man.dnssec-importkey.html revision f6e04b59238a309b1be2d5415c195325edec8aa6
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - Copyright (C) 2000-2003 Internet Software Consortium.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - Permission to use, copy, modify, and/or distribute this software for any
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - purpose with or without fee is hereby granted, provided that the above
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - copyright notice and this permission notice appear in all copies.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza - PERFORMANCE OF THIS SOFTWARE.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<!-- $Id$ -->
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
6f269e977ae7318d374676a38d516ed59c43135eMark J. Nelson<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<link rel="next" href="man.dnssec-keyfromlabel.html" title="dnssec-keyfromlabel">
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<tr><th colspan="3" align="center"><span class="application">dnssec-importkey</span></th></tr>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<a name="man.dnssec-importkey"></a><div class="titlepage"></div>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<p><span class="application">dnssec-importkey</span> — Import DNSKEY records from external systems so they can be managed.</p>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] {<code class="option">keyfile</code>}</p></div>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> {<code class="option">-f <em class="replaceable"><code>filename</code></em></code>} [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">dnsname</code>]</p></div>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<p><span><strong class="command">dnssec-importkey</strong></span>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza reads a public DNSKEY record and generates a pair of
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza .key/.private files. The DNSKEY record may be read from an
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza existing .key file, in which case a corresponding .private file
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza will be generated, or it may be read from any other file or
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza from the standard input, in which case both .key and .private
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza files will be generated.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza The newly-created .private file does <span class="emphasis"><em>not</em></span>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza contain private key data, and cannot be used for signing.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza However, having a .private file makes it possible to set
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza publication (<code class="option">-P</code>) and deletion
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza (<code class="option">-D</code>) times for the key, which means the
5084e753b79a753c8b532c06eb3ad1d025e8e472Mark J. Nelson public key can be added to and removed from the DNSKEY RRset
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza on schedule even if the true private key is stored offline.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Zone file mode: instead of a public keyfile name, the argument
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza is the DNS domain name of a zone master file, which can be read
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza from <code class="option">file</code>. If the domain name is the same as
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza <code class="option">file</code>, then it may be omitted.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza If <code class="option">file</code> is set to <code class="literal">"-"</code>, then
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza the zone data is read from the standard input.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Sets the directory in which the key files are to reside.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Sets the default TTL to use for this key when it is converted
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza into a DNSKEY RR. If the key is imported into a zone,
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza this is the TTL that will be used for it, unless there was
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza already a DNSKEY RRset in place, in which case the existing TTL
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza would take precedence. Setting the default TTL to
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza <code class="literal">0</code> or <code class="literal">none</code> removes it.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Emit usage message and exit.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Sets the debugging level.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Prints version information.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza If the argument begins with a '+' or '-', it is interpreted as
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza an offset from the present time. For convenience, if such an offset
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza then the offset is computed in years (defined as 365 24-hour days,
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza ignoring leap years), months (defined as 30 24-hour days), weeks,
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza days, hours, or minutes, respectively. Without a suffix, the offset
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza is computed in seconds. To explicitly prevent a date from being
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza set, use 'none' or 'never'.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Sets the date on which a key is to be published to the zone.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza After that date, the key will be included in the zone but will
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza not be used to sign it.
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza Sets the date on which the key is to be deleted. After that
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza date, the key will no longer be included in the zone. (It
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza may remain in the key repository, however.)
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza A keyfile can be designed by the key identification
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza <code class="filename">Knnnn.+aaa+iiiii.key</code> as generated by
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza <span class="refentrytitle">dnssec-keygen</span>(8).
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<p><span class="corpauthor">Internet Systems Consortium</span>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<span class="application">dnssec-dsfromkey</span>�</td>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<td width="40%" align="right" valign="top">�<span class="application">dnssec-keyfromlabel</span>
ead1f93ee620d7580f7e53350fe5a884fc4f158aLiane Praza<p style="text-align: center;">BIND 9.11.0pre-alpha</p>