man.dnssec-checkds.html revision 1ebb25608fa10737ea27abd4e0481707ccd45581
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - Permission to use, copy, modify, and/or distribute this software for any
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - purpose with or without fee is hereby granted, provided that the above
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - copyright notice and this permission notice appear in all copies.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - PERFORMANCE OF THIS SOFTWARE.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<link rel="prev" href="man.host.html" title="host">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<table width="100%" summary="Navigation header">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<a accesskey="p" href="man.host.html">Prev</a>�</td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<th width="60%" align="center">Manual pages</th>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<p><span><strong class="command">dnssec-checkds</strong></span>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User verifies the correctness of Delegation Signer (DS) or DNSSEC
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Lookaside Validation (DLV) resource records for keys in a specified
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User If a <code class="option">file</code> is specified, then the zone is
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User read from that file to find the DNSKEY records. If not,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User then the DNSKEY records for the zone are looked up in the DNS.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Check for a DLV record in the specified lookaside domain,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User instead of checking for a DS record in the zone's parent.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User For example, to check for DLV records for "example.com"
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User in ISC's DLV zone, use:
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Used for testing.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<p><span class="corpauthor">Internet Systems Consortium</span>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<table width="100%" summary="Navigation footer">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<a accesskey="p" href="man.host.html">Prev</a>�</td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="40%" align="left" valign="top">host�</td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>