/contrib/bind9/doc/arm/man.dnssec-revoke.html

https://bitbucket.org/freebsd/freebsd-head/ · HTML · 131 lines · 114 code · 0 blank · 17 comment · 0 complexity · 62ce4eff05f79b9d7997905cf89b2f5a MD5 · raw file

  1. <!--
  2. - Copyright (C) 2004-2012 Internet Systems Consortium, Inc. ("ISC")
  3. - Copyright (C) 2000-2003 Internet Software Consortium.
  4. -
  5. - Permission to use, copy, modify, and/or distribute this software for any
  6. - purpose with or without fee is hereby granted, provided that the above
  7. - copyright notice and this permission notice appear in all copies.
  8. -
  9. - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
  10. - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
  11. - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
  12. - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
  13. - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
  14. - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  15. - PERFORMANCE OF THIS SOFTWARE.
  16. -->
  17. <!-- $Id$ -->
  18. <html>
  19. <head>
  20. <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
  21. <title>dnssec-revoke</title>
  22. <meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
  23. <link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
  24. <link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
  25. <link rel="prev" href="man.dnssec-keygen.html" title="dnssec-keygen">
  26. <link rel="next" href="man.dnssec-settime.html" title="dnssec-settime">
  27. </head>
  28. <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
  29. <div class="navheader">
  30. <table width="100%" summary="Navigation header">
  31. <tr><th colspan="3" align="center"><span class="application">dnssec-revoke</span></th></tr>
  32. <tr>
  33. <td width="20%" align="left">
  34. <a accesskey="p" href="man.dnssec-keygen.html">Prev</a> </td>
  35. <th width="60%" align="center">Manual pages</th>
  36. <td width="20%" align="right"> <a accesskey="n" href="man.dnssec-settime.html">Next</a>
  37. </td>
  38. </tr>
  39. </table>
  40. <hr>
  41. </div>
  42. <div class="refentry" lang="en">
  43. <a name="man.dnssec-revoke"></a><div class="titlepage"></div>
  44. <div class="refnamediv">
  45. <h2>Name</h2>
  46. <p><span class="application">dnssec-revoke</span> &#8212; Set the REVOKED bit on a DNSSEC key</p>
  47. </div>
  48. <div class="refsynopsisdiv">
  49. <h2>Synopsis</h2>
  50. <div class="cmdsynopsis"><p><code class="command">dnssec-revoke</code> [<code class="option">-hr</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f</code>] [<code class="option">-R</code>] {keyfile}</p></div>
  51. </div>
  52. <div class="refsect1" lang="en">
  53. <a name="id2615650"></a><h2>DESCRIPTION</h2>
  54. <p><span><strong class="command">dnssec-revoke</strong></span>
  55. reads a DNSSEC key file, sets the REVOKED bit on the key as defined
  56. in RFC 5011, and creates a new pair of key files containing the
  57. now-revoked key.
  58. </p>
  59. </div>
  60. <div class="refsect1" lang="en">
  61. <a name="id2615664"></a><h2>OPTIONS</h2>
  62. <div class="variablelist"><dl>
  63. <dt><span class="term">-h</span></dt>
  64. <dd><p>
  65. Emit usage message and exit.
  66. </p></dd>
  67. <dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
  68. <dd><p>
  69. Sets the directory in which the key files are to reside.
  70. </p></dd>
  71. <dt><span class="term">-r</span></dt>
  72. <dd><p>
  73. After writing the new keyset files remove the original keyset
  74. files.
  75. </p></dd>
  76. <dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
  77. <dd><p>
  78. Sets the debugging level.
  79. </p></dd>
  80. <dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
  81. <dd><p>
  82. Use the given OpenSSL engine. When compiled with PKCS#11 support
  83. it defaults to pkcs11; the empty name resets it to no engine.
  84. </p></dd>
  85. <dt><span class="term">-f</span></dt>
  86. <dd><p>
  87. Force overwrite: Causes <span><strong class="command">dnssec-revoke</strong></span> to
  88. write the new key pair even if a file already exists matching
  89. the algorithm and key ID of the revoked key.
  90. </p></dd>
  91. <dt><span class="term">-R</span></dt>
  92. <dd><p>
  93. Print the key tag of the key with the REVOKE bit set but do
  94. not revoke the key.
  95. </p></dd>
  96. </dl></div>
  97. </div>
  98. <div class="refsect1" lang="en">
  99. <a name="id2615784"></a><h2>SEE ALSO</h2>
  100. <p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
  101. <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
  102. <em class="citetitle">RFC 5011</em>.
  103. </p>
  104. </div>
  105. <div class="refsect1" lang="en">
  106. <a name="id2615809"></a><h2>AUTHOR</h2>
  107. <p><span class="corpauthor">Internet Systems Consortium</span>
  108. </p>
  109. </div>
  110. </div>
  111. <div class="navfooter">
  112. <hr>
  113. <table width="100%" summary="Navigation footer">
  114. <tr>
  115. <td width="40%" align="left">
  116. <a accesskey="p" href="man.dnssec-keygen.html">Prev</a> </td>
  117. <td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
  118. <td width="40%" align="right"> <a accesskey="n" href="man.dnssec-settime.html">Next</a>
  119. </td>
  120. </tr>
  121. <tr>
  122. <td width="40%" align="left" valign="top">
  123. <span class="application">dnssec-keygen</span> </td>
  124. <td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
  125. <td width="40%" align="right" valign="top"> <span class="application">dnssec-settime</span>
  126. </td>
  127. </tr>
  128. </table>
  129. </div>
  130. </body>
  131. </html>