man.dnssec-checkds.html revision a3ff24aaa545c45b8c581b2127d02d735aff8881
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - Copyright (C) 2000-2003 Internet Software Consortium.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - Permission to use, copy, modify, and/or distribute this software for any
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - purpose with or without fee is hereby granted, provided that the above
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - copyright notice and this permission notice appear in all copies.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - PERFORMANCE OF THIS SOFTWARE.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<link rel="prev" href="man.delv.html" title="delv">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<table width="100%" summary="Navigation header">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<a accesskey="p" href="man.delv.html">Prev</a>�</td>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<th width="60%" align="center">Manual pages</th>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<a name="id2617910"></a><h2>DESCRIPTION</h2>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<p><span><strong class="command">dnssec-checkds</strong></span>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering verifies the correctness of Delegation Signer (DS) or DNSSEC
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering Lookaside Validation (DLV) resource records for keys in a specified
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering If a <code class="option">file</code> is specified, then the zone is
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering read from that file to find the DNSKEY records. If not,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering then the DNSKEY records for the zone are looked up in the DNS.
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering Check for a DLV record in the specified lookaside domain,
6073b6f26ab9fc6bf335faa7073ec443eef093fdTom Gundersen instead of checking for a DS record in the zone's parent.
6073b6f26ab9fc6bf335faa7073ec443eef093fdTom Gundersen For example, to check for DLV records for "example.com"
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering in ISC's DLV zone, use:
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
6073b6f26ab9fc6bf335faa7073ec443eef093fdTom Gundersen Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering Used for testing.
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<p><span class="corpauthor">Internet Systems Consortium</span>
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<table width="100%" summary="Navigation footer">
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<a accesskey="p" href="man.delv.html">Prev</a>�</td>
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
1716f6dcf54d4c181c2e2558e3d5414f54c8d9caLennart Poettering<td width="40%" align="left" valign="top">delv�</td>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<p style="text-align: center;">BIND 9.11.0pre-alpha</p>