man.dnssec-revoke.html revision ea94d370123a5892f6c47a97f21d1b28d44bb168
c92c50783e4e93699f2a42643b8f200b9b719c87Automatic Updater - Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
3e02c9e33656dcd9c364633d42dd785d3e6fdd66Automatic Updater - Copyright (C) 2000-2003 Internet Software Consortium.
c6fb85f9500350e5ce58c9a24f5d264c8a8bd6f4Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt - purpose with or without fee is hereby granted, provided that the above
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt - copyright notice and this permission notice appear in all copies.
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
3e02c9e33656dcd9c364633d42dd785d3e6fdd66Automatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt - PERFORMANCE OF THIS SOFTWARE.
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
12bfbed87cfffa65ac300b72c5665ab38a355c2fAutomatic Updater<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<p><span><strong class="command">dnssec-revoke</strong></span>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt reads a DNSSEC key file, sets the REVOKED bit on the key as defined
fd0b768f4c23d22c89f8a156a632831583b7fb68Automatic Updater in RFC 5011, and creates a new pair of key files containing the
fd0b768f4c23d22c89f8a156a632831583b7fb68Automatic Updater now-revoked key.
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt Emit usage message and exit.
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt Sets the directory in which the key files are to reside.
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt After writing the new keyset files remove the original keyset
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt Sets the debugging level.
8ec3c085233cedb22b05da36e2773c8f357a7e45Automatic Updater<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
8ec3c085233cedb22b05da36e2773c8f357a7e45Automatic Updater Use the given OpenSSL engine. When compiled with PKCS#11 support
64affc54f96a2c71cbd10ed71e246ce0746259aaAutomatic Updater it defaults to pkcs11; the empty name resets it to no engine.
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt write the new key pair even if a file already exists matching
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt the algorithm and key ID of the revoked key.
12bfbed87cfffa65ac300b72c5665ab38a355c2fAutomatic Updater Print the key tag of the key with the REVOKE bit set but do
12bfbed87cfffa65ac300b72c5665ab38a355c2fAutomatic Updater not revoke the key.
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<p><span class="corpauthor">Internet Systems Consortium</span>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<span class="application">dnssec-keygen</span>�</td>
1bc5499c2a0fc5d2b11849e97cdd6305a64eb242Evan Hunt<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
0a7ed88633a680bb881868b75ded4d09a7bbbc50Automatic Updater<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>