man.dnssec-revoke.html revision cd32f419a8a5432fbb139f56ee73cbf68b9350cc
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Copyright (C) 2000-2003 Internet Software Consortium.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - Permission to use, copy, modify, and/or distribute this software for any
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - purpose with or without fee is hereby granted, provided that the above
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - copyright notice and this permission notice appear in all copies.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster - PERFORMANCE OF THIS SOFTWARE.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<!-- $Id$ -->
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<table width="100%" summary="Navigation header">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<th width="60%" align="center">Manual pages</th>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-V</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p><span><strong class="command">dnssec-revoke</strong></span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster reads a DNSSEC key file, sets the REVOKED bit on the key as defined
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster in RFC 5011, and creates a new pair of key files containing the
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster now-revoked key.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Emit usage message and exit.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the directory in which the key files are to reside.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster After writing the new keyset files remove the original keyset
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Sets the debugging level.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Prints version information.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Specifies the cryptographic hardware to use, when applicable.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster When BIND is built with OpenSSL PKCS#11 support, this defaults
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster to the string "pkcs11", which identifies an OpenSSL engine
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster that can drive a cryptographic accelerator or hardware service
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster module. When BIND is built with native PKCS#11 cryptography
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster (--enable-native-pkcs11), it defaults to the path of the PKCS#11
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster provider library specified via "--with-pkcs11".
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster write the new key pair even if a file already exists matching
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster the algorithm and key ID of the revoked key.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster Print the key tag of the key with the REVOKE bit set but do
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster not revoke the key.
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p><span class="corpauthor">Internet Systems Consortium</span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<table width="100%" summary="Navigation footer">
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<span class="application">dnssec-keygen</span>�</td>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>
8af80418ba1ec431c8027fa9668e5678658d3611Allan Foster<p style="text-align: center;">BIND 9.11.0pre-alpha</p>