/contrib/bind9/bin/dnssec/dnssec-revoke.html

https://bitbucket.org/freebsd/freebsd-head/ · HTML · 92 lines · 76 code · 0 blank · 16 comment · 0 complexity · 673ce348cb59e72b114ba2cb73c5c317 MD5 · raw file 

    

  1. <!--
    2. 

  2.  - Copyright (C) 2009, 2011 Internet Systems Consortium, Inc. ("ISC")
    3. 

  3.  - 
    4. 

  4.  - Permission to use, copy, modify, and/or distribute this software for any
    5. 

  5.  - purpose with or without fee is hereby granted, provided that the above
    6. 

  6.  - copyright notice and this permission notice appear in all copies.
    7. 

  7.  - 
    8. 

  8.  - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
    9. 

  9.  - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
    10. 

  10.  - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
    11. 

  11.  - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
    12. 

  12.  - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
    13. 

  13.  - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
    14. 

  14.  - PERFORMANCE OF THIS SOFTWARE.
    15. 

  15. -->
    16. 

  16. <!-- $Id$ -->
    17. 

  17. <html>
    18. 

  18. <head>
    19. 

  19. <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
    20. 

  20. <title>dnssec-revoke</title>
    21. 

  21. <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
    22. 

  22. </head>
    23. 

  23. <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" lang="en">
    24. 

  24. <a name="man.dnssec-revoke"></a><div class="titlepage"></div>
    25. 

  25. <div class="refnamediv">
    26. 

  26. <h2>Name</h2>
    27. 

  27. <p><span class="application">dnssec-revoke</span> &#8212; Set the REVOKED bit on a DNSSEC key</p>
    28. 

  28. </div>
    29. 

  29. <div class="refsynopsisdiv">
    30. 

  30. <h2>Synopsis</h2>
    31. 

  31. <div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code>  [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
    32. 

  32. </div>
    33. 

  33. <div class="refsect1" lang="en">
    34. 

  34. <a name="id2543382"></a><h2>DESCRIPTION</h2>
    35. 

  35. <p><span><strong class="command">dnssec-revoke</strong></span>
    36. 

  36.       reads a DNSSEC key file, sets the REVOKED bit on the key as defined
    37. 

  37.       in RFC 5011, and creates a new pair of key files containing the
    38. 

  38.       now-revoked key.
    39. 

  39.     </p>
    40. 

  40. </div>
    41. 

  41. <div class="refsect1" lang="en">
    42. 

  42. <a name="id2543394"></a><h2>OPTIONS</h2>
    43. 

  43. <div class="variablelist"><dl>
    44. 

  44. <dt><span class="term">-h</span></dt>
    45. 

  45. <dd><p>
    46. 

  46. 	    Emit usage message and exit.
    47. 

  47. 	  </p></dd>
    48. 

  48. <dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
    49. 

  49. <dd><p>
    50. 

  50.             Sets the directory in which the key files are to reside.
    51. 

  51.           </p></dd>
    52. 

  52. <dt><span class="term">-r</span></dt>
    53. 

  53. <dd><p>
    54. 

  54. 	    After writing the new keyset files remove the original keyset
    55. 

  55. 	    files.
    56. 

  56. 	  </p></dd>
    57. 

  57. <dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
    58. 

  58. <dd><p>
    59. 

  59.             Sets the debugging level.
    60. 

  60.           </p></dd>
    61. 

  61. <dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
    62. 

  62. <dd><p>
    63. 

  63.             Use the given OpenSSL engine. When compiled with PKCS#11 support
    64. 

  64.             it defaults to pkcs11; the empty name resets it to no engine.
    65. 

  65.           </p></dd>
    66. 

  66. <dt><span class="term">-f</span></dt>
    67. 

  67. <dd><p>
    68. 

  68.             Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
    69. 

  69.             write the new key pair even if a file already exists matching
    70. 

  70.             the algorithm and key ID of the revoked key.
    71. 

  71.           </p></dd>
    72. 

  72. <dt><span class="term">-R</span></dt>
    73. 

  73. <dd><p>
    74. 

  74. 	    Print the key tag of the key with the REVOKE bit set but do
    75. 

  75. 	    not revoke the key.
    76. 

  76.           </p></dd>
    77. 

  77. </dl></div>
    78. 

  78. </div>
    79. 

  79. <div class="refsect1" lang="en">
    80. 

  80. <a name="id2543512"></a><h2>SEE ALSO</h2>
    81. 

  81. <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
    82. 

  82.       <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
    83. 

  83.       <em class="citetitle">RFC 5011</em>.
    84. 

  84.     </p>
    85. 

  85. </div>
    86. 

  86. <div class="refsect1" lang="en">
    87. 

  87. <a name="id2543537"></a><h2>AUTHOR</h2>
    88. 

  88. <p><span class="corpauthor">Internet Systems Consortium</span>
    89. 

  89.     </p>
    90. 

  90. </div>
    91. 

  91. </div></body>
    92. 

  92. </html>
    93.