dnssec-revoke.html revision ea94d370123a5892f6c47a97f21d1b28d44bb168
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - Copyright (C) 2009, 2011 Internet Systems Consortium, Inc. ("ISC")
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - Permission to use, copy, modify, and/or distribute this software for any
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - purpose with or without fee is hereby granted, provided that the above
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - copyright notice and this permission notice appear in all copies.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync - PERFORMANCE OF THIS SOFTWARE.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<!-- $Id$ -->
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<p><span><strong class="command">dnssec-revoke</strong></span>
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync reads a DNSSEC key file, sets the REVOKED bit on the key as defined
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync in RFC 5011, and creates a new pair of key files containing the
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync now-revoked key.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync Emit usage message and exit.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync Sets the directory in which the key files are to reside.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync After writing the new keyset files remove the original keyset
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync Sets the debugging level.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync Use the given OpenSSL engine. When compiled with PKCS#11 support
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync it defaults to pkcs11; the empty name resets it to no engine.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync write the new key pair even if a file already exists matching
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync the algorithm and key ID of the revoked key.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync Print the key tag of the key with the REVOKE bit set but do
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync not revoke the key.
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
a734c64bff58bda2fa48c2795453e092167b0ff7vboxsync<p><span class="corpauthor">Internet Systems Consortium</span>