1KEYARCH(1)            User Contributed Perl Documentation           KEYARCH(1)
2
3
4

NAME

6       keyarch - DNSSEC-Tools daemon to archive old KSK and ZSK keys
7

SYNOPSIS

9         keyarch [options] <keyrec_file ⎪ rollrec_file>
10

DESCRIPTION

12       The keyarch program archives old KSK and ZSK keys.  Keys are considered
13       old if they are obsolete and are marked as either kskobs or zskobs.
14       Archived keys are prefixed with the seconds-since-epoch as a means of
15       distinguishing a zone's keys that have the same five digit number.
16
17       If the required file argument is a keyrec file, then expired keys
18       listed in that file are archived.  If the file argument is a rollrec
19       file, the keyrec files of the zones in that file are checked for
20       expired keys.
21
22       If the -zone option is given, then only obsolete keys belonging to the
23       specified zone will be archived.
24
25       The archive directory is either zone-specific (listed in the zone's
26       keyrec record in the zone's keyrec file) or the default archive direc‐
27       tory given in the DNSSEC-Tools configuration file.
28
29       The count of archived keys is given as the program's exit code.  Error
30       exit codes are negative.
31

OPTIONS

33       The following options are recognized:
34
35       -zone zone_file
36           Name of the zone whose KSKs will be archived.  If this is not
37           given, then all the zones defined in the rollrec file will be
38           checked.
39
40       -kskonly
41           Only archive KSK keys.
42
43       -zskonly
44           Only archive ZSK keys.
45
46       -quiet
47           No output will be given.
48
49       -verbose
50           Verbose output will be given.
51
52       -help
53           Display a usage message.
54
55       -Version
56           Display the program versions.
57

EXIT VALUES

59       On success, keyarch's exit code is the number of keys archived.
60
61       keyarch has a 0 exit code if the help message is given.
62
63       keyarch has a negative exit code if an error is encountered.
64

66       Copyright 2007 SPARTA, Inc.  All rights reserved.  See the COPYING file
67       included with the DNSSEC-Tools package for details.
68

AUTHOR

70       Wayne Morrison, tewok@users.sourceforge.net
71

SEE ALSO

73       rollerd(8), zonesigner(8)
74
75       Net::DNS::SEC::Tools::conf.pm(3), Net::DNS::SEC::Tools::dnssec‐
76       tools.pm(3), Net::DNS::SEC::Tools::defaults.pm(3),
77       Net::DNS::SEC::Tools::keyrec.pm(3), Net::DNS::SEC::Tools::rollrec.pm(3)
78
79       keyrec(5), rollrec(5)
80
81
82
83perl v5.8.8                       2007-09-14                        KEYARCH(1)
Impressum