man.dnssec-importkey.html revision 46472a450e043434d78fa18edc73bca8c47f3981
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
e6d40133bc9f858308654afb1262b8b483ec5922Till Mossakowski - Copyright (C) 2000-2003 Internet Software Consortium.
98890889ffb2e8f6f722b00e265a211f13b5a861Corneliu-Claudiu Prodescu - Permission to use, copy, modify, and/or distribute this software for any
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder - purpose with or without fee is hereby granted, provided that the above
34bff097c14521b5e57ce37279a34256e1f78aa5Klaus Luettich - copyright notice and this permission notice appear in all copies.
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
e6d40133bc9f858308654afb1262b8b483ec5922Till Mossakowski - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
d543cf2bb0c810781625c76fe135476d46270d88Till Mossakowski - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder - PERFORMANCE OF THIS SOFTWARE.
615ef723f845e48d74cd88934738ac9ba76de0b3Christian Maeder<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<link rel="next" href="man.dnssec-keyfromlabel.html" title="dnssec-keyfromlabel">
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<table width="100%" summary="Navigation header">
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<tr><th colspan="3" align="center"><span class="application">dnssec-importkey</span></th></tr>
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder<th width="60%" align="center">Manual pages</th>
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder<a name="man.dnssec-importkey"></a><div class="titlepage"></div>
3e87e1dc85fa76cc6eaeb8eafbc0bea77af939f4Christian Maeder<p><span class="application">dnssec-importkey</span> — import DNSKEY records from external systems so they can be managed</p>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-P sync <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D sync <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] {<code class="option">keyfile</code>}</p></div>
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> {<code class="option">-f <em class="replaceable"><code>filename</code></em></code>} [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-P sync <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D sync <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">dnsname</code>]</p></div>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<a name="id-1.14.8.7"></a><h2>DESCRIPTION</h2>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<p><span class="command"><strong>dnssec-importkey</strong></span>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder reads a public DNSKEY record and generates a pair of
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder .key/.private files. The DNSKEY record may be read from an
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder existing .key file, in which case a corresponding .private file
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder will be generated, or it may be read from any other file or
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder from the standard input, in which case both .key and .private
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder files will be generated.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder The newly-created .private file does <span class="emphasis"><em>not</em></span>
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder contain private key data, and cannot be used for signing.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder However, having a .private file makes it possible to set
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder publication (<code class="option">-P</code>) and deletion
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder (<code class="option">-D</code>) times for the key, which means the
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder public key can be added to and removed from the DNSKEY RRset
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder on schedule even if the true private key is stored offline.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<div class="variablelist"><dl class="variablelist">
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt>
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder Zone file mode: instead of a public keyfile name, the argument
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder is the DNS domain name of a zone master file, which can be read
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder from <code class="option">file</code>. If the domain name is the same as
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder <code class="option">file</code>, then it may be omitted.
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder If <code class="option">file</code> is set to <code class="literal">"-"</code>, then
6bcdf8fc684a7a2d03f41bba002cfeaa0fbe023cChristian Maeder the zone data is read from the standard input.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder Sets the directory in which the key files are to reside.
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt>
6bcdf8fc684a7a2d03f41bba002cfeaa0fbe023cChristian Maeder Sets the default TTL to use for this key when it is converted
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder into a DNSKEY RR. If the key is imported into a zone,
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder this is the TTL that will be used for it, unless there was
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder already a DNSKEY RRset in place, in which case the existing TTL
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder would take precedence. Setting the default TTL to
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder <code class="literal">0</code> or <code class="literal">none</code> removes it.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder Emit usage message and exit.
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder Sets the debugging level.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder Prints version information.
4f95b96ea80195ff6dbd2581dbc2d7e6c91ec994Christian Maeder<a name="id-1.14.8.9"></a><h2>TIMING OPTIONS</h2>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder If the argument begins with a '+' or '-', it is interpreted as
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder an offset from the present time. For convenience, if such an offset
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder then the offset is computed in years (defined as 365 24-hour days,
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder ignoring leap years), months (defined as 30 24-hour days), weeks,
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder days, hours, or minutes, respectively. Without a suffix, the offset
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder is computed in seconds. To explicitly prevent a date from being
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder set, use 'none' or 'never'.
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<div class="variablelist"><dl class="variablelist">
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder Sets the date on which a key is to be published to the zone.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder After that date, the key will be included in the zone but will
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder not be used to sign it.
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<dt><span class="term">-P sync <em class="replaceable"><code>date/offset</code></em></span></dt>
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder Sets the date on which CDS and CDNSKEY records that match this
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder key are to be published to the zone.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder Sets the date on which the key is to be deleted. After that
82dd689e5888d7d489ed20ce010b0cccfcd1db34Christian Maeder date, the key will no longer be included in the zone. (It
6bcdf8fc684a7a2d03f41bba002cfeaa0fbe023cChristian Maeder may remain in the key repository, however.)
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<dt><span class="term">-D sync <em class="replaceable"><code>date/offset</code></em></span></dt>
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder Sets the date on which the CDS and CDNSKEY records that match
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder this key are to be deleted.
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder A keyfile can be designed by the key identification
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder <code class="filename">Knnnn.+aaa+iiiii.key</code> as generated by
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder <span class="refentrytitle">dnssec-keygen</span>(8).
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<a name="id-1.14.8.11"></a><h2>SEE ALSO</h2>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<table width="100%" summary="Navigation footer">
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
3f6b3834ba54649fc02cae002bac0258b6b5dcbaChristian Maeder<span class="application">dnssec-dsfromkey</span>�</td>
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<td width="40%" align="right" valign="top">�<span class="application">dnssec-keyfromlabel</span>
e953bea49e7f0e1a43bccf2a66c5e2a2b50848e0Christian Maeder<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0a1</p>