2019-03-31 12:49:47 +02:00
|
|
|
.\" Man page generated from reStructuredText.
|
|
|
|
.
|
|
|
|
.
|
|
|
|
.nr rst2man-indent-level 0
|
|
|
|
.
|
|
|
|
.de1 rstReportMargin
|
|
|
|
\\$1 \\n[an-margin]
|
|
|
|
level \\n[rst2man-indent-level]
|
|
|
|
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
-
|
|
|
|
\\n[rst2man-indent0]
|
|
|
|
\\n[rst2man-indent1]
|
|
|
|
\\n[rst2man-indent2]
|
|
|
|
..
|
|
|
|
.de1 INDENT
|
|
|
|
.\" .rstReportMargin pre:
|
|
|
|
. RS \\$1
|
|
|
|
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
|
|
|
|
. nr rst2man-indent-level +1
|
|
|
|
.\" .rstReportMargin post:
|
|
|
|
..
|
|
|
|
.de UNINDENT
|
|
|
|
. RE
|
|
|
|
.\" indent \\n[an-margin]
|
|
|
|
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
.nr rst2man-indent-level -1
|
|
|
|
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
|
|
|
|
..
|
2021-09-16 10:57:04 +02:00
|
|
|
.TH "DNSSEC-REVOKE" "1" "@RELEASE_DATE@" "@PACKAGE_VERSION@" "BIND 9"
|
|
|
|
.SH NAME
|
|
|
|
dnssec-revoke \- set the REVOKED bit on a DNSSEC key
|
2019-03-31 12:49:47 +02:00
|
|
|
.SH SYNOPSIS
|
|
|
|
.sp
|
|
|
|
\fBdnssec\-revoke\fP [\fB\-hr\fP] [\fB\-v\fP level] [\fB\-V\fP] [\fB\-K\fP directory] [\fB\-E\fP engine] [\fB\-f\fP] [\fB\-R\fP] {keyfile}
|
|
|
|
.SH DESCRIPTION
|
|
|
|
.sp
|
|
|
|
\fBdnssec\-revoke\fP reads a DNSSEC key file, sets the REVOKED bit on the
|
|
|
|
key as defined in \fI\%RFC 5011\fP, and creates a new pair of key files
|
|
|
|
containing the now\-revoked key.
|
|
|
|
.SH OPTIONS
|
|
|
|
.INDENT 0.0
|
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-h
|
2020-07-02 10:53:16 +02:00
|
|
|
This option emits a usage message and exits.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-K directory
|
2020-07-02 10:53:16 +02:00
|
|
|
This option sets the directory in which the key files are to reside.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-r
|
2020-07-02 10:53:16 +02:00
|
|
|
This option indicates to remove the original keyset files after writing the new keyset files.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-v level
|
2020-07-02 10:53:16 +02:00
|
|
|
This option sets the debugging level.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-V
|
2020-07-02 10:53:16 +02:00
|
|
|
This option prints version information.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-E engine
|
2020-07-02 10:53:16 +02:00
|
|
|
This option specifies the cryptographic hardware to use, when applicable.
|
2019-03-31 12:49:47 +02:00
|
|
|
.sp
|
2021-01-18 08:57:52 +01:00
|
|
|
When BIND 9 is built with OpenSSL, this needs to be set to the OpenSSL
|
|
|
|
engine identifier that drives the cryptographic accelerator or
|
2021-05-20 16:26:53 +02:00
|
|
|
hardware service module (usually \fBpkcs11\fP).
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-f
|
2020-07-02 10:53:16 +02:00
|
|
|
This option indicates a forced overwrite and causes \fBdnssec\-revoke\fP to write the new key pair,
|
2019-03-31 12:49:47 +02:00
|
|
|
even if a file already exists matching the algorithm and key ID of
|
|
|
|
the revoked key.
|
2022-03-02 15:12:17 +01:00
|
|
|
.UNINDENT
|
|
|
|
.INDENT 0.0
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2022-03-02 15:12:17 +01:00
|
|
|
.B \-R
|
2020-07-02 10:53:16 +02:00
|
|
|
This option prints the key tag of the key with the REVOKE bit set, but does not
|
2019-03-31 12:49:47 +02:00
|
|
|
revoke the key.
|
|
|
|
.UNINDENT
|
|
|
|
.SH SEE ALSO
|
|
|
|
.sp
|
2022-04-22 13:05:10 +02:00
|
|
|
\fI\%dnssec\-keygen(8)\fP, BIND 9 Administrator Reference Manual, \fI\%RFC 5011\fP\&.
|
2019-03-31 12:49:47 +02:00
|
|
|
.SH AUTHOR
|
|
|
|
Internet Systems Consortium
|
|
|
|
.SH COPYRIGHT
|
2022-01-03 10:29:49 +01:00
|
|
|
2022, Internet Systems Consortium
|
2019-03-31 12:49:47 +02:00
|
|
|
.\" Generated by docutils manpage writer.
|
|
|
|
.
|