Annotation of src/external/mpl/bind/dist/doc/arm/man.dnssec-importkey.html, Revision 1.1.1.4.4.1
1.1 christos 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
2: <!--
1.1.1.3 christos 3: - Copyright (C) 2000-2019 Internet Systems Consortium, Inc. ("ISC")
1.1 christos 4: -
5: - This Source Code Form is subject to the terms of the Mozilla Public
6: - License, v. 2.0. If a copy of the MPL was not distributed with this
7: - file, You can obtain one at http://mozilla.org/MPL/2.0/.
8: -->
9: <html lang="en">
10: <head>
11: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
12: <title>dnssec-importkey</title>
13: <meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14: <link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
15: <link rel="up" href="Bv9ARM.ch12.html" title="Manual pages">
16: <link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
17: <link rel="next" href="man.dnssec-keyfromlabel.html" title="dnssec-keyfromlabel">
18: </head>
19: <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
20: <div class="navheader">
21: <table width="100%" summary="Navigation header">
22: <tr><th colspan="3" align="center"><span class="application">dnssec-importkey</span></th></tr>
23: <tr>
24: <td width="20%" align="left">
25: <a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a> </td>
26: <th width="60%" align="center">Manual pages</th>
27: <td width="20%" align="right"> <a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
28: </td>
29: </tr>
30: </table>
31: <hr>
32: </div>
33: <div class="refentry">
34: <a name="man.dnssec-importkey"></a><div class="titlepage"></div>
35:
36:
37:
38:
39:
40: <div class="refnamediv">
41: <h2>Name</h2>
42: <p>
43: <span class="application">dnssec-importkey</span>
44: — import DNSKEY records from external systems so they can be managed
45: </p>
46: </div>
47:
48:
49:
50: <div class="refsynopsisdiv">
51: <h2>Synopsis</h2>
52: <div class="cmdsynopsis"><p>
53: <code class="command">dnssec-importkey</code>
54: [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>]
55: [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>]
56: [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>]
57: [<code class="option">-P sync <em class="replaceable"><code>date/offset</code></em></code>]
58: [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>]
59: [<code class="option">-D sync <em class="replaceable"><code>date/offset</code></em></code>]
60: [<code class="option">-h</code>]
61: [<code class="option">-v <em class="replaceable"><code>level</code></em></code>]
62: [<code class="option">-V</code>]
63: {<code class="option">keyfile</code>}
64: </p></div>
65: <div class="cmdsynopsis"><p>
66: <code class="command">dnssec-importkey</code>
67: {<code class="option">-f <em class="replaceable"><code>filename</code></em></code>}
68: [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>]
69: [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>]
70: [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>]
71: [<code class="option">-P sync <em class="replaceable"><code>date/offset</code></em></code>]
72: [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>]
73: [<code class="option">-D sync <em class="replaceable"><code>date/offset</code></em></code>]
74: [<code class="option">-h</code>]
75: [<code class="option">-v <em class="replaceable"><code>level</code></em></code>]
76: [<code class="option">-V</code>]
77: [<code class="option">dnsname</code>]
78: </p></div>
79: </div>
80:
81: <div class="refsection">
82: <a name="id-1.13.10.7"></a><h2>DESCRIPTION</h2>
83:
84: <p><span class="command"><strong>dnssec-importkey</strong></span>
85: reads a public DNSKEY record and generates a pair of
86: .key/.private files. The DNSKEY record may be read from an
87: existing .key file, in which case a corresponding .private file
88: will be generated, or it may be read from any other file or
89: from the standard input, in which case both .key and .private
90: files will be generated.
91: </p>
92: <p>
93: The newly-created .private file does <span class="emphasis"><em>not</em></span>
94: contain private key data, and cannot be used for signing.
95: However, having a .private file makes it possible to set
96: publication (<code class="option">-P</code>) and deletion
97: (<code class="option">-D</code>) times for the key, which means the
98: public key can be added to and removed from the DNSKEY RRset
99: on schedule even if the true private key is stored offline.
100: </p>
101: </div>
102:
103: <div class="refsection">
104: <a name="id-1.13.10.8"></a><h2>OPTIONS</h2>
105:
106:
107: <div class="variablelist"><dl class="variablelist">
108: <dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt>
109: <dd>
110: <p>
111: Zone file mode: instead of a public keyfile name, the argument
112: is the DNS domain name of a zone master file, which can be read
113: from <code class="option">file</code>. If the domain name is the same as
114: <code class="option">file</code>, then it may be omitted.
115: </p>
116: <p>
117: If <code class="option">file</code> is set to <code class="literal">"-"</code>, then
118: the zone data is read from the standard input.
119: </p>
120: </dd>
121: <dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
122: <dd>
123: <p>
124: Sets the directory in which the key files are to reside.
125: </p>
126: </dd>
127: <dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt>
128: <dd>
129: <p>
130: Sets the default TTL to use for this key when it is converted
131: into a DNSKEY RR. If the key is imported into a zone,
132: this is the TTL that will be used for it, unless there was
133: already a DNSKEY RRset in place, in which case the existing TTL
134: would take precedence. Setting the default TTL to
135: <code class="literal">0</code> or <code class="literal">none</code> removes it.
136: </p>
137: </dd>
138: <dt><span class="term">-h</span></dt>
139: <dd>
140: <p>
141: Emit usage message and exit.
142: </p>
143: </dd>
144: <dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
145: <dd>
146: <p>
147: Sets the debugging level.
148: </p>
149: </dd>
150: <dt><span class="term">-V</span></dt>
151: <dd>
152: <p>
153: Prints version information.
154: </p>
155: </dd>
156: </dl></div>
157: </div>
158:
159: <div class="refsection">
160: <a name="id-1.13.10.9"></a><h2>TIMING OPTIONS</h2>
161:
162: <p>
163: Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
164: If the argument begins with a '+' or '-', it is interpreted as
165: an offset from the present time. For convenience, if such an offset
166: is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
167: then the offset is computed in years (defined as 365 24-hour days,
168: ignoring leap years), months (defined as 30 24-hour days), weeks,
169: days, hours, or minutes, respectively. Without a suffix, the offset
170: is computed in seconds. To explicitly prevent a date from being
171: set, use 'none' or 'never'.
172: </p>
173:
174: <div class="variablelist"><dl class="variablelist">
175: <dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
176: <dd>
177: <p>
178: Sets the date on which a key is to be published to the zone.
179: After that date, the key will be included in the zone but will
180: not be used to sign it.
181: </p>
182: </dd>
183: <dt><span class="term">-P sync <em class="replaceable"><code>date/offset</code></em></span></dt>
184: <dd>
185: <p>
186: Sets the date on which CDS and CDNSKEY records that match this
187: key are to be published to the zone.
188: </p>
189: </dd>
190: <dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
191: <dd>
192: <p>
193: Sets the date on which the key is to be deleted. After that
194: date, the key will no longer be included in the zone. (It
195: may remain in the key repository, however.)
196: </p>
197: </dd>
198: <dt><span class="term">-D sync <em class="replaceable"><code>date/offset</code></em></span></dt>
199: <dd>
200: <p>
201: Sets the date on which the CDS and CDNSKEY records that match
202: this key are to be deleted.
203: </p>
204: </dd>
205: </dl></div>
206: </div>
207:
208: <div class="refsection">
209: <a name="id-1.13.10.10"></a><h2>FILES</h2>
210:
211: <p>
212: A keyfile can be designed by the key identification
213: <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
214: <code class="filename">Knnnn.+aaa+iiiii.key</code> as generated by
215: <span class="refentrytitle">dnssec-keygen</span>(8).
216: </p>
217: </div>
218:
219: <div class="refsection">
220: <a name="id-1.13.10.11"></a><h2>SEE ALSO</h2>
221:
222: <p><span class="citerefentry">
223: <span class="refentrytitle">dnssec-keygen</span>(8)
224: </span>,
225: <span class="citerefentry">
226: <span class="refentrytitle">dnssec-signzone</span>(8)
227: </span>,
228: <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
229: <em class="citetitle">RFC 5011</em>.
230: </p>
231: </div>
232:
233: </div>
234: <div class="navfooter">
235: <hr>
236: <table width="100%" summary="Navigation footer">
237: <tr>
238: <td width="40%" align="left">
239: <a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a> </td>
240: <td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch12.html">Up</a></td>
241: <td width="40%" align="right"> <a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
242: </td>
243: </tr>
244: <tr>
245: <td width="40%" align="left" valign="top">
246: <span class="application">dnssec-dsfromkey</span> </td>
247: <td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
248: <td width="40%" align="right" valign="top"> <span class="application">dnssec-keyfromlabel</span>
249: </td>
250: </tr>
251: </table>
252: </div>
1.1.1.4.4.1! martin 253: <p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.14.5 (Stable Release)</p>
1.1 christos 254: </body>
255: </html>
CVSweb <webmaster@jp.NetBSD.org>