1ods-kaspcheck(1)           OpenDNSSEC ods-kaspcheck           ods-kaspcheck(1)
2
3
4

NAME

6       ods-kaspcheck - Performs a sanity check of the policy for OpenDNSSEC
7

SYNOPSIS

9       ods-kaspcheck [-c path -k path]
10

DESCRIPTION

12       The  OpenDNSSEC  XML  configuration files (conf.xml and kasp.xml) offer
13       the user many options to configure the OpenDNSSEC signing system.  Some
14       syntactic constraints are placed on the configuration by the .rng defi‐
15       nition (for example, whether an element is required or  optional),  but
16       some  semantic  constraints cannot be defined this way (for example, if
17       NSEC3 is used to secure the zone, then a  consistent  DNSKEY  algorithm
18       choice should be made).
19
20       ods-kaspcheck  is  provided  to  check  that  the  configuration  files
21       (conf.xml and kasp.xml) are semantically sane and contain no  inconsis‐
22       tencies.  It  is advisable to use this tool to check your configuration
23       before starting to use OpenDNSSEC.
24

OPTIONS

26       -c, --conf path
27              Path to an OpenDNSSEC configuration file
28
29              (defaults to /etc/opendnssec/conf.xml)
30
31       -k, --kasp path
32              Path to KASP policy file
33
34              (defaults to the path given in the configuration file)
35
36       -v, --version
37              Display version information
38
39       -h, -?, --help
40              Show the help screen
41

SEE ALSO

43       ods-control(8),  ods-enforcerd(8),   ods-hsmspeed(1),   ods-hsmutil(1),
44       ods-ksmutil(1),     ods-signer(8),    ods-signerd(8),    ods-timing(5),
45       opendnssec(7), http://www.opendnssec.org/
46

AUTHORS

48       ods-kaspcheck was written by Alex Dalitz and Nominet  as  part  of  the
49       OpenDNSSEC project.
50
51
52
53OpenDNSSEC                       February 2010                ods-kaspcheck(1)
Impressum