man.dnssec-checkds.html revision 0b89eee6167201843c9a46b7e7c63cb1e4e09ba3
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
44aae046c38e796e581110b7ecdf4478167d684dBob Halley - Copyright (C) 2000-2017 Internet Systems Consortium, Inc. ("ISC")
44aae046c38e796e581110b7ecdf4478167d684dBob Halley - This Source Code Form is subject to the terms of the Mozilla Public
44aae046c38e796e581110b7ecdf4478167d684dBob Halley - License, v. 2.0. If a copy of the MPL was not distributed with this
44aae046c38e796e581110b7ecdf4478167d684dBob Halley - file, You can obtain one at http://mozilla.org/MPL/2.0/.
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<link rel="prev" href="man.nslookup.html" title="nslookup">
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<a accesskey="p" href="man.nslookup.html">Prev</a>�</td>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King <span class="application">dnssec-checkds</span>
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King — DNSSEC delegation consistency checking tool
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>]
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King [<code class="option">-f <em class="replaceable"><code>file</code></em></code>]
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>]
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>]
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>]
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King [<code class="option">-f <em class="replaceable"><code>file</code></em></code>]
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>]
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>]
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King <p><span class="command"><strong>dnssec-checkds</strong></span>
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King verifies the correctness of Delegation Signer (DS) or DNSSEC
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King Lookaside Validation (DLV) resource records for keys in a specified
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King <div class="variablelist"><dl class="variablelist">
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King If a <code class="option">file</code> is specified, then the zone is
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King read from that file to find the DNSKEY records. If not,
23768c88a770c1960b2f38ff01f43ab6420311ccWilliam King then the DNSKEY records for the zone are looked up in the DNS.
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley Check for a DLV record in the specified lookaside domain,
44aae046c38e796e581110b7ecdf4478167d684dBob Halley instead of checking for a DS record in the zone's parent.
44aae046c38e796e581110b7ecdf4478167d684dBob Halley For example, to check for DLV records for "example.com"
44aae046c38e796e581110b7ecdf4478167d684dBob Halley in ISC's DLV zone, use:
44aae046c38e796e581110b7ecdf4478167d684dBob Halley <span class="command"><strong>dnssec-checkds -l dlv.isc.org example.com</strong></span>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley Specifies a path to a <span class="command"><strong>dig</strong></span> binary. Used
44aae046c38e796e581110b7ecdf4478167d684dBob Halley for testing.
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
44aae046c38e796e581110b7ecdf4478167d684dBob Halley Used for testing.
44aae046c38e796e581110b7ecdf4478167d684dBob Halley <span class="refentrytitle">dnssec-dsfromkey</span>(8)
44aae046c38e796e581110b7ecdf4478167d684dBob Halley <span class="refentrytitle">dnssec-keygen</span>(8)
44aae046c38e796e581110b7ecdf4478167d684dBob Halley <span class="refentrytitle">dnssec-signzone</span>(8)
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<a accesskey="p" href="man.nslookup.html">Prev</a>�</td>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<td width="40%" align="left" valign="top">nslookup�</td>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
44aae046c38e796e581110b7ecdf4478167d684dBob Halley<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.2</p>