man.dnssec-checkds.html revision 5347c0fcb04eaea19d9f39795646239f487c6207
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Copyright (C) 2000-2015 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - This Source Code Form is subject to the terms of the Mozilla Public
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - License, v. 2.0. If a copy of the MPL was not distributed with this
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - file, You can obtain one at http://mozilla.org/MPL/2.0/.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
e108f2ec640e1acb54999c0ade58af606149956dTinderbox User<link rel="prev" href="man.delv.html" title="delv">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<table width="100%" summary="Navigation header">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
e108f2ec640e1acb54999c0ade58af606149956dTinderbox User<a accesskey="p" href="man.delv.html">Prev</a>�</td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<th width="60%" align="center">Manual pages</th>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
dec590a3deb8e87380a8bd3a77d535dba3729bf6Tinderbox User<p><span class="application">dnssec-checkds</span> — DNSSEC delegation consistency checking tool</p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<a name="id-1.14.5.7"></a><h2>DESCRIPTION</h2>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="command"><strong>dnssec-checkds</strong></span>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User verifies the correctness of Delegation Signer (DS) or DNSSEC
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Lookaside Validation (DLV) resource records for keys in a specified
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="variablelist"><dl class="variablelist">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User If a <code class="option">file</code> is specified, then the zone is
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User read from that file to find the DNSKEY records. If not,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User then the DNSKEY records for the zone are looked up in the DNS.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
9d557856c2a19ec95ee73245f60a92f8675cf5baTinderbox User Check for a DLV record in the specified lookaside domain,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User instead of checking for a DS record in the zone's parent.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User For example, to check for DLV records for "example.com"
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User in ISC's DLV zone, use:
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>dnssec-checkds -l dlv.isc.org example.com</strong></span>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Specifies a path to a <span class="command"><strong>dig</strong></span> binary. Used
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Used for testing.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<table width="100%" summary="Navigation footer">
e108f2ec640e1acb54999c0ade58af606149956dTinderbox User<a accesskey="p" href="man.delv.html">Prev</a>�</td>
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
e108f2ec640e1acb54999c0ade58af606149956dTinderbox User<td width="40%" align="left" valign="top">delv�</td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
1700442a7751c2bbdafe2d039cebbd8316496957Tinderbox User<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0b2</p>