1d4d008fc9
Replace :manpage: with :iscman: to generate internal hyperlinks. That
way reader can use links even when offline, and jumps to man pages
for the same version.
Formerly HTML version of man pages did not have links in See Also
section because :manpage: role in Sphinx can generate only external
hyperlinks - and we do not have that enabled.
Enabling the Sphinx :manpage: linking could reliably create hyperlinks
only to external URLs, but that would take users to another version
of docs.
Generated by:
find bin -name '*.rst' | xargs sed -i -e 's/:manpage:`\([^(]\+\)(\([0-9]\))`/:iscman:`\1(\2) <\1>`/g'
+ hand-edit to revert change for mmencode reference which is
not provided in our source tree.
79 lines
2.1 KiB
ReStructuredText
79 lines
2.1 KiB
ReStructuredText
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
..
|
|
.. SPDX-License-Identifier: MPL-2.0
|
|
..
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
..
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
.. information regarding copyright ownership.
|
|
|
|
.. highlight: console
|
|
|
|
.. iscman:: dnssec-revoke
|
|
.. program:: dnssec-revoke
|
|
.. _man_dnssec-revoke:
|
|
|
|
dnssec-revoke - set the REVOKED bit on a DNSSEC key
|
|
---------------------------------------------------
|
|
|
|
Synopsis
|
|
~~~~~~~~
|
|
|
|
:program:`dnssec-revoke` [**-hr**] [**-v** level] [**-V**] [**-K** directory] [**-E** engine] [**-f**] [**-R**] {keyfile}
|
|
|
|
Description
|
|
~~~~~~~~~~~
|
|
|
|
:program:`dnssec-revoke` reads a DNSSEC key file, sets the REVOKED bit on the
|
|
key as defined in :rfc:`5011`, and creates a new pair of key files
|
|
containing the now-revoked key.
|
|
|
|
Options
|
|
~~~~~~~
|
|
|
|
.. option:: -h
|
|
|
|
This option emits a usage message and exits.
|
|
|
|
.. option:: -K directory
|
|
|
|
This option sets the directory in which the key files are to reside.
|
|
|
|
.. option:: -r
|
|
|
|
This option indicates to remove the original keyset files after writing the new keyset files.
|
|
|
|
.. option:: -v level
|
|
|
|
This option sets the debugging level.
|
|
|
|
.. option:: -V
|
|
|
|
This option prints version information.
|
|
|
|
.. option:: -E engine
|
|
|
|
This option specifies the cryptographic hardware to use, when applicable.
|
|
|
|
When BIND 9 is built with OpenSSL, this needs to be set to the OpenSSL
|
|
engine identifier that drives the cryptographic accelerator or
|
|
hardware service module (usually ``pkcs11``).
|
|
|
|
.. option:: -f
|
|
|
|
This option indicates a forced overwrite and causes :program:`dnssec-revoke` to write the new key pair,
|
|
even if a file already exists matching the algorithm and key ID of
|
|
the revoked key.
|
|
|
|
.. option:: -R
|
|
|
|
This option prints the key tag of the key with the REVOKE bit set, but does not
|
|
revoke the key.
|
|
|
|
See Also
|
|
~~~~~~~~
|
|
|
|
:iscman:`dnssec-keygen(8) <dnssec-keygen>`, BIND 9 Administrator Reference Manual, :rfc:`5011`.
|