dnssec-checkds.html revision 2eeb74d1cf5355dd98f6d507a10086e16bb08c4b
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - Copyright (C) 2012-2014 Internet Systems Consortium, Inc. ("ISC")
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - Permission to use, copy, modify, and/or distribute this software for any
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - purpose with or without fee is hereby granted, provided that the above
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - copyright notice and this permission notice appear in all copies.
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski - PERFORMANCE OF THIS SOFTWARE.
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski<meta name="generator" content="DocBook XSL Stylesheets V1.76.1">
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="dnssec-checkds">
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <span class="application">dnssec-checkds</span>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski — A DNSSEC delegation consistency checking tool.
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <div class="refsynopsisdiv" title="Synopsis">
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <code class="command">dnssec-checkds</code>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>]
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski [<code class="option">-f <em class="replaceable"><code>file</code></em></code>]
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>]
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>]
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <code class="command">dnssec-dsfromkey</code>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>]
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski [<code class="option">-f <em class="replaceable"><code>file</code></em></code>]
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>]
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>]
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <div class="refsection" title="DESCRIPTION">
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski<a name="idp60896592"></a><h2>DESCRIPTION</h2>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <p><span class="command"><strong>dnssec-checkds</strong></span>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski verifies the correctness of Delegation Signer (DS) or DNSSEC
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski Lookaside Validation (DLV) resource records for keys in a specified
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski If a <code class="option">file</code> is specified, then the zone is
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski read from that file to find the DNSKEY records. If not,
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski then the DNSKEY records for the zone are looked up in the DNS.
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski Check for a DLV record in the specified lookaside domain,
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski instead of checking for a DS record in the zone's parent.
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski For example, to check for DLV records for "example.com"
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski in ISC's DLV zone, use:
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <span class="command"><strong>dnssec-checkds -l dlv.isc.org example.com</strong></span>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski Specifies a path to a <span class="command"><strong>dig</strong></span> binary. Used
38a46398edcd7ad7d1777ae646d4cc484cce49bfTill Mossakowski<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
38a46398edcd7ad7d1777ae646d4cc484cce49bfTill Mossakowski Used for testing.
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <span class="refentrytitle">dnssec-dsfromkey</span>(8)
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <span class="refentrytitle">dnssec-keygen</span>(8)
5277e290ad70afdf97f359019afd8fb5816f4102Till Mossakowski <span class="refentrytitle">dnssec-signzone</span>(8)