2019-03-31 12:49:47 +02:00
|
|
|
.\" Man page generated from reStructuredText.
|
|
|
|
.
|
|
|
|
.
|
|
|
|
.nr rst2man-indent-level 0
|
|
|
|
.
|
|
|
|
.de1 rstReportMargin
|
|
|
|
\\$1 \\n[an-margin]
|
|
|
|
level \\n[rst2man-indent-level]
|
|
|
|
level margin: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
-
|
|
|
|
\\n[rst2man-indent0]
|
|
|
|
\\n[rst2man-indent1]
|
|
|
|
\\n[rst2man-indent2]
|
|
|
|
..
|
|
|
|
.de1 INDENT
|
|
|
|
.\" .rstReportMargin pre:
|
|
|
|
. RS \\$1
|
|
|
|
. nr rst2man-indent\\n[rst2man-indent-level] \\n[an-margin]
|
|
|
|
. nr rst2man-indent-level +1
|
|
|
|
.\" .rstReportMargin post:
|
|
|
|
..
|
|
|
|
.de UNINDENT
|
|
|
|
. RE
|
|
|
|
.\" indent \\n[an-margin]
|
|
|
|
.\" old: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
.nr rst2man-indent-level -1
|
|
|
|
.\" new: \\n[rst2man-indent\\n[rst2man-indent-level]]
|
|
|
|
.in \\n[rst2man-indent\\n[rst2man-indent-level]]u
|
|
|
|
..
|
2021-09-16 10:57:04 +02:00
|
|
|
.TH "DNSSEC-IMPORTKEY" "1" "@RELEASE_DATE@" "@PACKAGE_VERSION@" "BIND 9"
|
|
|
|
.SH NAME
|
|
|
|
dnssec-importkey \- import DNSKEY records from external systems so they can be managed
|
2019-03-31 12:49:47 +02:00
|
|
|
.SH SYNOPSIS
|
|
|
|
.sp
|
|
|
|
\fBdnssec\-importkey\fP [\fB\-K\fP directory] [\fB\-L\fP ttl] [\fB\-P\fP date/offset] [\fB\-P\fP sync date/offset] [\fB\-D\fP date/offset] [\fB\-D\fP sync date/offset] [\fB\-h\fP] [\fB\-v\fP level] [\fB\-V\fP] {keyfile}
|
|
|
|
.sp
|
|
|
|
\fBdnssec\-importkey\fP {\fB\-f\fP filename} [\fB\-K\fP directory] [\fB\-L\fP ttl] [\fB\-P\fP date/offset] [\fB\-P\fP sync date/offset] [\fB\-D\fP date/offset] [\fB\-D\fP sync date/offset] [\fB\-h\fP] [\fB\-v\fP level] [\fB\-V\fP] [dnsname]
|
|
|
|
.SH DESCRIPTION
|
|
|
|
.sp
|
|
|
|
\fBdnssec\-importkey\fP reads a public DNSKEY record and generates a pair
|
2020-09-30 21:12:15 +02:00
|
|
|
of .key/.private files. The DNSKEY record may be read from an
|
|
|
|
existing .key file, in which case a corresponding .private file is
|
2019-03-31 12:49:47 +02:00
|
|
|
generated, or it may be read from any other file or from the standard
|
2020-07-02 10:53:16 +02:00
|
|
|
input, in which case both .key and .private files are generated.
|
2019-03-31 12:49:47 +02:00
|
|
|
.sp
|
2020-07-02 10:53:16 +02:00
|
|
|
The newly created .private file does \fInot\fP contain private key data, and
|
2019-03-31 12:49:47 +02:00
|
|
|
cannot be used for signing. However, having a .private file makes it
|
|
|
|
possible to set publication (\fB\-P\fP) and deletion (\fB\-D\fP) times for the
|
|
|
|
key, which means the public key can be added to and removed from the
|
|
|
|
DNSKEY RRset on schedule even if the true private key is stored offline.
|
|
|
|
.SH OPTIONS
|
|
|
|
.INDENT 0.0
|
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-f filename\fP
|
|
|
|
This option indicates the zone file mode. Instead of a public keyfile name, the argument is the
|
2019-03-31 12:49:47 +02:00
|
|
|
DNS domain name of a zone master file, which can be read from
|
2020-07-02 10:53:16 +02:00
|
|
|
\fBfilename\fP\&. If the domain name is the same as \fBfilename\fP, then it may be
|
2019-03-31 12:49:47 +02:00
|
|
|
omitted.
|
|
|
|
.sp
|
2020-07-02 10:53:16 +02:00
|
|
|
If \fBfilename\fP is set to \fB"\-"\fP, then the zone data is read from the
|
2019-03-31 12:49:47 +02:00
|
|
|
standard input.
|
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-K directory\fP
|
|
|
|
This option sets the directory in which the key files are to reside.
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-L ttl\fP
|
|
|
|
This option sets the default TTL to use for this key when it is converted into a
|
|
|
|
DNSKEY RR. This is the TTL used when the key is imported into a zone,
|
|
|
|
unless there was already a DNSKEY RRset in
|
|
|
|
place, in which case the existing TTL takes precedence. Setting the default TTL to \fB0\fP or \fBnone\fP
|
|
|
|
removes it from the key.
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-h\fP
|
|
|
|
This option emits a usage message and exits.
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-v level\fP
|
|
|
|
This option sets the debugging level.
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-V\fP
|
|
|
|
This option prints version information.
|
2019-03-31 12:49:47 +02:00
|
|
|
.UNINDENT
|
|
|
|
.SH TIMING OPTIONS
|
|
|
|
.sp
|
|
|
|
Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. If the
|
2020-07-02 10:53:16 +02:00
|
|
|
argument begins with a \fB+\fP or \fB\-\fP, it is interpreted as an offset from
|
2019-03-31 12:49:47 +02:00
|
|
|
the present time. For convenience, if such an offset is followed by one
|
2020-07-02 10:53:16 +02:00
|
|
|
of the suffixes \fBy\fP, \fBmo\fP, \fBw\fP, \fBd\fP, \fBh\fP, or \fBmi\fP, then the offset is
|
2019-03-31 12:49:47 +02:00
|
|
|
computed in years (defined as 365 24\-hour days, ignoring leap years),
|
|
|
|
months (defined as 30 24\-hour days), weeks, days, hours, or minutes,
|
|
|
|
respectively. Without a suffix, the offset is computed in seconds. To
|
2020-07-02 10:53:16 +02:00
|
|
|
explicitly prevent a date from being set, use \fBnone\fP or \fBnever\fP\&.
|
2019-03-31 12:49:47 +02:00
|
|
|
.INDENT 0.0
|
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-P date/offset\fP
|
|
|
|
This option sets the date on which a key is to be published to the zone. After
|
|
|
|
that date, the key is included in the zone but is not used
|
2019-03-31 12:49:47 +02:00
|
|
|
to sign it.
|
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-P sync date/offset\fP
|
|
|
|
This option sets the date on which CDS and CDNSKEY records that match this key
|
2019-03-31 12:49:47 +02:00
|
|
|
are to be published to the zone.
|
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-D date/offset\fP
|
|
|
|
This option sets the date on which the key is to be deleted. After that date, the
|
|
|
|
key is no longer included in the zone. (However, it may remain in the key
|
|
|
|
repository.)
|
2019-03-31 12:49:47 +02:00
|
|
|
.TP
|
2020-07-02 10:53:16 +02:00
|
|
|
.B \fB\-D sync date/offset\fP
|
|
|
|
This option sets the date on which the CDS and CDNSKEY records that match this
|
2019-03-31 12:49:47 +02:00
|
|
|
key are to be deleted.
|
|
|
|
.UNINDENT
|
|
|
|
.SH FILES
|
|
|
|
.sp
|
|
|
|
A keyfile can be designed by the key identification \fBKnnnn.+aaa+iiiii\fP
|
2020-07-02 10:53:16 +02:00
|
|
|
or the full file name \fBKnnnn.+aaa+iiiii.key\fP, as generated by
|
|
|
|
\fBdnssec\-keygen\fP\&.
|
2020-07-01 15:16:51 +00:00
|
|
|
.SH SEE ALSO
|
2019-03-31 12:49:47 +02:00
|
|
|
.sp
|
|
|
|
\fBdnssec\-keygen(8)\fP, \fBdnssec\-signzone(8)\fP, BIND 9 Administrator Reference Manual,
|
|
|
|
\fI\%RFC 5011\fP\&.
|
|
|
|
.SH AUTHOR
|
|
|
|
Internet Systems Consortium
|
|
|
|
.SH COPYRIGHT
|
2021-01-11 12:01:51 +01:00
|
|
|
2021, Internet Systems Consortium
|
2019-03-31 12:49:47 +02:00
|
|
|
.\" Generated by docutils manpage writer.
|
|
|
|
.
|