man.dnssec-checkds.html 5.36 KB
Newer Older
Tinderbox User's avatar
Tinderbox User committed
1 2
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<!--
Tinderbox User's avatar
Tinderbox User committed
3
 - Copyright (C) 2000-2019 Internet Systems Consortium, Inc. ("ISC")
Tinderbox User's avatar
Tinderbox User committed
4 5 6 7 8 9 10 11 12
 - 
 - This Source Code Form is subject to the terms of the Mozilla Public
 - License, v. 2.0. If a copy of the MPL was not distributed with this
 - file, You can obtain one at http://mozilla.org/MPL/2.0/.
-->
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<title>dnssec-checkds</title>
Tinderbox User's avatar
Tinderbox User committed
13
<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
Tinderbox User's avatar
Tinderbox User committed
14
<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
15
<link rel="up" href="Bv9ARM.ch12.html" title="Manual pages">
16
<link rel="prev" href="man.dnssec-cds.html" title="dnssec-cds">
Tinderbox User's avatar
Tinderbox User committed
17 18 19 20 21 22 23 24
<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
</head>
<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
<div class="navheader">
<table width="100%" summary="Navigation header">
<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
<tr>
<td width="20%" align="left">
25
<a accesskey="p" href="man.dnssec-cds.html">Prev</a></td>
Tinderbox User's avatar
Tinderbox User committed
26 27 28 29 30 31 32 33 34
<th width="60%" align="center">Manual pages</th>
<td width="20%" align="right"><a accesskey="n" href="man.dnssec-coverage.html">Next</a>
</td>
</tr>
</table>
<hr>
</div>
<div class="refentry">
<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
Tinderbox User's avatar
Tinderbox User committed
35 36 37 38 39 40
  
  

  

  <div class="refnamediv">
Tinderbox User's avatar
Tinderbox User committed
41
<h2>Name</h2>
Tinderbox User's avatar
Tinderbox User committed
42 43 44 45
<p>
    <span class="application">dnssec-checkds</span>
     &#8212; DNSSEC delegation consistency checking tool
  </p>
Tinderbox User's avatar
Tinderbox User committed
46
</div>
Tinderbox User's avatar
Tinderbox User committed
47 48 49 50

  

  <div class="refsynopsisdiv">
Tinderbox User's avatar
Tinderbox User committed
51
<h2>Synopsis</h2>
Tinderbox User's avatar
Tinderbox User committed
52 53 54 55 56 57 58 59 60 61 62 63
    <div class="cmdsynopsis"><p>
      <code class="command">dnssec-checkds</code> 
       [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>]
       [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>]
       [<code class="option">-f <em class="replaceable"><code>file</code></em></code>]
       [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>]
       [<code class="option">-s <em class="replaceable"><code>file</code></em></code>]
       {zone}
    </p></div>
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
64
<a name="id-1.13.7.7"></a><h2>DESCRIPTION</h2>
Tinderbox User's avatar
Tinderbox User committed
65 66

    <p><span class="command"><strong>dnssec-checkds</strong></span>
Tinderbox User's avatar
Tinderbox User committed
67 68 69 70
      verifies the correctness of Delegation Signer (DS) or DNSSEC
      Lookaside Validation (DLV) resource records for keys in a specified
      zone.
    </p>
Tinderbox User's avatar
Tinderbox User committed
71 72 73
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
74
<a name="id-1.13.7.8"></a><h2>OPTIONS</h2>
Tinderbox User's avatar
Tinderbox User committed
75 76 77


    <div class="variablelist"><dl class="variablelist">
Tinderbox User's avatar
Tinderbox User committed
78
<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
Tinderbox User's avatar
Tinderbox User committed
79 80
<dd>
          <p>
Tinderbox User's avatar
Tinderbox User committed
81 82 83
            If a <code class="option">file</code> is specified, then the zone is
            read from that file to find the DNSKEY records.  If not,
            then the DNSKEY records for the zone are looked up in the DNS.
Tinderbox User's avatar
Tinderbox User committed
84 85
          </p>
        </dd>
Tinderbox User's avatar
Tinderbox User committed
86
<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
Tinderbox User's avatar
Tinderbox User committed
87 88
<dd>
          <p>
Tinderbox User's avatar
Tinderbox User committed
89 90
            Check for a DLV record in the specified lookaside domain,
            instead of checking for a DS record in the zone's parent.
Tinderbox User's avatar
Tinderbox User committed
91 92
          </p>
        </dd>
Tinderbox User's avatar
Tinderbox User committed
93
<dt><span class="term">-s <em class="replaceable"><code>file</code></em></span></dt>
Tinderbox User's avatar
Tinderbox User committed
94 95
<dd>
          <p>
Tinderbox User's avatar
Tinderbox User committed
96 97 98
            Specifies a prepared dsset file, such as would be generated
            by <span class="command"><strong>dnssec-signzone</strong></span>, to use as a source for
            the DS RRset instead of querying the parent.
Tinderbox User's avatar
Tinderbox User committed
99 100
          </p>
        </dd>
Tinderbox User's avatar
Tinderbox User committed
101
<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
Tinderbox User's avatar
Tinderbox User committed
102 103
<dd>
          <p>
Tinderbox User's avatar
Tinderbox User committed
104 105
            Specifies a path to a <span class="command"><strong>dig</strong></span> binary.  Used
            for testing.
Tinderbox User's avatar
Tinderbox User committed
106 107
          </p>
        </dd>
Tinderbox User's avatar
Tinderbox User committed
108
<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
Tinderbox User's avatar
Tinderbox User committed
109 110
<dd>
          <p>
Tinderbox User's avatar
Tinderbox User committed
111 112
            Specifies a path to a <span class="command"><strong>dnssec-dsfromkey</strong></span> binary.
            Used for testing.
Tinderbox User's avatar
Tinderbox User committed
113 114
          </p>
        </dd>
Tinderbox User's avatar
Tinderbox User committed
115
</dl></div>
Tinderbox User's avatar
Tinderbox User committed
116 117 118
  </div>

  <div class="refsection">
Tinderbox User's avatar
Tinderbox User committed
119
<a name="id-1.13.7.9"></a><h2>SEE ALSO</h2>
Tinderbox User's avatar
Tinderbox User committed
120 121 122 123 124 125 126 127 128 129

    <p><span class="citerefentry">
        <span class="refentrytitle">dnssec-dsfromkey</span>(8)
      </span>,
      <span class="citerefentry">
        <span class="refentrytitle">dnssec-keygen</span>(8)
      </span>,
      <span class="citerefentry">
        <span class="refentrytitle">dnssec-signzone</span>(8)
      </span>,
Tinderbox User's avatar
Tinderbox User committed
130
    </p>
Tinderbox User's avatar
Tinderbox User committed
131 132
  </div>

Tinderbox User's avatar
Tinderbox User committed
133 134 135 136 137 138
</div>
<div class="navfooter">
<hr>
<table width="100%" summary="Navigation footer">
<tr>
<td width="40%" align="left">
139
<a accesskey="p" href="man.dnssec-cds.html">Prev</a></td>
140
<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch12.html">Up</a></td>
Tinderbox User's avatar
Tinderbox User committed
141 142 143 144
<td width="40%" align="right"><a accesskey="n" href="man.dnssec-coverage.html">Next</a>
</td>
</tr>
<tr>
145 146
<td width="40%" align="left" valign="top">
<span class="application">dnssec-cds</span></td>
Tinderbox User's avatar
Tinderbox User committed
147 148 149 150 151 152
<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
<td width="40%" align="right" valign="top"><span class="application">dnssec-coverage</span>
</td>
</tr>
</table>
</div>
Tinderbox User's avatar
Tinderbox User committed
153
<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.14.1 (Stable Release)</p>
Tinderbox User's avatar
Tinderbox User committed
154 155
</body>
</html>