man.dnssec-revoke.html revision aa1905addf2f33d90aa020080e4e77a8651e829a
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - Copyright (C) 2000-2003 Internet Software Consortium.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - Permission to use, copy, modify, and/or distribute this software for any
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - purpose with or without fee is hereby granted, provided that the above
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - copyright notice and this permission notice appear in all copies.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes - PERFORMANCE OF THIS SOFTWARE.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<!-- $Id$ -->
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
c78d5d52a36b67ddfabc4e2edb9d04ce022abe76bnicholes<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<p><span><strong class="command">dnssec-revoke</strong></span>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes reads a DNSSEC key file, sets the REVOKED bit on the key as defined
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes in RFC 5011, and creates a new pair of key files containing the
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes now-revoked key.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes Emit usage message and exit.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes Sets the directory in which the key files are to reside.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes After writing the new keyset files remove the original keyset
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes Sets the debugging level.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes Prints version information.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes Specifies the cryptographic hardware to use, when applicable.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes When BIND is built with OpenSSL PKCS#11 support, this defaults
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes to the string "pkcs11", which identifies an OpenSSL engine
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes that can drive a cryptographic accelerator or hardware service
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes module. When BIND is built with native PKCS#11 cryptography
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes (--enable-native-pkcs11), it defaults to the path of the PKCS#11
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes provider library specified via "--with-pkcs11".
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes write the new key pair even if a file already exists matching
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes the algorithm and key ID of the revoked key.
f161c3a951ae995a1493a384970843274c810f48bnicholes Print the key tag of the key with the REVOKE bit set but do
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes not revoke the key.
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<p><span class="corpauthor">Internet Systems Consortium</span>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<span class="application">dnssec-keygen</span>�</td>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
bb2b38cd44b032118359afbc743efbea12f48e61bnicholes<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>