Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

dtck(1p) [debian man page]

DTCK(1p)						User Contributed Perl Documentation						  DTCK(1p)

NAME

       dtck - Check the DNSSEC-Tools data files for sanity.

SYNOPSIS

	 dtck [options] [dtck_config_file]

DESCRIPTION

       dtck checks DNSSEC-Tools data files to determine if the entries are valid.  dtck checks the validity of DNSSEC-Tools configuration files,
       rollrec files, and keyrec files.  It does not perform the file checking itself, but runs checking programs specific to each type of data
       file.

       A dtck configuration file is consulted to determine the files to check.	This file lists the DNSSEC-Tools data files and their types.  If a
       dtck configuration file is not given on the command line, dtck will only check the DNSSEC-Tools configuration file.  This is equivalent to
       running dtconfchk directly.

DTCK CONFIGURATION FILE

       A dtck configuration file contains a list of the files to be checked by dtck.  Except for comments, each line has the following format:

	   keyword file directory

       keyword is one of "config", "rollrec", or "keyrec".  file is the pathname of the file to be checked.  directory is the name of the
       directory that holds file and is optional.

       The dtck configuration file contains the following types of records:

       config
	   These lines define the DNSSEC-Tools configuration files that will be checked.  The dtconfchk program will be used to verify these
	   files.

       rollrec
	   These lines define the rollrec files that will be checked.  The rollchk program will be used to verify these files.

       keyrec
	   These lines define the keyrec files that will be checked.  The krfcheck program will be used to verify these files.

       comments
	   Any lines starting with an octothorpe (#) are comment lines and are ignored.

OPTIONS

       dtck takes two types of options.  Options of the first type are handled directly by dtck, controlling its output and processing.  Options
       of the second type are passed to the file-checking programs and are not further handled by dtck.

   Options Handled by dtck
       -defcon
	   This option directs dtck to add the default DNSSEC-Tools configuration file to the list of configuration files to be checked.

       -list
	   The names of the files will be listed as they are checked.

       -pretty
	   Clarifying output is added to the output from dtck and the file-checking programs.

       -help
	   Display a usage message.

   Options Not Handled by dtck
       -count
	   The file-checking programs will display a final error count.

       -quiet
	   No output will be given by the file-checking program.

       -verbose
	   Verbose output will be given by the file-checking program.

       -Version
	   Displays the version information for dtck and the DNSSEC-Tools package.

COPYRIGHT

       Copyright 2007-2012 SPARTA, Inc.  All rights reserved.  See the COPYING file included with the DNSSEC-Tools package for details.

AUTHOR

       Wayne Morrison, tewok@tislabs.com

SEE ALSO

       dtconfchk(8), krfcheck(8), rollchk(8)

       dnssec-tools.conf(5), keyrec(5), rollrec(5)

perl v5.14.2							    2012-06-21								  DTCK(1p)

Check Out this Related Man Page

KEYARCH(1p)						User Contributed Perl Documentation					       KEYARCH(1p)

NAME

       keyarch - DNSSEC-Tools daemon to archive old KSK and ZSK keys

SYNOPSIS

	 keyarch [options] <keyrec_file | rollrec_file>

DESCRIPTION

       The keyarch program archives old KSK and ZSK keys.  Keys are considered old if they are revoked or obsolete.  Keys marked as either kskrev
       or zskrev are revoked; keys marked as either kskobs or zskobs are obsolete.  Archived keys are prefixed with the seconds-since-epoch as a
       means of distinguishing a zone's keys that have the same five digit number.

       If the required file argument is a keyrec file, then expired keys listed in that file are archived.  If the file argument is a rollrec
       file, the keyrec files of the zones in that file are checked for expired keys.

       If the -zone option is given, then only revoked and obsolete keys belonging to the specified zone will be archived.

       The archive directory is either zone-specific (listed in the zone's keyrec record in the zone's keyrec file) or the default archive
       directory given in the DNSSEC-Tools configuration file.

       The count of archived keys is given as the program's exit code.	Error exit codes are negative.

OPTIONS

       The following options are recognized:

       -zone zone_file
	   Name of the zone whose KSKs will be archived.  If this is not given, then all the zones defined in the rollrec file will be checked.

       -kskonly
	   Only archive KSK keys.

       -zskonly
	   Only archive ZSK keys.

       -dtconfig config_file
	   Name of an alternate DNSSEC-Tools configuration file to be processed.  If specified, this configuration file is used in place of the
	   normal DNSSEC-Tools configuration file not in addition to it.  Also, it will be handled prior to keyrec files, rollrec files, and
	   command-line options.

       -quiet
	   No output will be given.

       -verbose
	   Verbose output will be given.

       -help
	   Display a usage message.

       -Version
	   Displays the version information for keyarch and the DNSSEC-Tools package.

EXIT VALUES

       On success, keyarch's exit code is the number of keys archived.

       keyarch has a 0 exit code if the help message is given.

       keyarch has a negative exit code if an error is encountered.

COPYRIGHT

       Copyright 2007-2012 SPARTA, Inc.  All rights reserved.  See the COPYING file included with the DNSSEC-Tools package for details.

AUTHOR

       Wayne Morrison, tewok@tislabs.com

SEE ALSO

       rollerd(8), zonesigner(8)

       Net::DNS::SEC::Tools::conf.pm(3), Net::DNS::SEC::Tools::dnssectools.pm(3), Net::DNS::SEC::Tools::defaults.pm(3),
       Net::DNS::SEC::Tools::keyrec.pm(3), Net::DNS::SEC::Tools::rollrec.pm(3)

       keyrec(5), rollrec(5)

perl v5.14.2							    2012-06-21							       KEYARCH(1p)
Man Page