man.dnssec-importkey.html revision 6f1205897504b8f50b1785975482c995888dd630
205c10066a0acfeac52d1a135671f41d207b8557Automatic Updater - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
205c10066a0acfeac52d1a135671f41d207b8557Automatic Updater - Copyright (C) 2000-2003 Internet Software Consortium.
0c39b3ed9409ecb277d5e32fa763a4e4d6598df8Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
46da3117812814a29432a8d9a9ccf8acdbfdadceAutomatic Updater - purpose with or without fee is hereby granted, provided that the above
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater - copyright notice and this permission notice appear in all copies.
2ec4ab21838e218863d052ebfa3e106e04f50820Evan Hunt - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ea854b585041ad19f70f7af15e08144ef2c2bd1bMark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
78cb74fab4665da2e2641ba909c6f59f74cc4193Automatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
cd0aa2d941d1438fabb5337f1f38c49478edf71dAutomatic Updater - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
56874aef380a64a2c183b7c282c3e7a361d67fa1Automatic Updater<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
58be84825d7f5de30e50eb7206b37227ecd8055bAutomatic Updater<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
3cc98b8ecedcbc8465f1cf2740b966b315662430Automatic Updater<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater<link rel="next" href="man.dnssec-keyfromlabel.html" title="dnssec-keyfromlabel">
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews<table width="100%" summary="Navigation header">
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater<tr><th colspan="3" align="center"><span class="application">dnssec-importkey</span></th></tr>
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson<th width="60%" align="center">Manual pages</th>
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<a name="man.dnssec-importkey"></a><div class="titlepage"></div>
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt<p><span class="application">dnssec-importkey</span> — Import DNSKEY records from external systems so they can be managed.</p>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] {<code class="option">keyfile</code>}</p></div>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> {<code class="option">-f <em class="replaceable"><code>filename</code></em></code>} [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">dnsname</code>]</p></div>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<a name="id2619198"></a><h2>DESCRIPTION</h2>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater<p><span><strong class="command">dnssec-importkey</strong></span>
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater reads a public DNSKEY record and generates a pair of
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater .key/.private files. The DNSKEY record may be read from an
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater existing .key file, in which case a corresponding .private file
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater will be generated, or it may be read from any other file or
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater from the standard input, in which case both .key and .private
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews files will be generated.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The newly-created .private file does <span class="emphasis"><em>not</em></span>
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater contain private key data, and cannot be used for signing.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews However, having a .private file makes it possible to set
129090f0f6f91753b4a085ab635e28549fd018adAutomatic Updater publication (<code class="option">-P</code>) and deletion
129090f0f6f91753b4a085ab635e28549fd018adAutomatic Updater (<code class="option">-D</code>) times for the key, which means the
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews public key can be added to and removed from the DNSKEY RRset
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater on schedule even if the true private key is stored offline.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews<dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt>
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Zone file mode: instead of a public keyfile name, the argument
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater is the DNS domain name of a zone master file, which can be read
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson from <code class="option">file</code>. If the domain name is the same as
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater <code class="option">file</code>, then it may be omitted.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater If <code class="option">file</code> is set to <code class="literal">"-"</code>, then
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson the zone data is read from the standard input.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater Sets the directory in which the key files are to reside.
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater<dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt>
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater Sets the default TTL to use for this key when it is converted
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater into a DNSKEY RR. If the key is imported into a zone,
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont this is the TTL that will be used for it, unless there was
0c39b3ed9409ecb277d5e32fa763a4e4d6598df8Automatic Updater already a DNSKEY RRset in place, in which case the existing TTL
0c39b3ed9409ecb277d5e32fa763a4e4d6598df8Automatic Updater would take precedence. Setting the default TTL to
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont <code class="literal">0</code> or <code class="literal">none</code> removes it.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Emit usage message and exit.
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater Sets the debugging level.
995eaa289ba9709c64ef89b3776e53c36adc0010Automatic Updater Prints version information.
0c39b3ed9409ecb277d5e32fa763a4e4d6598df8Automatic Updater<a name="id2619364"></a><h2>TIMING OPTIONS</h2>
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater If the argument begins with a '+' or '-', it is interpreted as
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater an offset from the present time. For convenience, if such an offset
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater then the offset is computed in years (defined as 365 24-hour days,
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater ignoring leap years), months (defined as 30 24-hour days), weeks,
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater days, hours, or minutes, respectively. Without a suffix, the offset
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater is computed in seconds. To explicitly prevent a date from being
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater set, use 'none' or 'never'.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater Sets the date on which a key is to be published to the zone.
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater After that date, the key will be included in the zone but will
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater not be used to sign it.
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater Sets the date on which the key is to be deleted. After that
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson date, the key will no longer be included in the zone. (It
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater may remain in the key repository, however.)
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater A keyfile can be designed by the key identification
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater <code class="filename">Knnnn.+aaa+iiiii.key</code> as generated by
3b6e4c84a525b0b3fc9e8affd8bb9fa5c000345fAutomatic Updater <span class="refentrytitle">dnssec-keygen</span>(8).
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
c243d779731a410f8dc2d2feeed20c15f299b6e3Automatic Updater <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater<p><span class="corpauthor">Internet Systems Consortium</span>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<table width="100%" summary="Navigation footer">
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater<span class="application">dnssec-dsfromkey</span>�</td>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater<td width="40%" align="right" valign="top">�<span class="application">dnssec-keyfromlabel</span>