man.dnssec-checkds.html revision d06befed22ab48ac514e097b726e07122e3647fb
842ae4bd224140319ae7feec1872b93dfd491143fielding - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
842ae4bd224140319ae7feec1872b93dfd491143fielding - Copyright (C) 2000-2003 Internet Software Consortium.
842ae4bd224140319ae7feec1872b93dfd491143fielding - Permission to use, copy, modify, and/or distribute this software for any
842ae4bd224140319ae7feec1872b93dfd491143fielding - purpose with or without fee is hereby granted, provided that the above
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding - copyright notice and this permission notice appear in all copies.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
ce9621257ef9e54c1bbe5ad8a5f445a1f211c2dcnd - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding - PERFORMANCE OF THIS SOFTWARE.
1b21d7b3d97def358b2e923655edeb16613a1c31gstein<!-- $Id$ -->
1b21d7b3d97def358b2e923655edeb16613a1c31gstein<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
1b21d7b3d97def358b2e923655edeb16613a1c31gstein<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
1b21d7b3d97def358b2e923655edeb16613a1c31gstein<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
1b21d7b3d97def358b2e923655edeb16613a1c31gstein<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
1b21d7b3d97def358b2e923655edeb16613a1c31gstein<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
2e123e8beedc9f921448c113e2d6823a92fd5261fielding<a accesskey="p" href="man.delv.html">Prev</a>�</td>
59cc3793cde3137c97fc55683a2018d5e49b54e9nd<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<p><span><strong class="command">dnssec-checkds</strong></span>
d081979209689f7816b4520b0e0fe093566a9b7frbb verifies the correctness of Delegation Signer (DS) or DNSSEC
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding Lookaside Validation (DLV) resource records for keys in a specified
d081979209689f7816b4520b0e0fe093566a9b7frbb<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
d081979209689f7816b4520b0e0fe093566a9b7frbb If a <code class="option">file</code> is specified, then the zone is
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding read from that file to find the DNSKEY records. If not,
d081979209689f7816b4520b0e0fe093566a9b7frbb then the DNSKEY records for the zone are looked up in the DNS.
d081979209689f7816b4520b0e0fe093566a9b7frbb<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
d081979209689f7816b4520b0e0fe093566a9b7frbb Check for a DLV record in the specified lookaside domain,
d081979209689f7816b4520b0e0fe093566a9b7frbb instead of checking for a DS record in the zone's parent.
d081979209689f7816b4520b0e0fe093566a9b7frbb For example, to check for DLV records for "example.com"
d081979209689f7816b4520b0e0fe093566a9b7frbb in ISC's DLV zone, use:
d081979209689f7816b4520b0e0fe093566a9b7frbb <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
3d96ee83babeec32482c9082c9426340cee8c44dwrowe for testing.
d4f351074a8f7af5e41aa0a70410816436608e3dianh<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding Used for testing.
59cc3793cde3137c97fc55683a2018d5e49b54e9nd<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
59cc3793cde3137c97fc55683a2018d5e49b54e9nd <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
59cc3793cde3137c97fc55683a2018d5e49b54e9nd <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
59cc3793cde3137c97fc55683a2018d5e49b54e9nd<p><span class="corpauthor">Internet Systems Consortium</span>
59cc3793cde3137c97fc55683a2018d5e49b54e9nd<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
59cc3793cde3137c97fc55683a2018d5e49b54e9nd<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<td width="40%" align="left" valign="top">delv�</td>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
09fe0b69d3d1e8c8041c9ce99ee77b8b44b5e3b1fielding<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>
1ccd992d37d62c8cb2056126f2234f64ec189bfddougm<p style="text-align: center;">BIND 9.11.0pre-alpha</p>