man.dnssec-settime.html revision 590c12cfe3b9a179ab2faa1be791a069c81882e0
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - Copyright (C) 2004-2009 Internet Systems Consortium, Inc. ("ISC")
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - Copyright (C) 2000-2003 Internet Software Consortium.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - Permission to use, copy, modify, and/or distribute this software for any
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - purpose with or without fee is hereby granted, provided that the above
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - copyright notice and this permission notice appear in all copies.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater - PERFORMANCE OF THIS SOFTWARE.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<!-- $Id: man.dnssec-settime.html,v 1.1 2009/07/20 02:10:42 tbox Exp $ -->
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<link rel="prev" href="man.dnssec-revoke.html" title="dnssec-revoke">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<link rel="next" href="man.dnssec-signzone.html" title="dnssec-signzone">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<table width="100%" summary="Navigation header">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<tr><th colspan="3" align="center"><span class="application">dnssec-settime</span></th></tr>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<a accesskey="p" href="man.dnssec-revoke.html">Prev</a>�</td>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<th width="60%" align="center">Manual pages</th>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-signzone.html">Next</a>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<a name="man.dnssec-settime"></a><div class="titlepage"></div>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<p><span class="application">dnssec-settime</span> — Set the key timing metadata for a DNSSEC key</p>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<div class="cmdsynopsis"><p><code class="command">dnssec-settime</code> [<code class="option">-fr</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-U <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {keyfile}</p></div>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<a name="id2608948"></a><h2>DESCRIPTION</h2>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<p><span><strong class="command">dnssec-settime</strong></span>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater reads a DNSSEC private key file and sets the key timing metadata
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater as specified by the <code class="option">-P</code>, <code class="option">-A</code>,
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater <code class="option">-R</code>, <code class="option">-U</code>, and <code class="option">-D</code>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater options. The metadata can then be used by
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater <span><strong class="command">dnssec-signzone</strong></span> or other signing software to
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater determine when a key is to be published, whether it should be
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater used for signing a zone, etc.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater If none of these options is set on the command line,
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater then <span><strong class="command">dnssec-settime</strong></span> simply prints the key timing
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater metadata already stored in the key.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater When key metadata fields are changed, both files of a key
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater pair (<code class="filename">Knnnn.+aaa+iiiii.key</code> and
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater <code class="filename">Knnnn.+aaa+iiiii.private</code>) are regenerated.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Metadata fields are stored in the private file. A human-readable
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater description of the metadata is also placed in comments in the key
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Force an update of an old-format key with no metadata fields.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Without this option, <span><strong class="command">dnssec-settime</strong></span> will
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater fail when attempting to update a legacy key. With this option,
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater the key will be recreated in the new format, but with the
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater original key data retained. The key's creation date will be
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater set to the present time.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Sets the directory in which the key files are to reside.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Emit usage message and exit.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Sets the debugging level.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<a name="id2609083"></a><h2>TIMING OPTIONS</h2>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater If the argument begins with a '+' or '-', it is interpreted as
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater an offset from the present time. If such an offset is followed
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater by one of the characters 'y', 'm', 'w', 'd', or 'h', then the
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater offset is computed in years, months, weeks, days, or hours,
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater respectively; otherwise it is computed in seconds.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Sets the date on which a key is to be published to the zone.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater After that date, the key will be included in the zone but will
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater not be used to sign it.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<dt><span class="term">-A <em class="replaceable"><code>date/offset</code></em></span></dt>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Sets the date on which the key is to be activated. After that
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater date, the key will be included and the zone and used to sign
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<dt><span class="term">-R <em class="replaceable"><code>date/offset</code></em></span></dt>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Sets the date on which the key is to be revoked. After that
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater date, the key will be flagged as revoked. It will be included
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater in the zone and will be used to sign it.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<dt><span class="term">-U <em class="replaceable"><code>date/offset</code></em></span></dt>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Sets the date on which the key is to be unpublished. After that
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater date, the key will no longer be included in the zone, but it
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater may remain in the key repository.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater Sets the date on which the key is to be deleted. After that
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater date, the key can be removed from the key repository.
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater NOTE: Keys are not currently deleted automatically; this field
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater is included for informational purposes and for future
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<p><span class="corpauthor">Internet Systems Consortium</span>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<table width="100%" summary="Navigation footer">
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<a accesskey="p" href="man.dnssec-revoke.html">Prev</a>�</td>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-signzone.html">Next</a>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<span class="application">dnssec-revoke</span>�</td>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
590c12cfe3b9a179ab2faa1be791a069c81882e0Automatic Updater<td width="40%" align="right" valign="top">�<span class="application">dnssec-signzone</span>