1KEYARCH(1) User Contributed Perl Documentation KEYARCH(1)
2
3
4
6 keyarch - DNSSEC-Tools daemon to archive old KSK and ZSK keys
7
9 keyarch [options] <keyrec_file ⎪ rollrec_file>
10
12 The keyarch program archives old KSK and ZSK keys. Keys are considered
13 old if they are obsolete and are marked as either kskobs or zskobs.
14 Archived keys are prefixed with the seconds-since-epoch as a means of
15 distinguishing a zone's keys that have the same five digit number.
16
17 If the required file argument is a keyrec file, then expired keys
18 listed in that file are archived. If the file argument is a rollrec
19 file, the keyrec files of the zones in that file are checked for
20 expired keys.
21
22 If the -zone option is given, then only obsolete keys belonging to the
23 specified zone will be archived.
24
25 The archive directory is either zone-specific (listed in the zone's
26 keyrec record in the zone's keyrec file) or the default archive direc‐
27 tory given in the DNSSEC-Tools configuration file.
28
29 The count of archived keys is given as the program's exit code. Error
30 exit codes are negative.
31
33 The following options are recognized:
34
35 -zone zone_file
36 Name of the zone whose KSKs will be archived. If this is not
37 given, then all the zones defined in the rollrec file will be
38 checked.
39
40 -kskonly
41 Only archive KSK keys.
42
43 -zskonly
44 Only archive ZSK keys.
45
46 -quiet
47 No output will be given.
48
49 -verbose
50 Verbose output will be given.
51
52 -help
53 Display a usage message.
54
55 -Version
56 Display the program versions.
57
59 On success, keyarch's exit code is the number of keys archived.
60
61 keyarch has a 0 exit code if the help message is given.
62
63 keyarch has a negative exit code if an error is encountered.
64
66 Copyright 2007 SPARTA, Inc. All rights reserved. See the COPYING file
67 included with the DNSSEC-Tools package for details.
68
70 Wayne Morrison, tewok@users.sourceforge.net
71
73 rollerd(8), zonesigner(8)
74
75 Net::DNS::SEC::Tools::conf.pm(3), Net::DNS::SEC::Tools::dnssec‐
76 tools.pm(3), Net::DNS::SEC::Tools::defaults.pm(3),
77 Net::DNS::SEC::Tools::keyrec.pm(3), Net::DNS::SEC::Tools::rollrec.pm(3)
78
79 keyrec(5), rollrec(5)
80
81
82
83perl v5.8.8 2007-09-14 KEYARCH(1)