1DNSSEC-CHECKDS(8)                    BIND9                   DNSSEC-CHECKDS(8)
2
3
4

NAME

6       dnssec-checkds - DNSSEC delegation consistency checking tool
7

SYNOPSIS

9       dnssec-checkds [-l domain] [-f file] [-d dig path] [-D dsfromkey path]
10                      {zone}
11
12       dnssec-dsfromkey [-l domain] [-f file] [-d dig path]
13                        [-D dsfromkey path] {zone}
14

DESCRIPTION

16       dnssec-checkds verifies the correctness of Delegation Signer (DS) or
17       DNSSEC Lookaside Validation (DLV) resource records for keys in a
18       specified zone.
19

OPTIONS

21       -f file
22           If a file is specified, then the zone is read from that file to
23           find the DNSKEY records. If not, then the DNSKEY records for the
24           zone are looked up in the DNS.
25
26       -l domain
27           Check for a DLV record in the specified lookaside domain, instead
28           of checking for a DS record in the zone's parent.
29
30       -d dig path
31           Specifies a path to a dig binary. Used for testing.
32
33       -D dsfromkey path
34           Specifies a path to a dnssec-dsfromkey binary. Used for testing.
35

SEE ALSO

37       dnssec-dsfromkey(8), dnssec-keygen(8), dnssec-signzone(8),
38

AUTHOR

40       Internet Systems Consortium, Inc.
41

43       Copyright © 2012-2020 Internet Systems Consortium, Inc. ("ISC")
44
45
46
47ISC                               2013-01-01                 DNSSEC-CHECKDS(8)
Impressum