2 - Copyright (C) 2004-2015 Internet Systems Consortium, Inc. ("ISC")
3 - Copyright (C) 2000-2003 Internet Software Consortium.
5 - Permission to use, copy, modify, and/or distribute this software for any
6 - purpose with or without fee is hereby granted, provided that the above
7 - copyright notice and this permission notice appear in all copies.
9 - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
10 - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
11 - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
12 - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
13 - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
14 - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
15 - PERFORMANCE OF THIS SOFTWARE.
17 <!-- $Id: man.dnssec-revoke.html,v 1.5 2015/09/03 07:33:34 christos Exp $ -->
20 <meta http-equiv=
"Content-Type" content=
"text/html; charset=ISO-8859-1">
21 <title>dnssec-revoke
</title>
22 <meta name=
"generator" content=
"DocBook XSL Stylesheets V1.71.1">
23 <link rel=
"start" href=
"Bv9ARM.html" title=
"BIND 9 Administrator Reference Manual">
24 <link rel=
"up" href=
"Bv9ARM.ch13.html" title=
"Manual pages">
25 <link rel=
"prev" href=
"man.dnssec-keygen.html" title=
"dnssec-keygen">
26 <link rel=
"next" href=
"man.dnssec-settime.html" title=
"dnssec-settime">
28 <body bgcolor=
"white" text=
"black" link=
"#0000FF" vlink=
"#840084" alink=
"#0000FF">
29 <div class=
"navheader">
30 <table width=
"100%" summary=
"Navigation header">
31 <tr><th colspan=
"3" align=
"center"><span class=
"application">dnssec-revoke
</span></th></tr>
33 <td width=
"20%" align=
"left">
34 <a accesskey=
"p" href=
"man.dnssec-keygen.html">Prev
</a> </td>
35 <th width=
"60%" align=
"center">Manual pages
</th>
36 <td width=
"20%" align=
"right"> <a accesskey=
"n" href=
"man.dnssec-settime.html">Next
</a>
42 <div class=
"refentry" lang=
"en">
43 <a name=
"man.dnssec-revoke"></a><div class=
"titlepage"></div>
44 <div class=
"refnamediv">
46 <p><span class=
"application">dnssec-revoke
</span> — Set the REVOKED bit on a DNSSEC key
</p>
48 <div class=
"refsynopsisdiv">
50 <div class=
"cmdsynopsis"><p><code class=
"command">dnssec-revoke
</code> [
<code class=
"option">-hr
</code>] [
<code class=
"option">-v
<em class=
"replaceable"><code>level
</code></em></code>] [
<code class=
"option">-V
</code>] [
<code class=
"option">-K
<em class=
"replaceable"><code>directory
</code></em></code>] [
<code class=
"option">-E
<em class=
"replaceable"><code>engine
</code></em></code>] [
<code class=
"option">-f
</code>] [
<code class=
"option">-R
</code>] {keyfile}
</p></div>
52 <div class=
"refsect1" lang=
"en">
53 <a name=
"id2632584"></a><h2>DESCRIPTION
</h2>
54 <p><span><strong class=
"command">dnssec-revoke
</strong></span>
55 reads a DNSSEC key file, sets the REVOKED bit on the key as defined
56 in RFC
5011, and creates a new pair of key files containing the
60 <div class=
"refsect1" lang=
"en">
61 <a name=
"id2632598"></a><h2>OPTIONS
</h2>
62 <div class=
"variablelist"><dl>
63 <dt><span class=
"term">-h
</span></dt>
65 Emit usage message and exit.
67 <dt><span class=
"term">-K
<em class=
"replaceable"><code>directory
</code></em></span></dt>
69 Sets the directory in which the key files are to reside.
71 <dt><span class=
"term">-r
</span></dt>
73 After writing the new keyset files remove the original keyset
76 <dt><span class=
"term">-v
<em class=
"replaceable"><code>level
</code></em></span></dt>
78 Sets the debugging level.
80 <dt><span class=
"term">-V
</span></dt>
82 Prints version information.
84 <dt><span class=
"term">-E
<em class=
"replaceable"><code>engine
</code></em></span></dt>
87 Specifies the cryptographic hardware to use, when applicable.
90 When BIND is built with OpenSSL PKCS#
11 support, this defaults
91 to the string
"pkcs11", which identifies an OpenSSL engine
92 that can drive a cryptographic accelerator or hardware service
93 module. When BIND is built with native PKCS#
11 cryptography
94 (--enable-native-pkcs11), it defaults to the path of the PKCS#
11
95 provider library specified via
"--with-pkcs11".
98 <dt><span class=
"term">-f
</span></dt>
100 Force overwrite: Causes
<span><strong class=
"command">dnssec-revoke
</strong></span> to
101 write the new key pair even if a file already exists matching
102 the algorithm and key ID of the revoked key.
104 <dt><span class=
"term">-R
</span></dt>
106 Print the key tag of the key with the REVOKE bit set but do
111 <div class=
"refsect1" lang=
"en">
112 <a name=
"id2632736"></a><h2>SEE ALSO
</h2>
113 <p><span class=
"citerefentry"><span class=
"refentrytitle">dnssec-keygen
</span>(
8)
</span>,
114 <em class=
"citetitle">BIND
9 Administrator Reference Manual
</em>,
115 <em class=
"citetitle">RFC
5011</em>.
118 <div class=
"refsect1" lang=
"en">
119 <a name=
"id2632760"></a><h2>AUTHOR
</h2>
120 <p><span class=
"corpauthor">Internet Systems Consortium
</span>
124 <div class=
"navfooter">
126 <table width=
"100%" summary=
"Navigation footer">
128 <td width=
"40%" align=
"left">
129 <a accesskey=
"p" href=
"man.dnssec-keygen.html">Prev
</a> </td>
130 <td width=
"20%" align=
"center"><a accesskey=
"u" href=
"Bv9ARM.ch13.html">Up
</a></td>
131 <td width=
"40%" align=
"right"> <a accesskey=
"n" href=
"man.dnssec-settime.html">Next
</a>
135 <td width=
"40%" align=
"left" valign=
"top">
136 <span class=
"application">dnssec-keygen
</span> </td>
137 <td width=
"20%" align=
"center"><a accesskey=
"h" href=
"Bv9ARM.html">Home
</a></td>
138 <td width=
"40%" align=
"right" valign=
"top"> <span class=
"application">dnssec-settime
</span>
143 <p style=
"text-align: center;">BIND
9.10.2-P4
</p>