man.dnssec-revoke.html revision dad65f7c93330a10705384739dff3a6d4dfe1e70
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - Copyright (C) 2004-2013 Internet Systems Consortium, Inc. ("ISC")
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - Copyright (C) 2000-2003 Internet Software Consortium.
ebbfa36a628b935891b2f8a2c5936aef48b87151Michael Sawyer - Permission to use, copy, modify, and/or distribute this software for any
ebbfa36a628b935891b2f8a2c5936aef48b87151Michael Sawyer - purpose with or without fee is hereby granted, provided that the above
ebbfa36a628b935891b2f8a2c5936aef48b87151Michael Sawyer - copyright notice and this permission notice appear in all copies.
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
f17b62a64bec4690f7ef0263efee1fa727b66fd5Michael Sawyer<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
f17b62a64bec4690f7ef0263efee1fa727b66fd5Michael Sawyer<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
f17b62a64bec4690f7ef0263efee1fa727b66fd5Michael Sawyer<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
f17b62a64bec4690f7ef0263efee1fa727b66fd5Michael Sawyer<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
f17b62a64bec4690f7ef0263efee1fa727b66fd5Michael Sawyer<link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
f17b62a64bec4690f7ef0263efee1fa727b66fd5Michael Sawyer<link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
f17b62a64bec4690f7ef0263efee1fa727b66fd5Michael Sawyer<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
ebbfa36a628b935891b2f8a2c5936aef48b87151Michael Sawyer<table width="100%" summary="Navigation header">
ebbfa36a628b935891b2f8a2c5936aef48b87151Michael Sawyer<tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
ebbfa36a628b935891b2f8a2c5936aef48b87151Michael Sawyer<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
5d20773abcdf9ff3afe14a349413174f94594188Michael Sawyer<th width="60%" align="center">Manual pages</th>
dc570b92f6cc60def4207733c7a194fbb69a4399Michael Sawyer<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
c9defbf4b968e8a61f391246431ac63d0d6a39abMichael Sawyer<a name="man.dnssec-revoke"></a><div class="titlepage"></div>
a5ed46c9fd270775c39770bfd0250a52d374ebf2Michael Sawyer<p><span class="application">dnssec-revoke</span> — Set the REVOKED bit on a DNSSEC key</p>
c9defbf4b968e8a61f391246431ac63d0d6a39abMichael Sawyer<div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
5d20773abcdf9ff3afe14a349413174f94594188Michael Sawyer<p><span><strong class="command">dnssec-revoke</strong></span>
25a66b4e41e2b0a2af4840749bac80ae78c678bfMark Andrews reads a DNSSEC key file, sets the REVOKED bit on the key as defined
6bc106bb7ed216ca3a86245181ea8e2b0b658a64Michael Sawyer in RFC 5011, and creates a new pair of key files containing the
c9defbf4b968e8a61f391246431ac63d0d6a39abMichael Sawyer now-revoked key.
b31e7ab8857a62eb94d4a6a681243739f158374dDanny Mayer Emit usage message and exit.
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington Sets the directory in which the key files are to reside.
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews After writing the new keyset files remove the original keyset
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
b31e7ab8857a62eb94d4a6a681243739f158374dDanny Mayer Sets the debugging level.
b31e7ab8857a62eb94d4a6a681243739f158374dDanny Mayer<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
e715e011788a529446b8013239c33599542ece32Michael Sawyer Use the given OpenSSL engine. When compiled with PKCS#11 support
7949dbdae1db33e6263d754e5940daa1dfba59f9Michael Sawyer it defaults to pkcs11; the empty name resets it to no engine.
24139527f3d0d3fe743bd867329a2edd529728a6Andreas Gustafsson Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
24139527f3d0d3fe743bd867329a2edd529728a6Andreas Gustafsson write the new key pair even if a file already exists matching
24139527f3d0d3fe743bd867329a2edd529728a6Andreas Gustafsson the algorithm and key ID of the revoked key.
688a4c50c2025a683d8d2bf5bb53a591556df4fcAndreas Gustafsson Print the key tag of the key with the REVOKE bit set but do
e69ccf6d54db6e749470341e2c84996ecc77e5ecMichael Sawyer not revoke the key.
6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
4e0dc7b50c8d36a826dfd49c733479efa2feb6f9Michael Sawyer <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
bbece796a96f0c5670f2ed4646be2e883be3ba59Brian Wellington<p><span class="corpauthor">Internet Systems Consortium</span>
19c8df90f1f23c3df870c1771c89c1acdb15020eMichael Sawyer<table width="100%" summary="Navigation footer">
19c8df90f1f23c3df870c1771c89c1acdb15020eMichael Sawyer<a accesskey="p" href="man.dnssec-keygen.html">Prev</a>�</td>
19c8df90f1f23c3df870c1771c89c1acdb15020eMichael Sawyer<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
19c8df90f1f23c3df870c1771c89c1acdb15020eMichael Sawyer<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-settime.html">Next</a>
24139527f3d0d3fe743bd867329a2edd529728a6Andreas Gustafsson<span class="application">dnssec-keygen</span>�</td>
a5ed46c9fd270775c39770bfd0250a52d374ebf2Michael Sawyer<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
a5ed46c9fd270775c39770bfd0250a52d374ebf2Michael Sawyer<td width="40%" align="right" valign="top">�<span class="application">dnssec-settime</span>