man.dnssec-checkds.html revision fd2597f75693a2279fdf588bd40dfe2407c42028
181e56d8b348d301d615ccf5465ae600fee2867berikabele - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
181e56d8b348d301d615ccf5465ae600fee2867berikabele - Copyright (C) 2000-2003 Internet Software Consortium.
ca0e3098838c1f9aa77bcdfc3df99cf9aa0f9383slive - Permission to use, copy, modify, and/or distribute this software for any
ca0e3098838c1f9aa77bcdfc3df99cf9aa0f9383slive - purpose with or without fee is hereby granted, provided that the above
d8b1dfd3ecab967303893dd6e5072f15aa393ca6nd - copyright notice and this permission notice appear in all copies.
a30b4d95058922cb01453fb07c5ac66d6544571eslive - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
ca0e3098838c1f9aa77bcdfc3df99cf9aa0f9383slive - PERFORMANCE OF THIS SOFTWARE.
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
181e56d8b348d301d615ccf5465ae600fee2867berikabele<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
181e56d8b348d301d615ccf5465ae600fee2867berikabele<link rel="prev" href="man.delv.html" title="delv">
181e56d8b348d301d615ccf5465ae600fee2867berikabele<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<p><span class="command"><strong>dnssec-checkds</strong></span>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen verifies the correctness of Delegation Signer (DS) or DNSSEC
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen Lookaside Validation (DLV) resource records for keys in a specified
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen If a <code class="option">file</code> is specified, then the zone is
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen read from that file to find the DNSKEY records. If not,
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen then the DNSKEY records for the zone are looked up in the DNS.
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
ca0e3098838c1f9aa77bcdfc3df99cf9aa0f9383slive Check for a DLV record in the specified lookaside domain,
181e56d8b348d301d615ccf5465ae600fee2867berikabele instead of checking for a DS record in the zone's parent.
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen For example, to check for DLV records for "example.com"
ca0e3098838c1f9aa77bcdfc3df99cf9aa0f9383slive in ISC's DLV zone, use:
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen <span class="command"><strong>dnssec-checkds -l dlv.isc.org example.com</strong></span>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen Specifies a path to a <span class="command"><strong>dig</strong></span> binary. Used
ca0e3098838c1f9aa77bcdfc3df99cf9aa0f9383slive for testing.
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen Used for testing.
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
57d0156f7bbd9ea3a72342cf9912aba61d118702rbowen<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0pre-alpha</p>