man.dnssec-revoke.html revision 30c0c7470d5bfabd8f43c563f4eca636d06cc484
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - Copyright (C) 2000-2003 Internet Software Consortium.
2f48339a0c14421b8826b39fc3ab783a064cb77bjc - Permission to use, copy, modify, and/or distribute this software for any
2f48339a0c14421b8826b39fc3ab783a064cb77bjc - purpose with or without fee is hereby granted, provided that the above
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - copyright notice and this permission notice appear in all copies.
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien - PERFORMANCE OF THIS SOFTWARE.
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<!-- $Id$ -->
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
050c9ebdc9d01dca610febe083c1796c5e013868td<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
6dfee4834394825da35b977ca71cdc965bc7b6a4tsien<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
13faa91230bde46da937bf33010b9accc5bdeb59sd<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
050c9ebdc9d01dca610febe083c1796c5e013868td<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
050c9ebdc9d01dca610febe083c1796c5e013868td<p><span><strong class="command">dnssec-revoke</strong></span>
050c9ebdc9d01dca610febe083c1796c5e013868td reads a DNSSEC key file, sets the REVOKED bit on the key as defined
050c9ebdc9d01dca610febe083c1796c5e013868td in RFC 5011, and creates a new pair of key files containing the
050c9ebdc9d01dca610febe083c1796c5e013868td now-revoked key.
050c9ebdc9d01dca610febe083c1796c5e013868td Emit usage message and exit.
050c9ebdc9d01dca610febe083c1796c5e013868td<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
050c9ebdc9d01dca610febe083c1796c5e013868td Sets the directory in which the key files are to reside.
050c9ebdc9d01dca610febe083c1796c5e013868td After writing the new keyset files remove the original keyset
050c9ebdc9d01dca610febe083c1796c5e013868td<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
050c9ebdc9d01dca610febe083c1796c5e013868td Sets the debugging level.
050c9ebdc9d01dca610febe083c1796c5e013868td Prints version information.
050c9ebdc9d01dca610febe083c1796c5e013868td<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
050c9ebdc9d01dca610febe083c1796c5e013868td Specifies the cryptographic hardware to use, when applicable.
050c9ebdc9d01dca610febe083c1796c5e013868td When BIND is built with OpenSSL PKCS#11 support, this defaults
050c9ebdc9d01dca610febe083c1796c5e013868td to the string "pkcs11", which identifies an OpenSSL engine
050c9ebdc9d01dca610febe083c1796c5e013868td that can drive a cryptographic accelerator or hardware service
050c9ebdc9d01dca610febe083c1796c5e013868td module. When BIND is built with native PKCS#11 cryptography
050c9ebdc9d01dca610febe083c1796c5e013868td (--enable-native-pkcs11), it defaults to the path of the PKCS#11
050c9ebdc9d01dca610febe083c1796c5e013868td provider library specified via "--with-pkcs11".
050c9ebdc9d01dca610febe083c1796c5e013868td Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
050c9ebdc9d01dca610febe083c1796c5e013868td write the new key pair even if a file already exists matching
050c9ebdc9d01dca610febe083c1796c5e013868td the algorithm and key ID of the revoked key.
050c9ebdc9d01dca610febe083c1796c5e013868td Print the key tag of the key with the REVOKE bit set but do
050c9ebdc9d01dca610febe083c1796c5e013868td not revoke the key.
050c9ebdc9d01dca610febe083c1796c5e013868td<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
050c9ebdc9d01dca610febe083c1796c5e013868td <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
050c9ebdc9d01dca610febe083c1796c5e013868td<p><span class="corpauthor">Internet Systems Consortium</span>
050c9ebdc9d01dca610febe083c1796c5e013868td<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
050c9ebdc9d01dca610febe083c1796c5e013868td<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
050c9ebdc9d01dca610febe083c1796c5e013868td<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
050c9ebdc9d01dca610febe083c1796c5e013868td<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
050c9ebdc9d01dca610febe083c1796c5e013868td<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>