man.dnssec-checkds.html revision a87790b9d8e062fac1b2dfb8903e77bfe92a3891
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - Copyright (C) 2000-2003 Internet Software Consortium.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - Permission to use, copy, modify, and/or distribute this software for any
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - purpose with or without fee is hereby granted, provided that the above
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - copyright notice and this permission notice appear in all copies.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte - PERFORMANCE OF THIS SOFTWARE.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<!-- $Id$ -->
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
c4ddbbe1ca066fd6662bdb8c477ad412b97c5590Daniel Beauregard<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
c4ddbbe1ca066fd6662bdb8c477ad412b97c5590Daniel Beauregard<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
c4ddbbe1ca066fd6662bdb8c477ad412b97c5590Daniel Beauregard<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
c4ddbbe1ca066fd6662bdb8c477ad412b97c5590Daniel Beauregard<link rel="prev" href="man.delve.html" title="delve">
c4ddbbe1ca066fd6662bdb8c477ad412b97c5590Daniel Beauregard<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
3fb517f786391b507780c78aabb8d98bfea9efe9James Moore<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<a accesskey="p" href="man.delve.html">Prev</a>�</td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
4558d122136f151d62acbbc02ddb42df89a5ef66Viswanathan Kannappan<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
4558d122136f151d62acbbc02ddb42df89a5ef66Viswanathan Kannappan<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
4558d122136f151d62acbbc02ddb42df89a5ef66Viswanathan Kannappan<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
4558d122136f151d62acbbc02ddb42df89a5ef66Viswanathan Kannappan<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<p><span><strong class="command">dnssec-checkds</strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte verifies the correctness of Delegation Signer (DS) or DNSSEC
a2255df3e7bbadf7b06c76c8226a1f6f5bbc9e07Daniel Beauregard Lookaside Validation (DLV) resource records for keys in a specified
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte If a <code class="option">file</code> is specified, then the zone is
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte read from that file to find the DNSKEY records. If not,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte then the DNSKEY records for the zone are looked up in the DNS.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Check for a DLV record in the specified lookaside domain,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte instead of checking for a DS record in the zone's parent.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte For example, to check for DLV records for "example.com"
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte in ISC's DLV zone, use:
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte for testing.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
c4ddbbe1ca066fd6662bdb8c477ad412b97c5590Daniel Beauregard Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte Used for testing.
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
a2255df3e7bbadf7b06c76c8226a1f6f5bbc9e07Daniel Beauregard <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<p><span class="corpauthor">Internet Systems Consortium</span>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<a accesskey="p" href="man.delve.html">Prev</a>�</td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="40%" align="left" valign="top">delve�</td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
fcf3ce441efd61da9bb2884968af01cb7c1452ccJohn Forte<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>