man.dnssec-revoke.html revision 350e5eecadfc5ee72b11b2cc46828c9a0bcd717c
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - Copyright (C) 2000-2017 Internet Systems Consortium, Inc. ("ISC")
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - This Source Code Form is subject to the terms of the Mozilla Public
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - License, v. 2.0. If a copy of the MPL was not distributed with this
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi - file, You can obtain one at http://mozilla.org/MPL/2.0/.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<link rel="prev" href="man.dnssec-keymgr.html" title="dnssec-keymgr">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<table width="100%" summary="Navigation header">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<a accesskey="p" href="man.dnssec-keymgr.html">Prev</a>�</td>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<th width="60%" align="center">Manual pages</th>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi <span class="application">dnssec-revoke</span>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi — set the REVOKED bit on a DNSSEC key
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi [<code class="option">-v <em class="replaceable"><code>level</code></em></code>]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>]
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<a name="id-1.14.14.7"></a><h2>DESCRIPTION</h2>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi <p><span class="command"><strong>dnssec-revoke</strong></span>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi reads a DNSSEC key file, sets the REVOKED bit on the key as defined
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi in RFC 5011, and creates a new pair of key files containing the
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi now-revoked key.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi <div class="variablelist"><dl class="variablelist">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Emit usage message and exit.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Sets the directory in which the key files are to reside.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi After writing the new keyset files remove the original keyset
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Sets the debugging level.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Prints version information.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Specifies the cryptographic hardware to use, when applicable.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi When BIND is built with OpenSSL PKCS#11 support, this defaults
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi to the string "pkcs11", which identifies an OpenSSL engine
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi that can drive a cryptographic accelerator or hardware service
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi module. When BIND is built with native PKCS#11 cryptography
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi (--enable-native-pkcs11), it defaults to the path of the PKCS#11
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi provider library specified via "--with-pkcs11".
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Force overwrite: Causes <span class="command"><strong>dnssec-revoke</strong></span> to
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi write the new key pair even if a file already exists matching
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi the algorithm and key ID of the revoked key.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi Print the key tag of the key with the REVOKE bit set but do
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi not revoke the key.
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<a name="id-1.14.14.9"></a><h2>SEE ALSO</h2>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi <span class="refentrytitle">dnssec-keygen</span>(8)
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<table width="100%" summary="Navigation footer">
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<a accesskey="p" href="man.dnssec-keymgr.html">Prev</a>�</td>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<span class="application">dnssec-keymgr</span>�</td>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>
d14abf155341d55053c76eeec58b787a456b753bRobert Mustacchi<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.2 (Extended Support Version)</p>