man.dnssec-checkds.html revision 0efe2893b6a53d11b84b6ac0fe4508a0e9d1dadd
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd - Copyright (C) 2000-2003 Internet Software Consortium.
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd - Permission to use, copy, modify, and/or distribute this software for any
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd - purpose with or without fee is hereby granted, provided that the above
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd - copyright notice and this permission notice appear in all copies.
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd - PERFORMANCE OF THIS SOFTWARE.
d229f940abfb2490dee17979e9a5ff31b7012eb5rbowen<!-- $Id$ -->
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
3f08db06526d6901aa08c110b5bc7dde6bc39905nd<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
d474d8ef01ec5c2a09341cd148851ed383c3287crbowen<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
4b575a6b6704b516f22d65a3ad35696d7b9ba372rpluem<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<p><span><strong class="command">dnssec-checkds</strong></span>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd verifies the correctness of Delegation Signer (DS) or DNSSEC
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd Lookaside Validation (DLV) resource records for keys in a specified
80eed96ee3d8cfa0b66d9fb1cfe63fd83254d38bnilgun<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd If a <code class="option">file</code> is specified, then the zone is
316f02e3836836c82e19019ff23f90a7ebc65289nilgun read from that file to find the DNSKEY records. If not,
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd then the DNSKEY records for the zone are looked up in the DNS.
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd Check for a DLV record in the specified lookaside domain,
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd instead of checking for a DS record in the zone's parent.
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd For example, to check for DLV records for "example.com"
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd in ISC's DLV zone, use:
b43f840409794ed298e8634f6284741f193b6c4ftakashi <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
22d5d84393d960a2027f472036f3fee15d7dbce9nd<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd for testing.
50c04f297d76a57ead2fa6b73845f7563b1fc788sf<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd Used for testing.
ffb88a4885747797937e30a5ac8b1606da3cb4adnd<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
909ce17e2bd0faef7b1c294f2307f009793fd493nd <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
42af92a661a06b3cebc88d585aad75064a309d51nd<p><span class="corpauthor">Internet Systems Consortium</span>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
f5a398cc8880978754903f9ece8e4beb63a81cedrbowen<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
b05ab3ff5ab54aa22610b13d56eaba6ddfc3db60nd<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>