man.dnssec-revoke.html revision 1ca759b3f5c0672b2a66bc02288fe010cabbfe37
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington - Copyright (C) 2000-2015 Internet Systems Consortium, Inc. ("ISC")
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington - This Source Code Form is subject to the terms of the Mozilla Public
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington - License, v. 2.0. If a copy of the MPL was not distributed with this
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington - file, You can obtain one at http://mozilla.org/MPL/2.0/.
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
5b2db69e215078c268a3e690d144373baebbf17bJames Phillpotts<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<link rel="prev" href="man.dnssec-keymgr.html" title="dnssec-keymgr">
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
2dd75eff92ef66e22cca286b6f4fe5a9c929af9dPhill Cunnington<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
ea855443c65c9cc910e3d4f3ba13a3cd32332e72Phill Cunnington<table width="100%" summary="Navigation header">
ea855443c65c9cc910e3d4f3ba13a3cd32332e72Phill Cunnington<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
ea855443c65c9cc910e3d4f3ba13a3cd32332e72Phill Cunnington<a accesskey="p" href="man.dnssec-keymgr.html">Prev</a>�</td>
ea855443c65c9cc910e3d4f3ba13a3cd32332e72Phill Cunnington<th width="60%" align="center">Manual pages</th>
ea855443c65c9cc910e3d4f3ba13a3cd32332e72Phill Cunnington<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<p><span class="application">dnssec-revoke</span> — set the REVOKED bit on a DNSSEC key</p>
2dffe047d982828750ee6d5e2bda32caee3de522Phill Cunnington<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<a name="id-1.14.14.7"></a><h2>DESCRIPTION</h2>
5db031755ab3a8762e266f96f5d74832548d330bPhill Cunnington<p><span class="command"><strong>dnssec-revoke</strong></span>
5db031755ab3a8762e266f96f5d74832548d330bPhill Cunnington reads a DNSSEC key file, sets the REVOKED bit on the key as defined
cecac354c250e765529594cfe77d8e398b8b4c22Phill Cunnington in RFC 5011, and creates a new pair of key files containing the
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington now-revoked key.
2dffe047d982828750ee6d5e2bda32caee3de522Phill Cunnington<div class="variablelist"><dl class="variablelist">
5ad278af38ea0c2eb5e449328cbb7c29f86e5965Phill Cunnington Emit usage message and exit.
9c66fb67f2ad1de61c12a43db588e58e0fd67e57Phill Cunnington<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington Sets the directory in which the key files are to reside.
eeac42855e6e36bfea0f354ee1bff9d3e127eadcPhill Cunnington After writing the new keyset files remove the original keyset
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington Sets the debugging level.
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington Prints version information.
9c66fb67f2ad1de61c12a43db588e58e0fd67e57Phill Cunnington<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington Specifies the cryptographic hardware to use, when applicable.
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington When BIND is built with OpenSSL PKCS#11 support, this defaults
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington to the string "pkcs11", which identifies an OpenSSL engine
5b2db69e215078c268a3e690d144373baebbf17bJames Phillpotts that can drive a cryptographic accelerator or hardware service
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington module. When BIND is built with native PKCS#11 cryptography
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington (--enable-native-pkcs11), it defaults to the path of the PKCS#11
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington provider library specified via "--with-pkcs11".
9c66fb67f2ad1de61c12a43db588e58e0fd67e57Phill Cunnington Force overwrite: Causes <span class="command"><strong>dnssec-revoke</strong></span> to
7de0b02ea333f0df1acdce59cfb943fd3c37e940Phill Cunnington write the new key pair even if a file already exists matching
5ad278af38ea0c2eb5e449328cbb7c29f86e5965Phill Cunnington the algorithm and key ID of the revoked key.
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington Print the key tag of the key with the REVOKE bit set but do
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington not revoke the key.
5db031755ab3a8762e266f96f5d74832548d330bPhill Cunnington<a name="id-1.14.14.9"></a><h2>SEE ALSO</h2>
5db031755ab3a8762e266f96f5d74832548d330bPhill Cunnington<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
5db031755ab3a8762e266f96f5d74832548d330bPhill Cunnington <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<table width="100%" summary="Navigation footer">
5ad278af38ea0c2eb5e449328cbb7c29f86e5965Phill Cunnington<a accesskey="p" href="man.dnssec-keymgr.html">Prev</a>�</td>
b996e3134e41db65e98ce86d1ff30a9b1a9f0d40Phill Cunnington<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
5b2db69e215078c268a3e690d144373baebbf17bJames Phillpotts<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
7de0b02ea333f0df1acdce59cfb943fd3c37e940Phill Cunnington<span class="application">dnssec-keymgr</span>�</td>
a093731116a8c24d49b903df7602cf586e499b45Phill Cunnington<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
c6fe4a12490efd2bbe2017f6ff276283d200003cJames Phillpotts<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>
c6fe4a12490efd2bbe2017f6ff276283d200003cJames Phillpotts<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.11.0</p>