dnssec-checkds.docbook revision d5bd8bb71a8970d4ebc4701b3e9ec3efef4954b7
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift - Copyright (C) 2012-2016 Internet Systems Consortium, Inc. ("ISC")
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift - This Source Code Form is subject to the terms of the Mozilla Public
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift - License, v. 2.0. If a copy of the MPL was not distributed with this
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift - file, You can obtain one at http://mozilla.org/MPL/2.0/.
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift<!-- Converted by db4-upgrade version 1.0 -->
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift<refentry xmlns:db="http://docbook.org/ns/docbook" version="5.0" xml:id="man.dnssec-checkds">
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refentryinfo>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <corpauthor>Internet Systems Consortium, Inc.</corpauthor>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </refentryinfo>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refentrytitle><application>dnssec-checkds</application></refentrytitle>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refname><application>dnssec-checkds</application></refname>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refpurpose>DNSSEC delegation consistency checking tool</refpurpose>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </refnamediv>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <holder>Internet Systems Consortium, Inc. ("ISC")</holder>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refsynopsisdiv>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <arg choice="opt" rep="norepeat"><option>-l <replaceable class="parameter">domain</replaceable></option></arg>
5d07ec161328a94de355aa4bf93918a2da5a8602Jean-Noel Rouvignac <arg choice="opt" rep="norepeat"><option>-f <replaceable class="parameter">file</replaceable></option></arg>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <arg choice="opt" rep="norepeat"><option>-d <replaceable class="parameter">dig path</replaceable></option></arg>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <arg choice="opt" rep="norepeat"><option>-D <replaceable class="parameter">dsfromkey path</replaceable></option></arg>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </cmdsynopsis>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <arg choice="opt" rep="norepeat"><option>-l <replaceable class="parameter">domain</replaceable></option></arg>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <arg choice="opt" rep="norepeat"><option>-f <replaceable class="parameter">file</replaceable></option></arg>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <arg choice="opt" rep="norepeat"><option>-d <replaceable class="parameter">dig path</replaceable></option></arg>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <arg choice="opt" rep="norepeat"><option>-D <replaceable class="parameter">dsfromkey path</replaceable></option></arg>
97947ce035cb1c5f669ea4cdcb22ad292fa2a4bfJean-Noel Rouvignac </cmdsynopsis>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </refsynopsisdiv>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refsection><info><title>DESCRIPTION</title></info>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift verifies the correctness of Delegation Signer (DS) or DNSSEC
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift Lookaside Validation (DLV) resource records for keys in a specified
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </refsection>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refsection><info><title>OPTIONS</title></info>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <variablelist>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <varlistentry>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <term>-f <replaceable class="parameter">file</replaceable></term>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift If a <option>file</option> is specified, then the zone is
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift read from that file to find the DNSKEY records. If not,
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift then the DNSKEY records for the zone are looked up in the DNS.
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </varlistentry>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <varlistentry>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <term>-l <replaceable class="parameter">domain</replaceable></term>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift Check for a DLV record in the specified lookaside domain,
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift instead of checking for a DS record in the zone's parent.
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </varlistentry>
9f0904fda87bfcf921deeccdbaeafe834fbad696Yannick Lecaillez <varlistentry>
9f0904fda87bfcf921deeccdbaeafe834fbad696Yannick Lecaillez <term>-d <replaceable class="parameter">dig path</replaceable></term>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift Specifies a path to a <command>dig</command> binary. Used
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </varlistentry>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <varlistentry>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <term>-D <replaceable class="parameter">dsfromkey path</replaceable></term>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift Specifies a path to a <command>dnssec-dsfromkey</command> binary.
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift Used for testing.
97947ce035cb1c5f669ea4cdcb22ad292fa2a4bfJean-Noel Rouvignac </varlistentry>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </variablelist>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </refsection>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refsection><info><title>SEE ALSO</title></info>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refentrytitle>dnssec-dsfromkey</refentrytitle><manvolnum>8</manvolnum>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </citerefentry>,
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <citerefentry>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refentrytitle>dnssec-keygen</refentrytitle><manvolnum>8</manvolnum>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </citerefentry>,
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <citerefentry>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift <refentrytitle>dnssec-signzone</refentrytitle><manvolnum>8</manvolnum>
20fdcbef0d17440c367d2943f9c5799bddfe661fMatthew Swift </citerefentry>,