man.dnssec-importkey.html revision c313914d0e66b20969215e519bbf2ab4ecf39512
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
71cef386fae61275b03e203825680b39fedaa8c6Tinderbox User - Copyright (C) 2000-2018 Internet Systems Consortium, Inc. ("ISC")
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - This Source Code Form is subject to the terms of the Mozilla Public
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - License, v. 2.0. If a copy of the MPL was not distributed with this
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - file, You can obtain one at http://mozilla.org/MPL/2.0/.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<link rel="next" href="man.dnssec-keyfromlabel.html" title="dnssec-keyfromlabel">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<table width="100%" summary="Navigation header">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<tr><th colspan="3" align="center"><span class="application">dnssec-importkey</span></th></tr>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<th width="60%" align="center">Manual pages</th>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<a name="man.dnssec-importkey"></a><div class="titlepage"></div>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span class="application">dnssec-importkey</span>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User — import DNSKEY records from external systems so they can be managed
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="command">dnssec-importkey</code>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-P sync <em class="replaceable"><code>date/offset</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-D sync <em class="replaceable"><code>date/offset</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-v <em class="replaceable"><code>level</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <code class="command">dnssec-importkey</code>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User {<code class="option">-f <em class="replaceable"><code>filename</code></em></code>}
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-P sync <em class="replaceable"><code>date/offset</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-D sync <em class="replaceable"><code>date/offset</code></em></code>]
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User [<code class="option">-v <em class="replaceable"><code>level</code></em></code>]
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User<a name="id-1.14.10.7"></a><h2>DESCRIPTION</h2>
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <p><span class="command"><strong>dnssec-importkey</strong></span>
50066670817cdf9e86c832066d73715232b29680Tinderbox User reads a public DNSKEY record and generates a pair of
50066670817cdf9e86c832066d73715232b29680Tinderbox User .key/.private files. The DNSKEY record may be read from an
50066670817cdf9e86c832066d73715232b29680Tinderbox User existing .key file, in which case a corresponding .private file
50066670817cdf9e86c832066d73715232b29680Tinderbox User will be generated, or it may be read from any other file or
50066670817cdf9e86c832066d73715232b29680Tinderbox User from the standard input, in which case both .key and .private
50066670817cdf9e86c832066d73715232b29680Tinderbox User files will be generated.
50066670817cdf9e86c832066d73715232b29680Tinderbox User The newly-created .private file does <span class="emphasis"><em>not</em></span>
50066670817cdf9e86c832066d73715232b29680Tinderbox User contain private key data, and cannot be used for signing.
50066670817cdf9e86c832066d73715232b29680Tinderbox User However, having a .private file makes it possible to set
50066670817cdf9e86c832066d73715232b29680Tinderbox User publication (<code class="option">-P</code>) and deletion
50066670817cdf9e86c832066d73715232b29680Tinderbox User (<code class="option">-D</code>) times for the key, which means the
50066670817cdf9e86c832066d73715232b29680Tinderbox User public key can be added to and removed from the DNSKEY RRset
50066670817cdf9e86c832066d73715232b29680Tinderbox User on schedule even if the true private key is stored offline.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <div class="variablelist"><dl class="variablelist">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt>
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User Zone file mode: instead of a public keyfile name, the argument
50066670817cdf9e86c832066d73715232b29680Tinderbox User is the DNS domain name of a zone master file, which can be read
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User from <code class="option">file</code>. If the domain name is the same as
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User <code class="option">file</code>, then it may be omitted.
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User If <code class="option">file</code> is set to <code class="literal">"-"</code>, then
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User the zone data is read from the standard input.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User Sets the directory in which the key files are to reside.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt>
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User Sets the default TTL to use for this key when it is converted
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User into a DNSKEY RR. If the key is imported into a zone,
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User this is the TTL that will be used for it, unless there was
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User already a DNSKEY RRset in place, in which case the existing TTL
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User would take precedence. Setting the default TTL to
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User <code class="literal">0</code> or <code class="literal">none</code> removes it.
50066670817cdf9e86c832066d73715232b29680Tinderbox User Emit usage message and exit.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User Sets the debugging level.
6f1205897504b8f50b1785975482c995888dd630Tinderbox User Prints version information.
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User<a name="id-1.14.10.9"></a><h2>TIMING OPTIONS</h2>
50066670817cdf9e86c832066d73715232b29680Tinderbox User Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
50066670817cdf9e86c832066d73715232b29680Tinderbox User If the argument begins with a '+' or '-', it is interpreted as
50066670817cdf9e86c832066d73715232b29680Tinderbox User an offset from the present time. For convenience, if such an offset
50066670817cdf9e86c832066d73715232b29680Tinderbox User is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
50066670817cdf9e86c832066d73715232b29680Tinderbox User then the offset is computed in years (defined as 365 24-hour days,
50066670817cdf9e86c832066d73715232b29680Tinderbox User ignoring leap years), months (defined as 30 24-hour days), weeks,
50066670817cdf9e86c832066d73715232b29680Tinderbox User days, hours, or minutes, respectively. Without a suffix, the offset
50066670817cdf9e86c832066d73715232b29680Tinderbox User is computed in seconds. To explicitly prevent a date from being
50066670817cdf9e86c832066d73715232b29680Tinderbox User set, use 'none' or 'never'.
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <div class="variablelist"><dl class="variablelist">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User Sets the date on which a key is to be published to the zone.
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User After that date, the key will be included in the zone but will
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User not be used to sign it.
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User<dt><span class="term">-P sync <em class="replaceable"><code>date/offset</code></em></span></dt>
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User Sets the date on which CDS and CDNSKEY records that match this
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User key are to be published to the zone.
50066670817cdf9e86c832066d73715232b29680Tinderbox User<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User Sets the date on which the key is to be deleted. After that
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User date, the key will no longer be included in the zone. (It
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User may remain in the key repository, however.)
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User<dt><span class="term">-D sync <em class="replaceable"><code>date/offset</code></em></span></dt>
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User Sets the date on which the CDS and CDNSKEY records that match
e62b9c9ce6413fb183c8116381e75dcd07ca5517Tinderbox User this key are to be deleted.
50066670817cdf9e86c832066d73715232b29680Tinderbox User A keyfile can be designed by the key identification
50066670817cdf9e86c832066d73715232b29680Tinderbox User <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
50066670817cdf9e86c832066d73715232b29680Tinderbox User <code class="filename">Knnnn.+aaa+iiiii.key</code> as generated by
50066670817cdf9e86c832066d73715232b29680Tinderbox User <span class="refentrytitle">dnssec-keygen</span>(8).
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span class="refentrytitle">dnssec-keygen</span>(8)
7911e6f9de303bca5a3d8b34f4330c8f7cecffaeTinderbox User <span class="refentrytitle">dnssec-signzone</span>(8)
50066670817cdf9e86c832066d73715232b29680Tinderbox User <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
50066670817cdf9e86c832066d73715232b29680Tinderbox User<table width="100%" summary="Navigation footer">
50066670817cdf9e86c832066d73715232b29680Tinderbox User<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
cd32f419a8a5432fbb139f56ee73cbf68b9350ccTinderbox User<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<span class="application">dnssec-dsfromkey</span>�</td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
50066670817cdf9e86c832066d73715232b29680Tinderbox User<td width="40%" align="right" valign="top">�<span class="application">dnssec-keyfromlabel</span>
c313914d0e66b20969215e519bbf2ab4ecf39512Tinderbox User<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.3 (Extended Support Version)</p>