man.dnssec-checkds.html 5.8 KB
Newer Older
Tinderbox User's avatar
Tinderbox User committed
1
<!--
Tinderbox User's avatar
Tinderbox User committed
2
 - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
Tinderbox User's avatar
Tinderbox User committed
3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
 - Copyright (C) 2000-2003 Internet Software Consortium.
 - 
 - Permission to use, copy, modify, and/or distribute this software for any
 - purpose with or without fee is hereby granted, provided that the above
 - copyright notice and this permission notice appear in all copies.
 - 
 - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 - PERFORMANCE OF THIS SOFTWARE.
-->
<!-- $Id$ -->
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>dnssec-checkds</title>
<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
Tinderbox User's avatar
Tinderbox User committed
24
<link rel="up" href="Bv9ARM.ch13.html" title="Manual pages">
Tinderbox User's avatar
Tinderbox User committed
25
<link rel="prev" href="man.delv.html" title="delv">
Tinderbox User's avatar
Tinderbox User committed
26 27 28 29 30 31 32 33
<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
<table width="100%" summary="Navigation header">
<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
<tr>
<td width="20%" align="left">
Tinderbox User's avatar
Tinderbox User committed
34
<a accesskey="p" href="man.delv.html">Prev</a></td>
Tinderbox User's avatar
Tinderbox User committed
35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"><a accesskey="n" href="man.dnssec-coverage.html">Next</a>
</td>
</tr>
</table>
<hr>
</div>
<div class="refentry" lang="en">
<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
<div class="refnamediv">
<h2>Name</h2>
<p><span class="application">dnssec-checkds</span> &#8212; A DNSSEC delegation consistency checking tool.</p>
</div>
<div class="refsynopsisdiv">
<h2>Synopsis</h2>
<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code>  [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code>  [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
54
<a name="id2619991"></a><h2>DESCRIPTION</h2>
Tinderbox User's avatar
Tinderbox User committed
55 56 57 58 59 60 61
<p><span><strong class="command">dnssec-checkds</strong></span>
      verifies the correctness of Delegation Signer (DS) or DNSSEC
      Lookaside Validation (DLV) resource records for keys in a specified
      zone.
    </p>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
62
<a name="id2620005"></a><h2>OPTIONS</h2>
Tinderbox User's avatar
Tinderbox User committed
63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90
<div class="variablelist"><dl>
<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
<dd><p>
            If a <code class="option">file</code> is specified, then the zone is
            read from that file to find the DNSKEY records.  If not,
            then the DNSKEY records for the zone are looked up in the DNS.
          </p></dd>
<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
<dd><p>
            Check for a DLV record in the specified lookaside domain, 
            instead of checking for a DS record in the zone's parent.
            For example, to check for DLV records for "example.com"
            in ISC's DLV zone, use:
            <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
          </p></dd>
<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
<dd><p>
            Specifies a path to a <span><strong class="command">dig</strong></span> binary.  Used
            for testing.
          </p></dd>
<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
<dd><p>
            Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
            Used for testing.
          </p></dd>
</dl></div>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
91
<a name="id2620107"></a><h2>SEE ALSO</h2>
Tinderbox User's avatar
Tinderbox User committed
92 93 94 95 96 97
<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
      <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
      <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
    </p>
</div>
<div class="refsect1" lang="en">
Tinderbox User's avatar
Tinderbox User committed
98
<a name="id2620141"></a><h2>AUTHOR</h2>
Tinderbox User's avatar
Tinderbox User committed
99 100 101 102 103 104 105 106 107
<p><span class="corpauthor">Internet Systems Consortium</span>
    </p>
</div>
</div>
<div class="navfooter">
<hr>
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
Tinderbox User's avatar
Tinderbox User committed
108
<a accesskey="p" href="man.delv.html">Prev</a></td>
Tinderbox User's avatar
Tinderbox User committed
109
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch13.html">Up</a></td>
Tinderbox User's avatar
Tinderbox User committed
110 111 112 113
<td width="40%" align="right"><a accesskey="n" href="man.dnssec-coverage.html">Next</a>
</td>
</tr>
<tr>
Tinderbox User's avatar
Tinderbox User committed
114
<td width="40%" align="left" valign="top">delv</td>
Tinderbox User's avatar
Tinderbox User committed
115 116 117 118 119 120
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"><span class="application">dnssec-coverage</span>
</td>
</tr>
</table>
</div>
Tinderbox User's avatar
Tinderbox User committed
121
<p style="text-align: center;">BIND 9.11.0pre-alpha</p>
Tinderbox User's avatar
Tinderbox User committed
122 123
</body>
</html>