man.dnssec-revoke.html revision bcf15a19ae0efa72a22cdfb50666a3c6ce39eb9f
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - Copyright (C) 2000-2003 Internet Software Consortium.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - Permission to use, copy, modify, and/or distribute this software for any
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - purpose with or without fee is hereby granted, provided that the above
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - copyright notice and this permission notice appear in all copies.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster - PERFORMANCE OF THIS SOFTWARE.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<!-- $Id$ -->
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<table width="100%" summary="Navigation header">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<th width="60%" align="center">Manual pages</th>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<p><span><strong class="command">dnssec-revoke</strong></span>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster reads a DNSSEC key file, sets the REVOKED bit on the key as defined
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster in RFC 5011, and creates a new pair of key files containing the
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster now-revoked key.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster Emit usage message and exit.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster Sets the directory in which the key files are to reside.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster After writing the new keyset files remove the original keyset
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster Sets the debugging level.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster Use the given OpenSSL engine. When compiled with PKCS#11 support
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster it defaults to pkcs11; the empty name resets it to no engine.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster write the new key pair even if a file already exists matching
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster the algorithm and key ID of the revoked key.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster Print the key tag of the key with the REVOKE bit set but do
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster not revoke the key.
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<p><span class="corpauthor">Internet Systems Consortium</span>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<table width="100%" summary="Navigation footer">
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<span class="application">dnssec-keygen</span>�</td>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
5c099afa7c9361afc2f4477fec0e3018588d7840Allan Foster<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>