dnssec-checkds.docbook revision 4e632296138c63fd20214e40f379aef20ffb0f7d
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd"
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews [<!ENTITY mdash "—">]>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - Permission to use, copy, modify, and/or distribute this software for any
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - purpose with or without fee is hereby granted, provided that the above
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - copyright notice and this permission notice appear in all copies.
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refentryinfo>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </refentryinfo>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refentrytitle><application>dnssec-checkds</application></refentrytitle>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refnamediv>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refname><application>dnssec-dsfromkey</application></refname>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refpurpose>DNSSEC DS RR generation tool</refpurpose>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </refnamediv>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </copyright>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refsynopsisdiv>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <cmdsynopsis>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <arg><option>-l <replaceable class="parameter">domain</replaceable></option></arg>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <arg><option>-f <replaceable class="parameter">file</replaceable></option></arg>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <arg><option>-d <replaceable class="parameter">dig path</replaceable></option></arg>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <arg><option>-D <replaceable class="parameter">dsfromkey path</replaceable></option></arg>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </cmdsynopsis>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <cmdsynopsis>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <arg><option>-l <replaceable class="parameter">domain</replaceable></option></arg>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <arg><option>-f <replaceable class="parameter">file</replaceable></option></arg>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <arg><option>-d <replaceable class="parameter">dig path</replaceable></option></arg>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <arg><option>-D <replaceable class="parameter">dsfromkey path</replaceable></option></arg>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </cmdsynopsis>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </refsynopsisdiv>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews verifies the correctness of Delegation Signer (DS) or DNSSEC
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews Lookaside Validation (DLV) resource records for keys in a specified
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <variablelist>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <varlistentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <term>-f <replaceable class="parameter">file</replaceable></term>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews If a <option>file</option> is specified, then the zone is
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews read from that file to find the DNSKEY records. If not,
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews then the DNSKEY records for the zone are looked up in the DNS.
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </varlistentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <varlistentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <term>-l <replaceable class="parameter">domain</replaceable></term>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews Check for a DLV record in the specified lookaside domain,
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews instead of checking for a DS record in the zone's parent.
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews For example, to check for DLV records for "example.com"
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews in ISC's DLV zone, use:
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <command>dnssec-checkds -l dlv.isc.org example.com</command>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </varlistentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <varlistentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <term>-d <replaceable class="parameter">dig path</replaceable></term>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews Specifies a path to a <command>dig</command> binary. Used
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews for testing.
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </varlistentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <varlistentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <term>-D <replaceable class="parameter">dsfromkey path</replaceable></term>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews Specifies a path to a <command>dnssec-dsfromkey</command> binary.
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews Used for testing.
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </varlistentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </variablelist>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refentrytitle>dnssec-dsfromkey</refentrytitle><manvolnum>8</manvolnum>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </citerefentry>,
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <citerefentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </citerefentry>,
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <citerefentry>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <refentrytitle>dnssec-signzone</refentrytitle><manvolnum>8</manvolnum>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews </citerefentry>,
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews <para><corpauthor>Internet Systems Consortium</corpauthor>
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - Local variables:
df4c20903e3a291a1f784992846c0400189b04a7Mark Andrews - mode: sgml