[BACK]Return to man.dnssec-importkey.html CVS log [TXT][DIR] Up to [cvs.NetBSD.org] / src / external / mpl / bind / dist / doc / arm

Annotation of src/external/mpl/bind/dist/doc/arm/man.dnssec-importkey.html, Revision 1.1.1.4.4.1

1.1       christos    1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
                      2: <!--
1.1.1.3   christos    3:  - Copyright (C) 2000-2019 Internet Systems Consortium, Inc. ("ISC")
1.1       christos    4:  -
                      5:  - This Source Code Form is subject to the terms of the Mozilla Public
                      6:  - License, v. 2.0. If a copy of the MPL was not distributed with this
                      7:  - file, You can obtain one at http://mozilla.org/MPL/2.0/.
                      8: -->
                      9: <html lang="en">
                     10: <head>
                     11: <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
                     12: <title>dnssec-importkey</title>
                     13: <meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
                     14: <link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
                     15: <link rel="up" href="Bv9ARM.ch12.html" title="Manual pages">
                     16: <link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
                     17: <link rel="next" href="man.dnssec-keyfromlabel.html" title="dnssec-keyfromlabel">
                     18: </head>
                     19: <body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
                     20: <div class="navheader">
                     21: <table width="100%" summary="Navigation header">
                     22: <tr><th colspan="3" align="center"><span class="application">dnssec-importkey</span></th></tr>
                     23: <tr>
                     24: <td width="20%" align="left">
                     25: <a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a> </td>
                     26: <th width="60%" align="center">Manual pages</th>
                     27: <td width="20%" align="right"> <a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
                     28: </td>
                     29: </tr>
                     30: </table>
                     31: <hr>
                     32: </div>
                     33: <div class="refentry">
                     34: <a name="man.dnssec-importkey"></a><div class="titlepage"></div>
                     35:
                     36:
                     37:
                     38:
                     39:
                     40:   <div class="refnamediv">
                     41: <h2>Name</h2>
                     42: <p>
                     43:     <span class="application">dnssec-importkey</span>
                     44:      &#8212; import DNSKEY records from external systems so they can be managed
                     45:   </p>
                     46: </div>
                     47:
                     48:
                     49:
                     50:   <div class="refsynopsisdiv">
                     51: <h2>Synopsis</h2>
                     52:     <div class="cmdsynopsis"><p>
                     53:       <code class="command">dnssec-importkey</code>
                     54:        [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>]
                     55:        [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>]
                     56:        [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>]
                     57:        [<code class="option">-P sync <em class="replaceable"><code>date/offset</code></em></code>]
                     58:        [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>]
                     59:        [<code class="option">-D sync <em class="replaceable"><code>date/offset</code></em></code>]
                     60:        [<code class="option">-h</code>]
                     61:        [<code class="option">-v <em class="replaceable"><code>level</code></em></code>]
                     62:        [<code class="option">-V</code>]
                     63:        {<code class="option">keyfile</code>}
                     64:     </p></div>
                     65:     <div class="cmdsynopsis"><p>
                     66:       <code class="command">dnssec-importkey</code>
                     67:        {<code class="option">-f <em class="replaceable"><code>filename</code></em></code>}
                     68:        [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>]
                     69:        [<code class="option">-L <em class="replaceable"><code>ttl</code></em></code>]
                     70:        [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>]
                     71:        [<code class="option">-P sync <em class="replaceable"><code>date/offset</code></em></code>]
                     72:        [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>]
                     73:        [<code class="option">-D sync <em class="replaceable"><code>date/offset</code></em></code>]
                     74:        [<code class="option">-h</code>]
                     75:        [<code class="option">-v <em class="replaceable"><code>level</code></em></code>]
                     76:        [<code class="option">-V</code>]
                     77:        [<code class="option">dnsname</code>]
                     78:     </p></div>
                     79:   </div>
                     80:
                     81:   <div class="refsection">
                     82: <a name="id-1.13.10.7"></a><h2>DESCRIPTION</h2>
                     83:
                     84:     <p><span class="command"><strong>dnssec-importkey</strong></span>
                     85:       reads a public DNSKEY record and generates a pair of
                     86:       .key/.private files.  The DNSKEY record may be read from an
                     87:       existing .key file, in which case a corresponding .private file
                     88:       will be generated, or it may be read from any other file or
                     89:       from the standard input, in which case both .key and .private
                     90:       files will be generated.
                     91:     </p>
                     92:     <p>
                     93:       The newly-created .private file does <span class="emphasis"><em>not</em></span>
                     94:       contain private key data, and cannot be used for signing.
                     95:       However, having a .private file makes it possible to set
                     96:       publication (<code class="option">-P</code>) and deletion
                     97:       (<code class="option">-D</code>) times for the key, which means the
                     98:       public key can be added to and removed from the DNSKEY RRset
                     99:       on schedule even if the true private key is stored offline.
                    100:     </p>
                    101:   </div>
                    102:
                    103:   <div class="refsection">
                    104: <a name="id-1.13.10.8"></a><h2>OPTIONS</h2>
                    105:
                    106:
                    107:     <div class="variablelist"><dl class="variablelist">
                    108: <dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt>
                    109: <dd>
                    110:          <p>
                    111:            Zone file mode: instead of a public keyfile name, the argument
                    112:            is the DNS domain name of a zone master file, which can be read
                    113:            from <code class="option">file</code>.  If the domain name is the same as
                    114:            <code class="option">file</code>, then it may be omitted.
                    115:          </p>
                    116:          <p>
                    117:            If <code class="option">file</code> is set to <code class="literal">"-"</code>, then
                    118:            the zone data is read from the standard input.
                    119:          </p>
                    120:        </dd>
                    121: <dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
                    122: <dd>
                    123:          <p>
                    124:            Sets the directory in which the key files are to reside.
                    125:          </p>
                    126:        </dd>
                    127: <dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt>
                    128: <dd>
                    129:          <p>
                    130:            Sets the default TTL to use for this key when it is converted
                    131:            into a DNSKEY RR.  If the key is imported into a zone,
                    132:            this is the TTL that will be used for it, unless there was
                    133:            already a DNSKEY RRset in place, in which case the existing TTL
                    134:            would take precedence.  Setting the default TTL to
                    135:            <code class="literal">0</code> or <code class="literal">none</code> removes it.
                    136:          </p>
                    137:        </dd>
                    138: <dt><span class="term">-h</span></dt>
                    139: <dd>
                    140:          <p>
                    141:            Emit usage message and exit.
                    142:          </p>
                    143:        </dd>
                    144: <dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
                    145: <dd>
                    146:          <p>
                    147:            Sets the debugging level.
                    148:          </p>
                    149:        </dd>
                    150: <dt><span class="term">-V</span></dt>
                    151: <dd>
                    152:          <p>
                    153:            Prints version information.
                    154:          </p>
                    155:        </dd>
                    156: </dl></div>
                    157:   </div>
                    158:
                    159:   <div class="refsection">
                    160: <a name="id-1.13.10.9"></a><h2>TIMING OPTIONS</h2>
                    161:
                    162:     <p>
                    163:       Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
                    164:       If the argument begins with a '+' or '-', it is interpreted as
                    165:       an offset from the present time.  For convenience, if such an offset
                    166:       is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
                    167:       then the offset is computed in years (defined as 365 24-hour days,
                    168:       ignoring leap years), months (defined as 30 24-hour days), weeks,
                    169:       days, hours, or minutes, respectively.  Without a suffix, the offset
                    170:       is computed in seconds.  To explicitly prevent a date from being
                    171:       set, use 'none' or 'never'.
                    172:     </p>
                    173:
                    174:     <div class="variablelist"><dl class="variablelist">
                    175: <dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
                    176: <dd>
                    177:          <p>
                    178:            Sets the date on which a key is to be published to the zone.
                    179:            After that date, the key will be included in the zone but will
                    180:            not be used to sign it.
                    181:          </p>
                    182:        </dd>
                    183: <dt><span class="term">-P sync <em class="replaceable"><code>date/offset</code></em></span></dt>
                    184: <dd>
                    185:          <p>
                    186:            Sets the date on which CDS and CDNSKEY records that match this
                    187:            key are to be published to the zone.
                    188:          </p>
                    189:        </dd>
                    190: <dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
                    191: <dd>
                    192:          <p>
                    193:            Sets the date on which the key is to be deleted.  After that
                    194:            date, the key will no longer be included in the zone.  (It
                    195:            may remain in the key repository, however.)
                    196:          </p>
                    197:        </dd>
                    198: <dt><span class="term">-D sync <em class="replaceable"><code>date/offset</code></em></span></dt>
                    199: <dd>
                    200:          <p>
                    201:            Sets the date on which the CDS and CDNSKEY records that match
                    202:            this key are to be deleted.
                    203:          </p>
                    204:        </dd>
                    205: </dl></div>
                    206:   </div>
                    207:
                    208:   <div class="refsection">
                    209: <a name="id-1.13.10.10"></a><h2>FILES</h2>
                    210:
                    211:     <p>
                    212:       A keyfile can be designed by the key identification
                    213:       <code class="filename">Knnnn.+aaa+iiiii</code> or the full file name
                    214:       <code class="filename">Knnnn.+aaa+iiiii.key</code> as generated by
                    215:       <span class="refentrytitle">dnssec-keygen</span>(8).
                    216:     </p>
                    217:   </div>
                    218:
                    219:   <div class="refsection">
                    220: <a name="id-1.13.10.11"></a><h2>SEE ALSO</h2>
                    221:
                    222:     <p><span class="citerefentry">
                    223:        <span class="refentrytitle">dnssec-keygen</span>(8)
                    224:       </span>,
                    225:       <span class="citerefentry">
                    226:        <span class="refentrytitle">dnssec-signzone</span>(8)
                    227:       </span>,
                    228:       <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
                    229:       <em class="citetitle">RFC 5011</em>.
                    230:     </p>
                    231:   </div>
                    232:
                    233: </div>
                    234: <div class="navfooter">
                    235: <hr>
                    236: <table width="100%" summary="Navigation footer">
                    237: <tr>
                    238: <td width="40%" align="left">
                    239: <a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a> </td>
                    240: <td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch12.html">Up</a></td>
                    241: <td width="40%" align="right"> <a accesskey="n" href="man.dnssec-keyfromlabel.html">Next</a>
                    242: </td>
                    243: </tr>
                    244: <tr>
                    245: <td width="40%" align="left" valign="top">
                    246: <span class="application">dnssec-dsfromkey</span> </td>
                    247: <td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
                    248: <td width="40%" align="right" valign="top"> <span class="application">dnssec-keyfromlabel</span>
                    249: </td>
                    250: </tr>
                    251: </table>
                    252: </div>
1.1.1.4.4.1! martin    253: <p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.14.5 (Stable Release)</p>
1.1       christos  254: </body>
                    255: </html>

CVSweb <webmaster@jp.NetBSD.org>