1DT-VALIDATE(1) User Commands DT-VALIDATE(1)
2
3
4
6 dt-validate - Query the Domain Name System and display results of the
7 DNSSEC validation process
8
10 dt-validate [options] DOMAIN_NAME
11
13 dt-validate is a diagnostic tool built on top of the DNSSEC validator.
14 It takes DOMAIN_NAME as an argument and queries the DNS for that domain
15 name. It outputs the series of responses that were received from the
16 DNS and the DNSSEC validation results for each domain name. An
17 examination of the queries and validation results can help an
18 administrator uncover errors in DNSSEC configuration of DNS zones.
19
21 -c CLASS, --class=CLASS
22 This option can be used to specify the DNS class of the Resource
23 Record queried. If this option is not given, the default class IN
24 is used.
25
26 -h, --help
27 Display the help and exit.
28
29 -p, --print
30 Print the answers and validation results. By default, dt-validate
31 just outputs a series of responses and their validation results on
32 stderr. When the -p option is used, dt-validate will also output
33 the final result on stdout.
34
35 -t TYPE, --type=TYPE
36 This option can be used to specify the DNS type of the Resource
37 Record queried. If this option is not given, dt-validate will
38 query for the A record for the given DOMAIN_NAME.
39
40 -v FILE, --dnsval-conf=FILE
41 This option can be used to specify the location of the dnsval.conf
42 configuration file.
43
44 -r FILE, --resolv-conf=FILE
45 This option can be used to specify the location of the resolv.conf
46 configuration file containing the name servers to use for lookups.
47
48 -i FILE, --root-hints=FILE
49 This option can be used to specify the location of the root.hints
50 configuration file, containing the root name servers. This is only
51 used when no name server is found, and dt-validate must do
52 recursive lookups itself.
53
54 -S suite[:suite], --test-suite=suite[:suite]
55 This option specifies the test suite (or range of test suites) to
56 use for the internal tests.
57
58 -s, --selftest
59 This option can be used to specify that the application should
60 perform its self tests using names from the configured test-suite.
61
62 -T number[:number], --testcase=number[:number]
63 This option can be used to run a specific test (or range of tests)
64 from the test suite.
65
66 -F file, --testcase-conf=file
67 This option is used to specify the file containing the test cases.
68
69 -l label, --label=label
70 This option can be used to specify the policy from within the
71 dnsval.conf file to use during validation.
72
73 -w seconds, --wait=seconds
74 This option can be used to run the queries specified by other flags
75 in a loop, with the specified interval between successive queries.
76
77 -o, --output=<debug-level>:<dest-type>[:<dest-options>]
78 <debug-level> is 1-7, corresponding to syslog levels ALERT-DEBUG
79 <dest-type> is one of file, net, syslog, stderr, stdout
80 <dest-options> depends on <dest-type>
81 file:<file-name> (opened in append mode)
82 net[:<host-name>:<host-port>] (127.0.0.1:1053
83 syslog[:facility] (0-23 (default 1 USER))
84
86 libval
87
89 Copyright 2005-2013 SPARTA, Inc. All rights reserved. See the COPYING
90 file included with the DNSSEC-Tools package for details.
91
93 Abhijit Hayatnagarkar, Suresh Krishnaswamy, Robert Story
94
96 syslog(3)
97
98 libval(3)
99
100 http://www.dnssec-tools.org
101
102
103
104perl v5.14.3 2013-02-27 DT-VALIDATE(1)