directory in which the key files are to reside.
0ae35ecf053a29f61ad6b3659ac2445cf2c3f663Automatic Updater After writing the new keyset files remove the original keyset
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt Sets the debugging level.
6f1205897504b8f50b1785975482c995888dd630Tinderbox User Prints version information.
8ec3c085233cedb22b05da36e2773c8f357a7e45Automatic Updater<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
6ea2385360e9e2167e65f9286447da9eea189457Tinderbox User Specifies the cryptographic hardware to use, when applicable.
6ea2385360e9e2167e65f9286447da9eea189457Tinderbox User When BIND is built with OpenSSL PKCS#11 support, this defaults
6ea2385360e9e2167e65f9286447da9eea189457Tinderbox User to the string "pkcs11", which identifies an OpenSSL engine
6ea2385360e9e2167e65f9286447da9eea189457Tinderbox User that can drive a cryptographic accelerator or hardware service
6ea2385360e9e2167e65f9286447da9eea189457Tinderbox User module. When BIND is built with native PKCS#11 cryptography
6ea2385360e9e2167e65f9286447da9eea189457Tinderbox User (--enable-native-pkcs11), it defaults to the path of the PKCS#11
6ea2385360e9e2167e65f9286447da9eea189457Tinderbox User provider library specified via "--with-pkcs11".
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User Force overwrite: Causes <span class="command"><strong>dnssec-revoke</strong></span> to
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt write the new key pair even if a file already exists matching
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt the algorithm and key ID of the revoked key.
12bfbed87cfffa65ac300b72c5665ab38a355c2fAutomatic Updater Print the key tag of the key with the REVOKE bit set but do
12bfbed87cfffa65ac300b72c5665ab38a355c2fAutomatic Updater not revoke the key.
2eeb74d1cf5355dd98f6d507a10086e16bb08c4bTinderbox User <span class="refentrytitle">dnssec-keygen</span>(8)
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt <em class="citetitle">BIND 9 Administrator Reference Manual</em>,