man.dnssec-importkey.html revision 30c0c7470d5bfabd8f43c563f4eca636d06cc484
50066670817cdf9e86c832066d73715232b29680Tinderbox User - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
50066670817cdf9e86c832066d73715232b29680Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
50066670817cdf9e86c832066d73715232b29680Tinderbox User - Permission to use, copy, modify, and/or distribute this software for any
50066670817cdf9e86c832066d73715232b29680Tinderbox User - purpose with or without fee is hereby granted, provided that the above
50066670817cdf9e86c832066d73715232b29680Tinderbox User - copyright notice and this permission notice appear in all copies.
50066670817cdf9e86c832066d73715232b29680Tinderbox User - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
50066670817cdf9e86c832066d73715232b29680Tinderbox User - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
50066670817cdf9e86c832066d73715232b29680Tinderbox User - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
50066670817cdf9e86c832066d73715232b29680Tinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
50066670817cdf9e86c832066d73715232b29680Tinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
50066670817cdf9e86c832066d73715232b29680Tinderbox User - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
50066670817cdf9e86c832066d73715232b29680Tinderbox User - PERFORMANCE OF THIS SOFTWARE.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<link rel="next" href="man.dnssec-keyfromlabel.html" title="dnssec-keyfromlabel">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<table width="100%" summary="Navigation header">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<tr><th colspan="3" align="center"><span class="application">dnssec-importkey</span></th></tr>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<th width="60%" align="center">Manual pages</th>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<a name="man.dnssec-importkey"></a><div class="titlepage"></div>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<p><span class="application">dnssec-importkey</span> — Import DNSKEY records from external systems so they can be managed.</p>
6f1205897504b8f50b1785975482c995888dd630Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] {<code class="option">keyfile</code>}</p></div>
6f1205897504b8f50b1785975482c995888dd630Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> {<code class="option">-f <em class="replaceable"><code>filename</code></em></code>} [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">dnsname</code>]</p></div>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<p><span><strong class="command">dnssec-importkey</strong></span>
50066670817cdf9e86c832066d73715232b29680Tinderbox User reads a public DNSKEY record and generates a pair of
50066670817cdf9e86c832066d73715232b29680Tinderbox User .key/.private files. The DNSKEY record may be read from an
50066670817cdf9e86c832066d73715232b29680Tinderbox User existing .key file, in which case a corresponding .private file
50066670817cdf9e86c832066d73715232b29680Tinderbox User will be generated, or it may be read from any other file or
50066670817cdf9e86c832066d73715232b29680Tinderbox User from the standard input, in which case both .key and .private
50066670817cdf9e86c832066d73715232b29680Tinderbox User files will be generated.
50066670817cdf9e86c832066d73715232b29680Tinderbox User The newly-created .private file does <span class="emphasis"><em>not</em></span>
50066670817cdf9e86c832066d73715232b29680Tinderbox User contain private key data, and cannot be used for signing.
50066670817cdf9e86c832066d73715232b29680Tinderbox User However, having a .private file makes it possible to set
50066670817cdf9e86c832066d73715232b29680Tinderbox User publication (<code class="option">-P</code>) and deletion
50066670817cdf9e86c832066d73715232b29680Tinderbox User (<code class="option">-D</code>) times for the key, which means the
50066670817cdf9e86c832066d73715232b29680Tinderbox User public key can be added to and removed from the DNSKEY RRset
50066670817cdf9e86c832066d73715232b29680Tinderbox User on schedule even if the true private key is stored offline.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt>
50066670817cdf9e86c832066d73715232b29680Tinderbox User Zone file mode: instead of a public keyfile name, the argument
50066670817cdf9e86c832066d73715232b29680Tinderbox User is the DNS domain name of a zone master file, which can be read
50066670817cdf9e86c832066d73715232b29680Tinderbox User from <code class="option">file</code>. If the domain name is the same as
50066670817cdf9e86c832066d73715232b29680Tinderbox User <code class="option">file</code>, then it may be omitted.
50066670817cdf9e86c832066d73715232b29680Tinderbox User If <code class="option">file</code> is set to <code class="literal">"-"</code>, then
50066670817cdf9e86c832066d73715232b29680Tinderbox User the zone data is read from the standard input.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
50066670817cdf9e86c832066d73715232b29680Tinderbox User Sets the directory in which the key files are to reside.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt>
50066670817cdf9e86c832066d73715232b29680Tinderbox User Sets the default TTL to use for this key when it is converted
50066670817cdf9e86c832066d73715232b29680Tinderbox User into a DNSKEY RR. If the key is imported into a zone,
50066670817cdf9e86c832066d73715232b29680Tinderbox User this is the TTL that will be used for it, unless there was
50066670817cdf9e86c832066d73715232b29680Tinderbox User already a DNSKEY RRset in place, in which case the existing TTL
50066670817cdf9e86c832066d73715232b29680Tinderbox User would take precedence. Setting the default TTL to
50066670817cdf9e86c832066d73715232b29680Tinderbox User <code class="literal">0</code> or <code class="literal">none</code> removes it.
50066670817cdf9e86c832066d73715232b29680Tinderbox User Emit usage message and exit.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
50066670817cdf9e86c832066d73715232b29680Tinderbox User Sets the debugging level.
6f1205897504b8f50b1785975482c995888dd630Tinderbox User Prints version information.
78ec962d9828200d18cd0e41b7d6b9792a74923dTinderbox User<a name="id2619820"></a><h2>TIMING OPTIONS</h2>
50066670817cdf9e86c832066d73715232b29680Tinderbox User Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
50066670817cdf9e86c832066d73715232b29680Tinderbox User If the argument begins with a '+' or '-', it is interpreted as
50066670817cdf9e86c832066d73715232b29680Tinderbox User an offset from the present time. For convenience, if such an offset
50066670817cdf9e86c832066d73715232b29680Tinderbox User is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
50066670817cdf9e86c832066d73715232b29680Tinderbox User then the offset is computed in years (defined as 365 24-hour days,
50066670817cdf9e86c832066d73715232b29680Tinderbox User ignoring leap years), months (defined as 30 24-hour days), weeks,
50066670817cdf9e86c832066d73715232b29680Tinderbox User days, hours, or minutes, respectively. Without a suffix, the offset
50066670817cdf9e86c832066d73715232b29680Tinderbox User is computed in seconds. To explicitly prevent a date from being
50066670817cdf9e86c832066d73715232b29680Tinderbox User set, use 'none' or 'never'.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
50066670817cdf9e86c832066d73715232b29680Tinderbox User Sets the date on which a key is to be published to the zone.
50066670817cdf9e86c832066d73715232b29680Tinderbox User After that date, the key will be included in the zone but will
50066670817cdf9e86c832066d73715232b29680Tinderbox User not be used to sign it.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
50066670817cdf9e86c832066d73715232b29680Tinderbox User Sets the date on which the key is to be deleted. After that
50066670817cdf9e86c832066d73715232b29680Tinderbox User date, the key will no longer be included in the zone. (It
50066670817cdf9e86c832066d73715232b29680Tinderbox User may remain in the key repository, however.)
50066670817cdf9e86c832066d73715232b29680Tinderbox User A keyfile can be designed by the key identification
50066670817cdf9e86c832066d73715232b29680Tinderbox User <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
50066670817cdf9e86c832066d73715232b29680Tinderbox User <code class="filename">Knnnn.+aaa+iiiii.key</code> as generated by
50066670817cdf9e86c832066d73715232b29680Tinderbox User <span class="refentrytitle">dnssec-keygen</span>(8).
50066670817cdf9e86c832066d73715232b29680Tinderbox User<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
50066670817cdf9e86c832066d73715232b29680Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
50066670817cdf9e86c832066d73715232b29680Tinderbox User <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
50066670817cdf9e86c832066d73715232b29680Tinderbox User<p><span class="corpauthor">Internet Systems Consortium</span>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<table width="100%" summary="Navigation footer">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<span class="application">dnssec-dsfromkey</span>�</td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="40%" align="right" valign="top">�<span class="application">dnssec-keyfromlabel</span>
30c0c7470d5bfabd8f43c563f4eca636d06cc484Tinderbox User<p style="text-align: center;">BIND 9.11.0pre-alpha</p>