dnssec-settime.docbook revision 14a656f94b1fd0ababd84a772228dfa52276ba15
a6ca100924894cdd8e2b791d75a8cef32b1fba1fTinderbox User - Copyright (C) 2009-2011, 2014, 2015 Internet Systems Consortium, Inc. ("ISC")
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - Permission to use, copy, modify, and/or distribute this software for any
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - purpose with or without fee is hereby granted, provided that the above
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - copyright notice and this permission notice appear in all copies.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt - PERFORMANCE OF THIS SOFTWARE.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<!-- Converted by db4-upgrade version 1.0 -->
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<refentry xmlns="http://docbook.org/ns/docbook" version="5.0" xml:id="man.dnssec-settime">
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <refentryinfo>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </refentryinfo>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <refentrytitle><application>dnssec-settime</application></refentrytitle>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <refnamediv>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <refname><application>dnssec-settime</application></refname>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <refpurpose>Set the key timing metadata for a DNSSEC key</refpurpose>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </refnamediv>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </copyright>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <refsynopsisdiv>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-f</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-K <replaceable class="parameter">directory</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-L <replaceable class="parameter">ttl</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-P <replaceable class="parameter">date/offset</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-A <replaceable class="parameter">date/offset</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-R <replaceable class="parameter">date/offset</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-I <replaceable class="parameter">date/offset</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-D <replaceable class="parameter">date/offset</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-h</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-V</option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-v <replaceable class="parameter">level</replaceable></option></arg>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <arg choice="opt" rep="norepeat"><option>-E <replaceable class="parameter">engine</replaceable></option></arg>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </cmdsynopsis>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </refsynopsisdiv>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <refsection><info><title>DESCRIPTION</title></info>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt reads a DNSSEC private key file and sets the key timing metadata
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt as specified by the <option>-P</option>, <option>-A</option>,
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt <option>-R</option>, <option>-I</option>, and <option>-D</option>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt options. The metadata can then be used by
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <command>dnssec-signzone</command> or other signing software to
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt determine when a key is to be published, whether it should be
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt used for signing a zone, etc.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt If none of these options is set on the command line,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt then <command>dnssec-settime</command> simply prints the key timing
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt metadata already stored in the key.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt When key metadata fields are changed, both files of a key
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt pair (<filename>Knnnn.+aaa+iiiii.key</filename> and
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <filename>Knnnn.+aaa+iiiii.private</filename>) are regenerated.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Metadata fields are stored in the private file. A human-readable
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt description of the metadata is also placed in comments in the key
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt file. The private file's permissions are always set to be
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt inaccessible to anyone other than the owner (mode 0600).
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <variablelist>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Force an update of an old-format key with no metadata fields.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Without this option, <command>dnssec-settime</command> will
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt fail when attempting to update a legacy key. With this option,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt the key will be recreated in the new format, but with the
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt original key data retained. The key's creation date will be
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt set to the present time. If no other values are specified,
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt then the key's publication and activation dates will also
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt be set to the present time.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <term>-K <replaceable class="parameter">directory</replaceable></term>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Sets the directory in which the key files are to reside.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt <varlistentry>
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt <term>-L <replaceable class="parameter">ttl</replaceable></term>
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt Sets the default TTL to use for this key when it is converted
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt into a DNSKEY RR. If the key is imported into a zone,
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt this is the TTL that will be used for it, unless there was
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt already a DNSKEY RRset in place, in which case the existing TTL
03f979494f5c80e05a72f876914d9d44085fbd6aEvan Hunt would take precedence. If this value is not set and there
03f979494f5c80e05a72f876914d9d44085fbd6aEvan Hunt is no existing DNSKEY RRset, the TTL will default to the
03f979494f5c80e05a72f876914d9d44085fbd6aEvan Hunt SOA TTL. Setting the default TTL to <literal>0</literal>
03f979494f5c80e05a72f876914d9d44085fbd6aEvan Hunt or <literal>none</literal> removes it from the key.
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Emit usage message and exit.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman <varlistentry>
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman Prints version information.
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <term>-v <replaceable class="parameter">level</replaceable></term>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Sets the debugging level.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont <varlistentry>
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont <term>-E <replaceable class="parameter">engine</replaceable></term>
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt Specifies the cryptographic hardware to use, when applicable.
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt When BIND is built with OpenSSL PKCS#11 support, this defaults
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt to the string "pkcs11", which identifies an OpenSSL engine
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt that can drive a cryptographic accelerator or hardware service
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt module. When BIND is built with native PKCS#11 cryptography
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt (--enable-native-pkcs11), it defaults to the path of the PKCS#11
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt provider library specified via "--with-pkcs11".
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </variablelist>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <refsection><info><title>TIMING OPTIONS</title></info>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt If the argument begins with a '+' or '-', it is interpreted as
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt an offset from the present time. For convenience, if such an offset
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt then the offset is computed in years (defined as 365 24-hour days,
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt ignoring leap years), months (defined as 30 24-hour days), weeks,
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt days, hours, or minutes, respectively. Without a suffix, the offset
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt is computed in seconds. To unset a date, use 'none' or 'never'.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <variablelist>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <term>-P <replaceable class="parameter">date/offset</replaceable></term>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Sets the date on which a key is to be published to the zone.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt After that date, the key will be included in the zone but will
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt not be used to sign it.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <term>-A <replaceable class="parameter">date/offset</replaceable></term>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Sets the date on which the key is to be activated. After that
eec29cfd40361662b25bad50e1b94f7738a8fea0Jeremy Reed date, the key will be included in the zone and used to sign
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <term>-R <replaceable class="parameter">date/offset</replaceable></term>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Sets the date on which the key is to be revoked. After that
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt date, the key will be flagged as revoked. It will be included
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt in the zone and will be used to sign it.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt <term>-I <replaceable class="parameter">date/offset</replaceable></term>
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt Sets the date on which the key is to be retired. After that
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt date, the key will still be included in the zone, but it
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt will not be used to sign it.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <term>-D <replaceable class="parameter">date/offset</replaceable></term>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt Sets the date on which the key is to be deleted. After that
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt date, the key will no longer be included in the zone. (It
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt may remain in the key repository, however.)
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </varlistentry>
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews <varlistentry>
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews <term>-S <replaceable class="parameter">predecessor key</replaceable></term>
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews Select a key for which the key being modified will be an
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews explicit successor. The name, algorithm, size, and type of the
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews predecessor key must exactly match those of the key being
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews modified. The activation date of the successor key will be set
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews to the inactivation date of the predecessor. The publication
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews date will be set to the activation date minus the prepublication
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews interval, which defaults to 30 days.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews </varlistentry>
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews <varlistentry>
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews <term>-i <replaceable class="parameter">interval</replaceable></term>
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews Sets the prepublication interval for a key. If set, then
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews the publication and activation dates must be separated by at least
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews this much time. If the activation date is specified but the
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews publication date isn't, then the publication date will default
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews to this much time before the activation date; conversely, if
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews the publication date is specified but activation date isn't,
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews then activation will be set to this much time after publication.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews If the key is being set to be an explicit successor to another
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews key, then the default prepublication interval is 30 days;
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews otherwise it is zero.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews As with date offsets, if the argument is followed by one of
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', then the
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews interval is measured in years, months, weeks, days, hours,
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews or minutes, respectively. Without a suffix, the interval is
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews measured in seconds.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews </varlistentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </variablelist>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <refsection><info><title>PRINTING OPTIONS</title></info>
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt <command>dnssec-settime</command> can also be used to print the
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt timing metadata associated with a key.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt <variablelist>
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt <varlistentry>
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt Print times in UNIX epoch format.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt </varlistentry>
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt <varlistentry>
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews <term>-p <replaceable class="parameter">C/P/A/R/I/D/all</replaceable></term>
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt Print a specific metadata value or set of metadata values.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt The <option>-p</option> option may be followed by one or more
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt of the following letters to indicate which value or values to print:
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews <option>I</option> for the inactivation date, or
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt To print all of the metadata, use <option>-p all</option>.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt </varlistentry>
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt </variablelist>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </citerefentry>,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <citerefentry>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <refentrytitle>dnssec-signzone</refentrytitle><manvolnum>8</manvolnum>
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt </citerefentry>,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt <citetitle>BIND 9 Administrator Reference Manual</citetitle>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt </refsection>