man.dnssec-checkds.html revision 30c0c7470d5bfabd8f43c563f4eca636d06cc484
5763f13421bf47d142d5165590170a5d991daedevboxsync - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
5763f13421bf47d142d5165590170a5d991daedevboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
5763f13421bf47d142d5165590170a5d991daedevboxsync - Permission to use, copy, modify, and/or distribute this software for any
5763f13421bf47d142d5165590170a5d991daedevboxsync - purpose with or without fee is hereby granted, provided that the above
c58f1213e628a545081c70e26c6b67a841cff880vboxsync - copyright notice and this permission notice appear in all copies.
5763f13421bf47d142d5165590170a5d991daedevboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
5763f13421bf47d142d5165590170a5d991daedevboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
5763f13421bf47d142d5165590170a5d991daedevboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
5763f13421bf47d142d5165590170a5d991daedevboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
5763f13421bf47d142d5165590170a5d991daedevboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
5763f13421bf47d142d5165590170a5d991daedevboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
5763f13421bf47d142d5165590170a5d991daedevboxsync - PERFORMANCE OF THIS SOFTWARE.
5763f13421bf47d142d5165590170a5d991daedevboxsync<!-- $Id$ -->
5763f13421bf47d142d5165590170a5d991daedevboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5763f13421bf47d142d5165590170a5d991daedevboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
5763f13421bf47d142d5165590170a5d991daedevboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
5763f13421bf47d142d5165590170a5d991daedevboxsync<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
5763f13421bf47d142d5165590170a5d991daedevboxsync<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
5763f13421bf47d142d5165590170a5d991daedevboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
5763f13421bf47d142d5165590170a5d991daedevboxsync<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
5763f13421bf47d142d5165590170a5d991daedevboxsync<a accesskey="p" href="man.delv.html">Prev</a>�</td>
5763f13421bf47d142d5165590170a5d991daedevboxsync<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
ad27e1d5e48ca41245120c331cc88b50464813cevboxsync<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
5763f13421bf47d142d5165590170a5d991daedevboxsync<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
5763f13421bf47d142d5165590170a5d991daedevboxsync<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
5763f13421bf47d142d5165590170a5d991daedevboxsync<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
48cb2e4452bab8de277a8e3355ed47f3598dd6b6vboxsync<p><span><strong class="command">dnssec-checkds</strong></span>
48cb2e4452bab8de277a8e3355ed47f3598dd6b6vboxsync verifies the correctness of Delegation Signer (DS) or DNSSEC
48cb2e4452bab8de277a8e3355ed47f3598dd6b6vboxsync Lookaside Validation (DLV) resource records for keys in a specified
48cb2e4452bab8de277a8e3355ed47f3598dd6b6vboxsync<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
5763f13421bf47d142d5165590170a5d991daedevboxsync If a <code class="option">file</code> is specified, then the zone is
5763f13421bf47d142d5165590170a5d991daedevboxsync read from that file to find the DNSKEY records. If not,
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync then the DNSKEY records for the zone are looked up in the DNS.
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync Check for a DLV record in the specified lookaside domain,
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync instead of checking for a DS record in the zone's parent.
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync For example, to check for DLV records for "example.com"
02e2b4d125f586929d463124dd98ab4f1bf9f9b0vboxsync in ISC's DLV zone, use:
02e2b4d125f586929d463124dd98ab4f1bf9f9b0vboxsync <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
02e2b4d125f586929d463124dd98ab4f1bf9f9b0vboxsync for testing.
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync Used for testing.
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync<p><span class="corpauthor">Internet Systems Consortium</span>
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync<a accesskey="p" href="man.delv.html">Prev</a>�</td>
db2bc5b03ad11092f8a4606a912e6724b4d9c046vboxsync<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
02e2b4d125f586929d463124dd98ab4f1bf9f9b0vboxsync<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
5763f13421bf47d142d5165590170a5d991daedevboxsync<td width="40%" align="left" valign="top">delv�</td>
5763f13421bf47d142d5165590170a5d991daedevboxsync<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
5763f13421bf47d142d5165590170a5d991daedevboxsync<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
5763f13421bf47d142d5165590170a5d991daedevboxsync<p style="text-align: center;">BIND 9.11.0pre-alpha</p>