man.dnssec-checkds.html revision 27963ad22062efe8eac2beed51ff70d8f0b35900
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin - Copyright (C) 2000-2003 Internet Software Consortium.
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin - Permission to use, copy, modify, and/or distribute this software for any
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin - purpose with or without fee is hereby granted, provided that the above
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin - copyright notice and this permission notice appear in all copies.
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
2e545ce2450a9953665f701bb05350f0d3f26275nd - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
d29d9ab4614ff992b0e8de6e2b88d52b6f1f153erbowen - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin - PERFORMANCE OF THIS SOFTWARE.
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<!-- $Id$ -->
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
3f08db06526d6901aa08c110b5bc7dde6bc39905nd<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<link rel="prev" href="man.delve.html" title="delve">
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<a accesskey="p" href="man.delve.html">Prev</a>�</td>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf<p><span><strong class="command">dnssec-checkds</strong></span>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin verifies the correctness of Delegation Signer (DS) or DNSSEC
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin Lookaside Validation (DLV) resource records for keys in a specified
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin If a <code class="option">file</code> is specified, then the zone is
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin read from that file to find the DNSKEY records. If not,
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin then the DNSKEY records for the zone are looked up in the DNS.
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin Check for a DLV record in the specified lookaside domain,
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin instead of checking for a DS record in the zone's parent.
30471a4650391f57975f60bbb6e4a90be7b284bfhumbedooh For example, to check for DLV records for "example.com"
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin in ISC's DLV zone, use:
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
623eebe956d9c2d6d073ed3eae855b56030b40e9noodl for testing.
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin Used for testing.
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<p><span class="corpauthor">Internet Systems Consortium</span>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<a accesskey="p" href="man.delve.html">Prev</a>�</td>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<td width="40%" align="left" valign="top">delve�</td>
9a58dc6a2b26ec128b1270cf48810e705f1a90dbsf<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
4277c95b5a9454a5c25f8d8762634fcff37aa840minfrin<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>