man.dnssec-checkds.html revision fd2597f75693a2279fdf588bd40dfe2407c42028
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - Copyright (C) 2000-2003 Internet Software Consortium.
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - Permission to use, copy, modify, and/or distribute this software for any
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - purpose with or without fee is hereby granted, provided that the above
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - copyright notice and this permission notice appear in all copies.
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe - PERFORMANCE OF THIS SOFTWARE.
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<p><span class="command"><strong>dnssec-checkds</strong></span>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe verifies the correctness of Delegation Signer (DS) or DNSSEC
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe Lookaside Validation (DLV) resource records for keys in a specified
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe If a <code class="option">file</code> is specified, then the zone is
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe read from that file to find the DNSKEY records. If not,
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe then the DNSKEY records for the zone are looked up in the DNS.
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe Check for a DLV record in the specified lookaside domain,
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe instead of checking for a DS record in the zone's parent.
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe For example, to check for DLV records for "example.com"
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe in ISC's DLV zone, use:
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe <span class="command"><strong>dnssec-checkds -l dlv.isc.org example.com</strong></span>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe Specifies a path to a <span class="command"><strong>dig</strong></span> binary. Used
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe for testing.
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe Used for testing.
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0pre-alpha</p>