getdnskeys(1p) [debian man page]

GETDNSKEYS(1p)						User Contributed Perl Documentation					    GETDNSKEYS(1p)

NAME

       getdnskeys - Manage lists of DNSKEYs from DNS zones

SYNOPSIS

	   getdnskeys [-i file] [-o file] [-k] [-T] [-t] [-v] [zones]

DESCRIPTION

       getdnskeys manages lists of DNSKEYs from DNS zones.  It may be used to retrieve and compare DNSKEYs.  The output from getdnskeys may be
       included (directly or indirectly) in a named.conf file.

OPTIONS

       getdnskeys takes the following options:

       -i path
	   Reads path as a named.conf with which to compare key lists.

       -k  Only looks for Key Signing Keys (KSKs); all other keys are ignored.

       -o file
	   Writes the results to file.

       -T  Checks the current trusted key list from named.conf.

       -t  Encloses output in needed named.conf syntax markers.

       -v  Turns on verbose mode for additional output.

       -Version
	   Displays the version information for getdnskeys and the DNSSEC-Tools package.

       -h  Gives a help message.

EXAMPLES

       This getdnskeys will retrieve the KSK for example.com:

	   getdnskeys -o /etc/named.trustkeys.conf -k -v -t example.com

       This getdnskeys will check saved keys against a live set of keys:

	   getdnskeys -i /etc/named.trustkeys.conf -T -k -v -t

       This getdnskeys will automatically update a set of saved keys:

	   getdnskeys -i /etc/named.trustkeys.conf -k -t -T -v
		      -o /etc/named.trustkeys.conf

SECURITY ISSUES

       Currently this does not validate new keys placed in the file in any way, nor does it validate change over keys which have been added.

       It also does not handle revocation of keys.

       It should prompt you before adding a new key so that you can always run the auto-update feature.

perl v5.14.2							    2012-06-21							    GETDNSKEYS(1p)

NAMED-CHECKCONF(8)						       BIND9							NAMED-CHECKCONF(8)

NAME

       named-checkconf - named configuration file syntax checking tool

SYNOPSIS

       named-checkconf [-h] [-v] [-j] [-t directory] {filename} [-p] [-z]

DESCRIPTION

       named-checkconf checks the syntax, but not the semantics, of a named configuration file. The file is parsed and checked for syntax errors,
       along with all files included by it. If no file is specified, /etc/named.conf is read by default.

       Note: files that named reads in separate parser contexts, such as rndc.key and bind.keys, are not automatically read by named-checkconf.
       Configuration errors in these files may cause named to fail to run, even if named-checkconf was successful.  named-checkconf can be run on
       these files explicitly, however.

OPTIONS

       -h
	   Print the usage summary and exit.

       -t directory
	   Chroot to directory so that include directives in the configuration file are processed as if run by a similarly chrooted named.

       -v
	   Print the version of the named-checkconf program and exit.

       -p
	   Print out the named.conf and included files in canonical form if no errors were detected.

       -z
	   Perform a test load of all master zones found in named.conf.

       -j
	   When loading a zonefile read the journal if it exists.

       filename
	   The name of the configuration file to be checked. If not specified, it defaults to /etc/named.conf.

RETURN VALUES

       named-checkconf returns an exit status of 1 if errors were detected and 0 otherwise.

SEE ALSO

       named(8), named-checkzone(8), BIND 9 Administrator Reference Manual.

AUTHOR

       Internet Systems Consortium

COPYRIGHT

       Copyright (C) 2004, 2005, 2007, 2009 Internet Systems Consortium, Inc. ("ISC")
       Copyright (C) 2000-2002 Internet Software Consortium.

BIND9								   June 14, 2000						NAMED-CHECKCONF(8)