man.dnssec-revoke.html revision 150d28abc8fc6f8a3df17650c61ce1635aeb192c
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - Copyright (C) 2000-2003 Internet Software Consortium.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - Permission to use, copy, modify, and/or distribute this software for any
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - purpose with or without fee is hereby granted, provided that the above
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - copyright notice and this permission notice appear in all copies.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor - PERFORMANCE OF THIS SOFTWARE.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<!-- $Id: man.dnssec-revoke.html,v 1.94 2012/02/01 01:04:18 tbox Exp $ -->
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<p><span><strong class="command">dnssec-revoke</strong></span>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor reads a DNSSEC key file, sets the REVOKED bit on the key as defined
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor in RFC 5011, and creates a new pair of key files containing the
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor now-revoked key.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Emit usage message and exit.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Sets the directory in which the key files are to reside.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor After writing the new keyset files remove the original keyset
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Sets the debugging level.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Use the given OpenSSL engine. When compiled with PKCS#11 support
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor it defaults to pkcs11; the empty name resets it to no engine.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor write the new key pair even if a file already exists matching
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor the algorithm and key ID of the revoked key.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Print the key tag of the key with the REVOKE bit set but do
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor not revoke the key.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<p><span class="corpauthor">Internet Systems Consortium</span>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<span class="application">dnssec-keygen</span>�</td>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>