00b67f09dd
Also known as ISC bind. This import adds utilities such as host(1), dig(1), and nslookup(1), as well as many other tools and libraries. Change-Id: I035ca46e64f1965d57019e773f4ff0ef035e4aa3
396 lines
11 KiB
HTML
396 lines
11 KiB
HTML
<!-- Creator : groff version 1.20.1 -->
|
|
<!-- CreationDate: Tue Aug 3 17:20:51 2010 -->
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
|
|
"http://www.w3.org/TR/html4/loose.dtd">
|
|
<html>
|
|
<head>
|
|
<meta name="generator" content="groff -Thtml, see www.gnu.org">
|
|
<meta http-equiv="Content-Type" content="text/html; charset=US-ASCII">
|
|
<meta name="Content-Style" content="text/css">
|
|
<style type="text/css">
|
|
p { margin-top: 0; margin-bottom: 0; vertical-align: top }
|
|
pre { margin-top: 0; margin-bottom: 0; vertical-align: top }
|
|
table { margin-top: 0; margin-bottom: 0; vertical-align: top }
|
|
h1 { text-align: center }
|
|
</style>
|
|
<title>zkt-ls</title>
|
|
|
|
</head>
|
|
<body>
|
|
|
|
<h1 align="center">zkt-ls</h1>
|
|
|
|
<a href="#NAME">NAME</a><br>
|
|
<a href="#SYNOPSYS">SYNOPSYS</a><br>
|
|
<a href="#DESCRIPTION">DESCRIPTION</a><br>
|
|
<a href="#GENERAL OPTIONS">GENERAL OPTIONS</a><br>
|
|
<a href="#COMMAND OPTIONS">COMMAND OPTIONS</a><br>
|
|
<a href="#SAMPLE USAGE">SAMPLE USAGE</a><br>
|
|
<a href="#ENVIRONMENT VARIABLES">ENVIRONMENT VARIABLES</a><br>
|
|
<a href="#FILES">FILES</a><br>
|
|
<a href="#BUGS">BUGS</a><br>
|
|
<a href="#AUTHORS">AUTHORS</a><br>
|
|
<a href="#COPYRIGHT">COPYRIGHT</a><br>
|
|
<a href="#SEE ALSO">SEE ALSO</a><br>
|
|
|
|
<hr>
|
|
|
|
|
|
<h2>NAME
|
|
<a name="NAME"></a>
|
|
</h2>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em">zkt−ls
|
|
— list dnskeys</p>
|
|
|
|
<h2>SYNOPSYS
|
|
<a name="SYNOPSYS"></a>
|
|
</h2>
|
|
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><b>zkt−ls
|
|
−H</b></p>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><b>zkt−ls</b>
|
|
[<b>−V|--view</b> <i>view</i>] [<b>−c</b>
|
|
<i>file</i>] [<b>−l</b> <i>list</i>]
|
|
[<b>−adefhkLprtz</b>] [{<i>keyfile</i>|<i>dir</i>}
|
|
<i>...</i>]</p>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><b>zkt−ls
|
|
−T</b> [<b>−V|--view</b> <i>view</i>]
|
|
[<b>−c</b> <i>file</i>] [<b>−l</b> <i>list</i>]
|
|
[<b>−dhrz</b>] [{<i>keyfile</i>|<i>dir</i>}
|
|
<i>...</i>] <b><br>
|
|
zkt−ls −−list-trustedkeys</b>
|
|
[<b>−V|--view</b> <i>view</i>] [<b>−c</b>
|
|
<i>file</i>] [<b>−l</b> <i>list</i>]
|
|
[<b>−dhrz</b>] [{<i>keyfile</i>|<i>dir</i>}
|
|
<i>...</i>]</p>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><b>zkt−ls
|
|
−M</b> [<b>−V|--view</b> <i>view</i>]
|
|
[<b>−c</b> <i>file</i>] [<b>−l</b> <i>list</i>]
|
|
[<b>−dhrz</b>] [{<i>keyfile</i>|<i>dir</i>}
|
|
<i>...</i>] <b><br>
|
|
zkt−ls −−list-managedkeys</b>
|
|
[<b>−V|--view</b> <i>view</i>] [<b>−c</b>
|
|
<i>file</i>] [<b>−l</b> <i>list</i>]
|
|
[<b>−dhrz</b>] [{<i>keyfile</i>|<i>dir</i>}
|
|
<i>...</i>]</p>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><b>zkt−ls
|
|
−K</b> [<b>−V|--view</b> <i>view</i>]
|
|
[<b>−c</b> <i>file</i>] [<b>−l</b> <i>list</i>]
|
|
[<b>−dhkrz</b>] [{<i>keyfile</i>|<i>dir</i>}
|
|
<i>...</i>] <b><br>
|
|
zkt−ls −−list-dnskeys</b>
|
|
[<b>−V|--view</b> <i>view</i>] [<b>−c</b>
|
|
<i>file</i>] [<b>−l</b> <i>list</i>]
|
|
[<b>−dhkrz</b>] [{<i>keyfile</i>|<i>dir</i>}
|
|
<i>...</i>]</p>
|
|
|
|
<h2>DESCRIPTION
|
|
<a name="DESCRIPTION"></a>
|
|
</h2>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em">The
|
|
<i>zkt-ls</i> command list all dnssec zone keys found in the
|
|
given or predefined default directory. It is also possible
|
|
to specify keyfiles (K*.key) as arguments. With option
|
|
<b>−r</b> subdirectories will be searched recursively
|
|
and all dnssec keys found are listed, sorted by domain name,
|
|
key type and generation time. In that mode the use of option
|
|
<b>−p</b> may be helpful to find the location of the
|
|
keyfile in the directory tree.</p>
|
|
|
|
<p style="margin-left:11%; margin-top: 1em">Other forms of
|
|
the command, print out keys in a format suitable for a
|
|
trusted- or managed-key section
|
|
(<b>−T</b>or<b>−M</b>) or as a DNSKEY
|
|
(<b>−K</b>) resource record.</p>
|
|
|
|
<h2>GENERAL OPTIONS
|
|
<a name="GENERAL OPTIONS"></a>
|
|
</h2>
|
|
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><b>−V</b>
|
|
<i>view</i><b>, −−view=</b><i>view</i></p>
|
|
|
|
<p style="margin-left:22%;">Try to read the default
|
|
configuration out of a file named
|
|
<i>dnssec-<view>.conf .</i> Instead of specifying the
|
|
−V or --view option every time, it is also possible to
|
|
create a hard or softlink to the executable file to give it
|
|
an additional name like <i>zkt-ls-<view> .</i></p>
|
|
|
|
<p style="margin-left:11%;"><b>−c</b> <i>file</i><b>,
|
|
−−config=</b><i>file</i></p>
|
|
|
|
<p style="margin-left:22%;">Read default values from the
|
|
specified config file. Otherwise the default config file is
|
|
read or build in defaults will be used.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−O</b>
|
|
<i>optstr</i><b>,
|
|
−−config-option=</b><i>optstr</i></p>
|
|
|
|
<p style="margin-left:22%;">Set any config file option via
|
|
the commandline. Several config file options could be
|
|
specified at the argument string but have to be delimited by
|
|
semicolon (or newline).</p>
|
|
|
|
<p style="margin-left:11%;"><b>−l</b> <i>list</i><b>,
|
|
−−label=</b><i>list</i></p>
|
|
|
|
<p style="margin-left:22%;">Print out information solely
|
|
about domains given in the comma or space separated list.
|
|
Take care of, that every domain name has a trailing dot.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−d</b>,
|
|
<b>−−directory</b></p>
|
|
|
|
<p style="margin-left:22%;">Skip directory arguments. This
|
|
will be useful in combination with wildcard arguments to
|
|
prevent dnsssec-zkt to list all keys found in
|
|
subdirectories. For example "zkt-ls -d *" will
|
|
print out a list of all keys only found in the current
|
|
directory. Maybe it is easier to use "zkt-ls ."
|
|
instead (without -r set). The option works similar to the
|
|
−d option of <i>ls(1)</i>.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−L</b>,
|
|
<b>−−left-justify</b></p>
|
|
|
|
<p style="margin-left:22%;">Print out the domain name left
|
|
justified.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−k</b>,
|
|
<b>−−ksk</b></p>
|
|
|
|
<p style="margin-left:22%;">Select and print key signing
|
|
keys only (default depends on command mode).</p>
|
|
|
|
<p style="margin-left:11%;"><b>−z</b>,
|
|
<b>−−zsk</b></p>
|
|
|
|
<p style="margin-left:22%;">Select and print zone signing
|
|
keys only (default depends on command mode).</p>
|
|
|
|
<p style="margin-left:11%;"><b>−r</b>,
|
|
<b>−−recursive</b></p>
|
|
|
|
<p style="margin-left:22%;">Recursive mode (default is
|
|
off). <br>
|
|
Also settable in the dnssec.conf file (Parameter:
|
|
Recursive).</p>
|
|
|
|
<p style="margin-left:11%;"><b>−p</b>,
|
|
<b>−−path</b></p>
|
|
|
|
<p style="margin-left:22%;">Print pathname in listing mode.
|
|
In -C mode, don’t create the new key in the same
|
|
directory as (already existing) keys with the same
|
|
label.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−a</b>,
|
|
<b>−−age</b></p>
|
|
|
|
<p style="margin-left:22%;">Print age of key in weeks,
|
|
days, hours, minutes and seconds (default is off). <br>
|
|
Also settable in the dnssec.conf file (Parameter:
|
|
PrintAge).</p>
|
|
|
|
<p style="margin-left:11%;"><b>−f</b>,
|
|
<b>−−lifetime</b></p>
|
|
|
|
<p style="margin-left:22%;">Print the key lifetime.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−e</b>,
|
|
<b>−−exptime</b></p>
|
|
|
|
<p style="margin-left:22%;">Print the key expiration
|
|
time.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−t</b>,
|
|
<b>−−time</b></p>
|
|
|
|
<p style="margin-left:22%;">Print the key generation time
|
|
(default is on). <br>
|
|
Also settable in the dnssec.conf file (Parameter:
|
|
PrintTime).</p>
|
|
|
|
<table width="100%" border="0" rules="none" frame="void"
|
|
cellspacing="0" cellpadding="0">
|
|
<tr valign="top" align="left">
|
|
<td width="11%"></td>
|
|
<td width="3%">
|
|
|
|
|
|
<p><b>−h</b></p></td>
|
|
<td width="8%"></td>
|
|
<td width="78%">
|
|
|
|
|
|
<p>No header or trusted-key resp. managed-key section
|
|
header and trailer in −T or −M mode.</p></td></tr>
|
|
</table>
|
|
|
|
<h2>COMMAND OPTIONS
|
|
<a name="COMMAND OPTIONS"></a>
|
|
</h2>
|
|
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><b>−H</b>,
|
|
<b>−−help</b></p>
|
|
|
|
<p style="margin-left:22%;">Print out the online help.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−T</b>,
|
|
<b>−−list-trustedkeys</b></p>
|
|
|
|
<p style="margin-left:22%;">List all key signing keys as a
|
|
<i>named.conf</i> trusted-key section. Use <b>−h</b>
|
|
to supress the section header/trailer.</p>
|
|
|
|
<p style="margin-left:11%;"><b>−K</b>,
|
|
<b>−−list-dnskeys</b></p>
|
|
|
|
<p style="margin-left:22%;">List the public part of all the
|
|
keys in DNSKEY resource record format. Use <b>−h</b>
|
|
to suppress comment lines.</p>
|
|
|
|
<h2>SAMPLE USAGE
|
|
<a name="SAMPLE USAGE"></a>
|
|
</h2>
|
|
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><b>zkt−ls
|
|
−r .</b></p>
|
|
|
|
<p style="margin-left:22%;">Print out a list of all zone
|
|
keys found below the current directory.</p>
|
|
|
|
<p style="margin-left:11%;"><b>zkt−ls −Z
|
|
−c ""</b></p>
|
|
|
|
<p style="margin-left:22%;">Print out the compiled in
|
|
default parameters.</p>
|
|
|
|
<p style="margin-left:11%;"><b>zkt−ls −T
|
|
./zonedir/example.net</b></p>
|
|
|
|
<p style="margin-left:22%;">Print out a trusted-key section
|
|
containing the key signing keys of
|
|
"example.net".</p>
|
|
|
|
<p style="margin-left:11%;"><b>zkt−ls --view
|
|
intern</b></p>
|
|
|
|
<p style="margin-left:22%;">Print out a list of all zone
|
|
keys found below the directory where all the zones of view
|
|
intern live. There should be a seperate dnssec config file
|
|
<i>dnssec-intern.conf</i> with a directory option to take
|
|
affect of this.</p>
|
|
|
|
|
|
<p style="margin-left:11%;"><b>zkt−ls−intern</b></p>
|
|
|
|
<p style="margin-left:22%;">Same as above. The binary file
|
|
<i>zkt−ls</i> has another link, named
|
|
<i>zkt−ls−intern</i> made, and
|
|
<i>zkt−ls</i> examines argv[0] to find a view whose
|
|
zones it proceeds to process.</p>
|
|
|
|
<h2>ENVIRONMENT VARIABLES
|
|
<a name="ENVIRONMENT VARIABLES"></a>
|
|
</h2>
|
|
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em">ZKT_CONFFILE</p>
|
|
|
|
<p style="margin-left:22%;">Specifies the name of the
|
|
default global configuration files.</p>
|
|
|
|
<h2>FILES
|
|
<a name="FILES"></a>
|
|
</h2>
|
|
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em"><i>/var/named/dnssec.conf</i></p>
|
|
|
|
<p style="margin-left:22%;">Built-in default global
|
|
configuration file. The name of the default global config
|
|
file is settable via the environment variable
|
|
ZKT_CONFFILE.</p>
|
|
|
|
|
|
<p style="margin-left:11%;"><i>/var/named/dnssec-<view>.conf</i></p>
|
|
|
|
<p style="margin-left:22%;">View specific global
|
|
configuration file.</p>
|
|
|
|
<p style="margin-left:11%;"><i>./dnssec.conf</i></p>
|
|
|
|
<p style="margin-left:22%;">Local configuration file (only
|
|
used in <b>−C</b> mode).</p>
|
|
|
|
<h2>BUGS
|
|
<a name="BUGS"></a>
|
|
</h2>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em">Some of the
|
|
general options will not be meaningful in all of the command
|
|
modes. <br>
|
|
The option <b>−l</b> and the ksk rollover options
|
|
insist on domain names ending with a dot.</p>
|
|
|
|
<h2>AUTHORS
|
|
<a name="AUTHORS"></a>
|
|
</h2>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em">Holger
|
|
Zuleger</p>
|
|
|
|
<h2>COPYRIGHT
|
|
<a name="COPYRIGHT"></a>
|
|
</h2>
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em">Copyright (c)
|
|
2005 − 2010 by Holger Zuleger. Licensed under the BSD
|
|
Licences. There is NO warranty; not even for MERCHANTABILITY
|
|
or FITNESS FOR A PARTICULAR PURPOSE.</p>
|
|
|
|
<h2>SEE ALSO
|
|
<a name="SEE ALSO"></a>
|
|
</h2>
|
|
|
|
|
|
|
|
<p style="margin-left:11%; margin-top: 1em">dnssec-keygen(8),
|
|
dnssec-signzone(8), rndc(8), named.conf(5), zkt-conf(8),
|
|
zkt-keyman(8), zkt-signer(8) <br>
|
|
RFC4641 "DNSSEC Operational Practices" by Miek
|
|
Gieben and Olaf Kolkman, <br>
|
|
DNSSEC HOWTO Tutorial by Olaf Kolkman, RIPE NCC <br>
|
|
(http://www.nlnetlabs.nl/dnssec_howto/)</p>
|
|
<hr>
|
|
</body>
|
|
</html>
|