dnssec-checkds.html revision fd2597f75693a2279fdf588bd40dfe2407c42028
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - Copyright (C) 2012-2015 Internet Systems Consortium, Inc. ("ISC")
7a42357217528037bdfedcb17eeebfe96ae4266aAutomatic Updater - Permission to use, copy, modify, and/or distribute this software for any
1167fc7904c5f0a472f8df207ac46dd52c7f1ec8Automatic Updater - purpose with or without fee is hereby granted, provided that the above
0c39b3ed9409ecb277d5e32fa763a4e4d6598df8Automatic Updater - copyright notice and this permission notice appear in all copies.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
79b273c187a4aa1016a62181983dfdd0521681aeMark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
b253dcf9668f95e141bce9556dc88e30d3305a1dTinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User - PERFORMANCE OF THIS SOFTWARE.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
3cc98b8ecedcbc8465f1cf2740b966b315662430Automatic Updater<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User<p><span class="command"><strong>dnssec-checkds</strong></span>
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt verifies the correctness of Delegation Signer (DS) or DNSSEC
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater Lookaside Validation (DLV) resource records for keys in a specified
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt<div class="variablelist"><dl class="variablelist">
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt If a <code class="option">file</code> is specified, then the zone is
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User read from that file to find the DNSKEY records. If not,
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater then the DNSKEY records for the zone are looked up in the DNS.
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater Check for a DLV record in the specified lookaside domain,
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater instead of checking for a DS record in the zone's parent.
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater For example, to check for DLV records for "example.com"
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater in ISC's DLV zone, use:
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater <span class="command"><strong>dnssec-checkds -l dlv.isc.org example.com</strong></span>
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User Specifies a path to a <span class="command"><strong>dig</strong></span> binary. Used
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User Used for testing.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
114f7780384371121918624ae2c80ecfce545683Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
693c4232dfdffaff672197d4b9fea944c64cf80aAutomatic Updater <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,