validate(1)

1VALIDATE(1)                      User Commands                     VALIDATE(1)
2
3
4

NAME

6       validate - Query the Domain Name System and display results of the
7       DNSSEC validation process
8

SYNOPSIS

10         validate [options] DOMAIN_NAME
11

DESCRIPTION

13       validate is a diagnostic tool built on top of the DNSSEC validator.  It
14       takes DOMAIN_NAME as an argument and queries the DNS for that domain
15       name.  It outputs the series of responses that were received from the
16       DNS and the DNSSEC validation results for each domain name.  An exami‐
17       nation of the queries and validation results can help an administrator
18       uncover errors in DNSSEC configuration of DNS zones.
19

OPTIONS

21       -c CLASS, --class=CLASS
22           This option can be used to specify the DNS class of the Resource
23           Record queried.  If this option is not given, the default class IN
24           is used.
25
26       -h, --help
27           Display the help and exit.
28
29       -p, --print
30           Print the answers and validation results.  By default, validate
31           just outputs a series of responses and their validation results on
32           stderr.  When the -p option is used, validate will also output the
33           final result on stdout.
34
35       -t TYPE, --type=TYPE
36           This option can be used to specify the DNS type of the Resource
37           Record queried.  If this option is not given, validate will query
38           for the A record for the given DOMAIN_NAME.
39
40       -v FILE, --dnsval-conf=FILE
41           This option can be used to specify the location of the dnsval.conf
42           configuration file.
43
44       -r FILE, --resolv-conf=FILE
45           This option can be used to specify the location of the resolv.conf
46           configuration file containing the name servers to use for lookups.
47
48       -i FILE, --root-hints=FILE
49           This option can be used to specify the location of the root.hints
50           configuration file, containing the root name servers.  This is only
51           used when no name server is found, and validate must do recursive
52           lookups itself.
53
54       -S suite[:suite], --test-suite=suite[:suite]
55           This option specifies the test suite (or range of test suites) to
56           use for the internal tests.
57
58       -s, --selftest
59           This option can be used to specify that the application should per‐
60           form its self tests using names from the configured test-suite.
61
62       -T number[:number], --testcase=number[:number]
63           This option can be used to run a specific test (or range of tests)
64           from the test suite.
65
66       -F file, --testcase-conf=file
67           This option is used to specify the file containing the test cases.
68
69       -l label, --label=label
70           This option can be used to specify the policy from within the
71           dnsval.conf file to use during validation.
72
73       -w seconds, --wait=seconds
74           This option can be used to run the queries specified by other flags
75           in a loop, with the specified interval between successive queries.
76
77       -o, --output=<debug-level>:<dest-type>[:<dest-options>]
78           <debug-level> is 1-7, corresponding to syslog levels ALERT-DEBUG
79           <dest-type> is one of file, net, syslog, stderr, stdout
80           <dest-options> depends on <dest-type>
81               file:<file-name>   (opened in append mode)
82               net[:<host-name>:<host-port>] (127.0.0.1:1053
83               syslog[:facility] (0-23 (default 1 USER))
84

PRE-REQUISITES

86       libval
87

COPYRIGHT

89       Copyright 2005-2011 SPARTA, Inc.  All rights reserved.  See the COPYING
90       file included with the DNSSEC-Tools package for details.
91

AUTHORS

93       Abhijit Hayatnagarkar, Suresh Krishnaswamy, Robert Story
94