man.dnssec-checkds.html revision 38a5df33f461f2379639ef95d282d3658f68ed04
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User - Copyright (C) 2000-2017 Internet Systems Consortium, Inc. ("ISC")
ab496cc3df1648e9ad992a87c35c2c0870fdc69dTinderbox User - This Source Code Form is subject to the terms of the Mozilla Public
7c1468ed500356839a4a222517364e6ce18cb1a2Tinderbox User - License, v. 2.0. If a copy of the MPL was not distributed with this
c57668a2fbbe558c1bd21652813616f2f517c469Tinderbox User - file, You can obtain one at http://mozilla.org/MPL/2.0/.
8de3f14f1c300c3e1ed99084cc03485b42c92bf1Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews<link rel="prev" href="man.nslookup.html" title="nslookup">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<table width="100%" summary="Navigation header">
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User<a accesskey="p" href="man.nslookup.html">Prev</a>�</td>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<th width="60%" align="center">Manual pages</th>
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews <span class="application">dnssec-checkds</span>
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt — DNSSEC delegation consistency checking tool
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User [<code class="option">-f <em class="replaceable"><code>file</code></em></code>]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews [<code class="option">-f <em class="replaceable"><code>file</code></em></code>]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <p><span class="command"><strong>dnssec-checkds</strong></span>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews verifies the correctness of Delegation Signer (DS) or DNSSEC
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Lookaside Validation (DLV) resource records for keys in a specified
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt <div class="variablelist"><dl class="variablelist">
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt If a <code class="option">file</code> is specified, then the zone is
7cc0a5d21ef046bfd630c4769943d896a7d7472cTinderbox User read from that file to find the DNSKEY records. If not,
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews then the DNSKEY records for the zone are looked up in the DNS.
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox User<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Check for a DLV record in the specified lookaside domain,
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User instead of checking for a DS record in the zone's parent.
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User For example, to check for DLV records for "example.com"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews in ISC's DLV zone, use:
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User <span class="command"><strong>dnssec-checkds -l dlv.isc.org example.com</strong></span>
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson Specifies a path to a <span class="command"><strong>dig</strong></span> binary. Used
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User Used for testing.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User <span class="refentrytitle">dnssec-dsfromkey</span>(8)
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews <span class="refentrytitle">dnssec-keygen</span>(8)
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews <span class="refentrytitle">dnssec-signzone</span>(8)
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont<table width="100%" summary="Navigation footer">
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont<a accesskey="p" href="man.nslookup.html">Prev</a>�</td>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<td width="40%" align="left" valign="top">nslookup�</td>
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.2rc1</p>