dnssec-checkds (8) Linux Manual Page
dnssec-checkds – A DNSSEC delegation consistency checking tool.
Synopsis
-
dnssec-checkds[-ldomain] [-ffile] [-ddig path] [-Ddsfromkey path] {zone}dnssec-dsfromkey[-ldomain] [-ffile] [-ddig path] [-Ddsfromkey path] {zone}
Description
dnssec-checkds
Options
-f file
- If a
fileis specified, then the zone is read from that file to find the DNSKEY records. If not, then the DNSKEY records for the zone are looked up in the DNS.
-l domain
- Check for a DLV record in the specified lookaside domain, instead of checking for a DS record in the zone’s parent. For example, to check for DLV records for "example.com" in ISC’s DLV zone, use:
dnssec-checkds -l dlv.isc.org example.com
-d dig path
- Specifies a path to a
digbinary. Used for testing.
-D dsfromkey path
- Specifies a path to a
dnssec-dsfromkeybinary. Used for testing.
See Also
dnssec-dsfromkey(8), dnssec-keygen(8), dnssec-signzone(8),
Author
Internet Systems Consortium
Copyright
Copyright © 2012, 2013 Internet Systems Consortium, Inc. ("ISC")