man.dnssec-checkds.html revision 1f30da8ae0a25e6a7b686ffc46238cb58cddccb2
a23fd118e437af0a7877dd313db8fdaa3537c675yl - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
a23fd118e437af0a7877dd313db8fdaa3537c675yl - Copyright (C) 2000-2003 Internet Software Consortium.
a23fd118e437af0a7877dd313db8fdaa3537c675yl - Permission to use, copy, modify, and/or distribute this software for any
a23fd118e437af0a7877dd313db8fdaa3537c675yl - purpose with or without fee is hereby granted, provided that the above
a23fd118e437af0a7877dd313db8fdaa3537c675yl - copyright notice and this permission notice appear in all copies.
a23fd118e437af0a7877dd313db8fdaa3537c675yl - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
a23fd118e437af0a7877dd313db8fdaa3537c675yl - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
a23fd118e437af0a7877dd313db8fdaa3537c675yl - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
a23fd118e437af0a7877dd313db8fdaa3537c675yl - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
a23fd118e437af0a7877dd313db8fdaa3537c675yl - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
a23fd118e437af0a7877dd313db8fdaa3537c675yl - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
a23fd118e437af0a7877dd313db8fdaa3537c675yl - PERFORMANCE OF THIS SOFTWARE.
a23fd118e437af0a7877dd313db8fdaa3537c675yl<!-- $Id$ -->
a23fd118e437af0a7877dd313db8fdaa3537c675yl<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
a23fd118e437af0a7877dd313db8fdaa3537c675yl<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
a23fd118e437af0a7877dd313db8fdaa3537c675yl<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
a23fd118e437af0a7877dd313db8fdaa3537c675yl<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
a23fd118e437af0a7877dd313db8fdaa3537c675yl<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
8347601bcb0a439f6e50fc36b4039a73d08700e1yl<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
a23fd118e437af0a7877dd313db8fdaa3537c675yl<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
a23fd118e437af0a7877dd313db8fdaa3537c675yl<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
8347601bcb0a439f6e50fc36b4039a73d08700e1yl<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
a23fd118e437af0a7877dd313db8fdaa3537c675yl<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
a23fd118e437af0a7877dd313db8fdaa3537c675yl<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
a23fd118e437af0a7877dd313db8fdaa3537c675yl<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
a23fd118e437af0a7877dd313db8fdaa3537c675yl<p><span><strong class="command">dnssec-checkds</strong></span>
a23fd118e437af0a7877dd313db8fdaa3537c675yl verifies the correctness of Delegation Signer (DS) or DNSSEC
a23fd118e437af0a7877dd313db8fdaa3537c675yl Lookaside Validation (DLV) resource records for keys in a specified
a23fd118e437af0a7877dd313db8fdaa3537c675yl<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
a23fd118e437af0a7877dd313db8fdaa3537c675yl If a <code class="option">file</code> is specified, then the zone is
a23fd118e437af0a7877dd313db8fdaa3537c675yl read from that file to find the DNSKEY records. If not,
8347601bcb0a439f6e50fc36b4039a73d08700e1yl then the DNSKEY records for the zone are looked up in the DNS.
a23fd118e437af0a7877dd313db8fdaa3537c675yl<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
8347601bcb0a439f6e50fc36b4039a73d08700e1yl Check for a DLV record in the specified lookaside domain,
a23fd118e437af0a7877dd313db8fdaa3537c675yl instead of checking for a DS record in the zone's parent.
a23fd118e437af0a7877dd313db8fdaa3537c675yl For example, to check for DLV records for "example.com"
8347601bcb0a439f6e50fc36b4039a73d08700e1yl in ISC's DLV zone, use:
a23fd118e437af0a7877dd313db8fdaa3537c675yl <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
8347601bcb0a439f6e50fc36b4039a73d08700e1yl<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
8347601bcb0a439f6e50fc36b4039a73d08700e1yl Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
a23fd118e437af0a7877dd313db8fdaa3537c675yl for testing.
a23fd118e437af0a7877dd313db8fdaa3537c675yl<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
a23fd118e437af0a7877dd313db8fdaa3537c675yl Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
a23fd118e437af0a7877dd313db8fdaa3537c675yl Used for testing.
a23fd118e437af0a7877dd313db8fdaa3537c675yl<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
a23fd118e437af0a7877dd313db8fdaa3537c675yl <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
a23fd118e437af0a7877dd313db8fdaa3537c675yl <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
a23fd118e437af0a7877dd313db8fdaa3537c675yl<p><span class="corpauthor">Internet Systems Consortium</span>
a23fd118e437af0a7877dd313db8fdaa3537c675yl<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
8347601bcb0a439f6e50fc36b4039a73d08700e1yl<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
a23fd118e437af0a7877dd313db8fdaa3537c675yl<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
a23fd118e437af0a7877dd313db8fdaa3537c675yl<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>