man.dnssec-revoke.html revision 65f32cd8bf0924a9d7b7fde03d1a45407dc6f422
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - Copyright (C) 2000-2003 Internet Software Consortium.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - Permission to use, copy, modify, and/or distribute this software for any
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - purpose with or without fee is hereby granted, provided that the above
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - copyright notice and this permission notice appear in all copies.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster - PERFORMANCE OF THIS SOFTWARE.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<!-- $Id$ -->
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<table width="100%" summary="Navigation header">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<th width="60%" align="center">Manual pages</th>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<p><span><strong class="command">dnssec-revoke</strong></span>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster reads a DNSSEC key file, sets the REVOKED bit on the key as defined
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster in RFC 5011, and creates a new pair of key files containing the
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster now-revoked key.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster Emit usage message and exit.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster Sets the directory in which the key files are to reside.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster After writing the new keyset files remove the original keyset
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster Sets the debugging level.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster Specifies the cryptographic hardware to use, when applicable.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster When BIND is built with OpenSSL PKCS#11 support, this defaults
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster to the string "pkcs11", which identifies an OpenSSL engine
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster that can drive a cryptographic accelerator or hardware service
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster module. When BIND is built with native PKCS#11 cryptography
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster (--enable-native-pkcs11), it defaults to the path of the PKCS#11
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster provider library specified via "--with-pkcs11".
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster write the new key pair even if a file already exists matching
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster the algorithm and key ID of the revoked key.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster Print the key tag of the key with the REVOKE bit set but do
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster not revoke the key.
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<p><span class="corpauthor">Internet Systems Consortium</span>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<table width="100%" summary="Navigation footer">
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<span class="application">dnssec-keygen</span>�</td>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
4a2f0f0be43dfd4c1b490cbf3cc48b6ba6084b1cAllan Foster<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>