man.dnssec-checkds.html revision fd2597f75693a2279fdf588bd40dfe2407c42028
11e9368a226272085c337e9e74b79808c16fbdbaTinderbox User - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - Permission to use, copy, modify, and/or distribute this software for any
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - purpose with or without fee is hereby granted, provided that the above
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - copyright notice and this permission notice appear in all copies.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User - PERFORMANCE OF THIS SOFTWARE.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
e108f2ec640e1acb54999c0ade58af606149956dTinderbox User<link rel="prev" href="man.delv.html" title="delv">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<table width="100%" summary="Navigation header">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
e108f2ec640e1acb54999c0ade58af606149956dTinderbox User<a accesskey="p" href="man.delv.html">Prev</a>�</td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<th width="60%" align="center">Manual pages</th>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<a name="id-1.14.5.7"></a><h2>DESCRIPTION</h2>
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="command"><strong>dnssec-checkds</strong></span>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User verifies the correctness of Delegation Signer (DS) or DNSSEC
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Lookaside Validation (DLV) resource records for keys in a specified
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<div class="variablelist"><dl class="variablelist">
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User If a <code class="option">file</code> is specified, then the zone is
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User read from that file to find the DNSKEY records. If not,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User then the DNSKEY records for the zone are looked up in the DNS.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Check for a DLV record in the specified lookaside domain,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User instead of checking for a DS record in the zone's parent.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User For example, to check for DLV records for "example.com"
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User in ISC's DLV zone, use:
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="command"><strong>dnssec-checkds -l dlv.isc.org example.com</strong></span>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Specifies a path to a <span class="command"><strong>dig</strong></span> binary. Used
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User Used for testing.
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<table width="100%" summary="Navigation footer">
e108f2ec640e1acb54999c0ade58af606149956dTinderbox User<a accesskey="p" href="man.delv.html">Prev</a>�</td>
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
e108f2ec640e1acb54999c0ade58af606149956dTinderbox User<td width="40%" align="left" valign="top">delv�</td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
1ebb25608fa10737ea27abd4e0481707ccd45581Tinderbox User<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0pre-alpha</p>