man.dnssec-revoke.html revision 983df82baf1d7d0b668c98cf45928a19f175c6e7
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - Copyright (C) 2000-2003 Internet Software Consortium.
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - Permission to use, copy, modify, and/or distribute this software for any
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - purpose with or without fee is hereby granted, provided that the above
e64031e20c39650a7bc902a3e1aba613b9415deevboxsync - copyright notice and this permission notice appear in all copies.
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync - PERFORMANCE OF THIS SOFTWARE.
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<!-- $Id$ -->
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
367dfc76faea958fa6765efde770d4cc30f51295vboxsync<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
367dfc76faea958fa6765efde770d4cc30f51295vboxsync<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
367dfc76faea958fa6765efde770d4cc30f51295vboxsync<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
83c0ea1a66c25cde355b1f784bebe75928012d83vboxsync<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
ba6206b9b2f863489c4b95178af0dbda929f6cc1vboxsync<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<p><span><strong class="command">dnssec-revoke</strong></span>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync reads a DNSSEC key file, sets the REVOKED bit on the key as defined
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync in RFC 5011, and creates a new pair of key files containing the
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync now-revoked key.
db328d9a0c557c268222858740db4860d4f22a95vboxsync Emit usage message and exit.
db328d9a0c557c268222858740db4860d4f22a95vboxsync<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
db328d9a0c557c268222858740db4860d4f22a95vboxsync Sets the directory in which the key files are to reside.
db328d9a0c557c268222858740db4860d4f22a95vboxsync After writing the new keyset files remove the original keyset
db328d9a0c557c268222858740db4860d4f22a95vboxsync<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
db328d9a0c557c268222858740db4860d4f22a95vboxsync Sets the debugging level.
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync Prints version information.
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync Specifies the cryptographic hardware to use, when applicable.
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync When BIND is built with OpenSSL PKCS#11 support, this defaults
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync to the string "pkcs11", which identifies an OpenSSL engine
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync that can drive a cryptographic accelerator or hardware service
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync module. When BIND is built with native PKCS#11 cryptography
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync (--enable-native-pkcs11), it defaults to the path of the PKCS#11
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync provider library specified via "--with-pkcs11".
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync write the new key pair even if a file already exists matching
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync the algorithm and key ID of the revoked key.
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync Print the key tag of the key with the REVOKE bit set but do
ad27e1d5e48ca41245120c331cc88b50464813cevboxsync not revoke the key.
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<p><span class="corpauthor">Internet Systems Consortium</span>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<span class="application">dnssec-keygen</span>�</td>
ad27e1d5e48ca41245120c331cc88b50464813cevboxsync<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>
7b57f6ec6175ce1ee53e1ea49c24ff06f3723379vboxsync<p style="text-align: center;">BIND 9.11.0pre-alpha</p>