man.dnssec-checkds.html revision b4556ecdbc3cad55e1c85ce32b73b7bcd39e43dc
842ae4bd224140319ae7feec1872b93dfd491143fielding - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
842ae4bd224140319ae7feec1872b93dfd491143fielding - Copyright (C) 2000-2003 Internet Software Consortium.
842ae4bd224140319ae7feec1872b93dfd491143fielding - Permission to use, copy, modify, and/or distribute this software for any
842ae4bd224140319ae7feec1872b93dfd491143fielding - purpose with or without fee is hereby granted, provided that the above
b0fb330a8581c8bfab5e523084f9f39264a52b12gstein - copyright notice and this permission notice appear in all copies.
b0fb330a8581c8bfab5e523084f9f39264a52b12gstein - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
b0fb330a8581c8bfab5e523084f9f39264a52b12gstein - PERFORMANCE OF THIS SOFTWARE.
f4c310fd2555c6faca1f980f00b161eadb089023gstein<!-- $Id$ -->
f4c310fd2555c6faca1f980f00b161eadb089023gstein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1f6e6566a4ce31a0b95d5400c36d0aaff7a6e94agstein<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
8a46775d163c06a8c51d1b0a3f2edfde945cb1d8stoddard<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
cccd31fa4a72fe23cc3249c06db181b274a55a69gstein<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
cccd31fa4a72fe23cc3249c06db181b274a55a69gstein<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
f4c310fd2555c6faca1f980f00b161eadb089023gstein<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
f5ec9b038bb9db933072ba2c0a8e7bb2a3cedbdagstein<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
f4c310fd2555c6faca1f980f00b161eadb089023gstein<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
f4c310fd2555c6faca1f980f00b161eadb089023gstein<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
f4c310fd2555c6faca1f980f00b161eadb089023gstein<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
52c1d304b1bd8e05da40a7cded2ecb9f0ba614c5gstein<p><span><strong class="command">dnssec-checkds</strong></span>
52c1d304b1bd8e05da40a7cded2ecb9f0ba614c5gstein verifies the correctness of Delegation Signer (DS) or DNSSEC
52c1d304b1bd8e05da40a7cded2ecb9f0ba614c5gstein Lookaside Validation (DLV) resource records for keys in a specified
707ecf9559338ec06b24334bc9abcca670325cc4gstein<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
707ecf9559338ec06b24334bc9abcca670325cc4gstein If a <code class="option">file</code> is specified, then the zone is
707ecf9559338ec06b24334bc9abcca670325cc4gstein read from that file to find the DNSKEY records. If not,
52c1d304b1bd8e05da40a7cded2ecb9f0ba614c5gstein then the DNSKEY records for the zone are looked up in the DNS.
f4c310fd2555c6faca1f980f00b161eadb089023gstein<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
f4c310fd2555c6faca1f980f00b161eadb089023gstein Check for a DLV record in the specified lookaside domain,
707ecf9559338ec06b24334bc9abcca670325cc4gstein instead of checking for a DS record in the zone's parent.
707ecf9559338ec06b24334bc9abcca670325cc4gstein For example, to check for DLV records for "example.com"
707ecf9559338ec06b24334bc9abcca670325cc4gstein in ISC's DLV zone, use:
707ecf9559338ec06b24334bc9abcca670325cc4gstein <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
707ecf9559338ec06b24334bc9abcca670325cc4gstein<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
707ecf9559338ec06b24334bc9abcca670325cc4gstein Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
707ecf9559338ec06b24334bc9abcca670325cc4gstein for testing.
707ecf9559338ec06b24334bc9abcca670325cc4gstein<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
707ecf9559338ec06b24334bc9abcca670325cc4gstein Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
707ecf9559338ec06b24334bc9abcca670325cc4gstein Used for testing.
707ecf9559338ec06b24334bc9abcca670325cc4gstein<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
707ecf9559338ec06b24334bc9abcca670325cc4gstein <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
707ecf9559338ec06b24334bc9abcca670325cc4gstein <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
f4c310fd2555c6faca1f980f00b161eadb089023gstein<p><span class="corpauthor">Internet Systems Consortium</span>
f4c310fd2555c6faca1f980f00b161eadb089023gstein<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
f4c310fd2555c6faca1f980f00b161eadb089023gstein<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
6f15570e3adc0faf87bf55f70857028276fc9e32wrowe<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
f4c310fd2555c6faca1f980f00b161eadb089023gstein<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
0b1895a2cd5b4a9450709abdb7ae9974908f9382gstein<p style="text-align: center;">BIND 9.11.0pre-alpha</p>