man.dnssec-checkds.html revision c266f8b440d139002432e3d3b82416c9d75048d1
9210d8796eaf4125ac58c034f9b5ca167857a55aAutomatic Updater - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
9210d8796eaf4125ac58c034f9b5ca167857a55aAutomatic Updater - Copyright (C) 2000-2003 Internet Software Consortium.
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt - purpose with or without fee is hereby granted, provided that the above
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt - copyright notice and this permission notice appear in all copies.
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
9210d8796eaf4125ac58c034f9b5ca167857a55aAutomatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt - PERFORMANCE OF THIS SOFTWARE.
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
9b469e3c59015b1a4899c9d8395168126fe094fdAutomatic Updater<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<link rel="prev" href="man.delv.html" title="delv">
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<a accesskey="p" href="man.delv.html">Prev</a>�</td>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<p><span><strong class="command">dnssec-checkds</strong></span>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt verifies the correctness of Delegation Signer (DS) or DNSSEC
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt Lookaside Validation (DLV) resource records for keys in a specified
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt If a <code class="option">file</code> is specified, then the zone is
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt read from that file to find the DNSKEY records. If not,
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt then the DNSKEY records for the zone are looked up in the DNS.
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt Check for a DLV record in the specified lookaside domain,
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt instead of checking for a DS record in the zone's parent.
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt For example, to check for DLV records for "example.com"
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt in ISC's DLV zone, use:
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt for testing.
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt Used for testing.
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
7ae7246a6339bb3a79ffc9f2f9c486de9a2bf65eAutomatic Updater <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
7ae7246a6339bb3a79ffc9f2f9c486de9a2bf65eAutomatic Updater<p><span class="corpauthor">Internet Systems Consortium</span>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<a accesskey="p" href="man.delv.html">Prev</a>�</td>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<td width="40%" align="left" valign="top">delv�</td>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
76786c2904942b708d8a7a4659df74da5dc9446eEvan Hunt<p style="text-align: center;">BIND 9.11.0pre-alpha</p>