dnssec-checkds.html revision bf8267aa453e5d2a735ed732a043b77a0b355b20
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - Copyright (C) 2012 Internet Systems Consortium, Inc. ("ISC")
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - Permission to use, copy, modify, and/or distribute this software for any
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - purpose with or without fee is hereby granted, provided that the above
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - copyright notice and this permission notice appear in all copies.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt - PERFORMANCE OF THIS SOFTWARE.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="man.dnssec-dsfromkey"></a><div class="titlepage"></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<p><span class="application">dnssec-dsfromkey</span> — DNSSEC DS RR generation tool</p>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-chedkcs</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<p><span><strong class="command">dnssec-checkds</strong></span>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User verifies the correctness of Delegation Signer (DS) or DNSSEC
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User Lookaside Validation (DLV) resource records for keys in a specified
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User If a <code class="option">file</code> is specified, then the zone is
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User read from that file to find the DNSKEY records. If not,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User then the DNSKEY records for the zone are looked up in the DNS.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Check for a DLV record in the specified lookaside domain,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User instead of checking for a DS record in the zone's parent.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User For example, to check for DLV records for "example.com"
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User in ISC's DLV zone, use:
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User Used for testing.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<p><span class="corpauthor">Internet Systems Consortium</span>