169783Smsmith<!-- 2223520Sjhb - Copyright (C) 2013 Internet Systems Consortium, Inc. ("ISC") 3223520Sjhb - 469783Smsmith - Permission to use, copy, modify, and/or distribute this software for any 569783Smsmith - purpose with or without fee is hereby granted, provided that the above 669783Smsmith - copyright notice and this permission notice appear in all copies. 769783Smsmith - 869783Smsmith - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 969783Smsmith - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 1069783Smsmith - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 1169783Smsmith - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 1269783Smsmith - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 1369783Smsmith - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 1469783Smsmith - PERFORMANCE OF THIS SOFTWARE. 1569783Smsmith--> 1669783Smsmith 1769783Smsmith<!-- $Id$ --> 1869783Smsmith<html> 1969783Smsmith<head> 2069783Smsmith<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> 2169783Smsmith<title>dnssec-importkey</title> 2269783Smsmith<meta name="generator" content="DocBook XSL Stylesheets V1.78.1"> 2369783Smsmith</head> 2469783Smsmith<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry"> 2569783Smsmith<a name="man.dnssec-importkey"></a><div class="titlepage"></div> 2669783Smsmith<div class="refnamediv"> 2769783Smsmith<h2>Name</h2> 28119418Sobrien<p><span class="application">dnssec-importkey</span> — Import DNSKEY records from external systems so they can be managed.</p> 29119418Sobrien</div> 30119418Sobrien<div class="refsynopsisdiv"> 3169783Smsmith<h2>Synopsis</h2> 32223520Sjhb<div class="cmdsynopsis"><p><code class="command">dnssec-importkey</code> [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">keyname</code>]</p></div> 33223520Sjhb</div> 3469783Smsmith<div class="refsect1"> 3569783Smsmith<a name="idp5321760"></a><h2>DESCRIPTION</h2> 36224069Sjhb<p><span class="command"><strong>dnssec-importkey</strong></span> 37221393Sjhb read a DNSKEY record and generated a .key/.private key pair. 38107546Simp Publication (<code class="option">-P</code>) and deletions (<code class="option">-D</code>) 39224069Sjhb times can be set for the key. 4069783Smsmith </p> 41223520Sjhb</div> 42119285Simp<div class="refsect1"> 43119285Simp<a name="idp5324080"></a><h2>OPTIONS</h2> 4469783Smsmith<div class="variablelist"><dl class="variablelist"> 4569783Smsmith<dt><span class="term">-f <em class="replaceable"><code>filename</code></em></span></dt> 46107172Sjhb<dd><p> 47107172Sjhb Filename to read the key from. 48107172Sjhb </p></dd> 49107172Sjhb<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt> 50107172Sjhb<dd><p> 51119266Simp Sets the directory in which the key files are to reside. 52107172Sjhb </p></dd> 53119266Simp<dt><span class="term">-L <em class="replaceable"><code>ttl</code></em></span></dt> 54107172Sjhb<dd><p> 55107172Sjhb Sets the default TTL to use for this key when it is converted 56107248Sjhb into a DNSKEY RR. If the key is imported into a zone, 57107172Sjhb this is the TTL that will be used for it, unless there was 58107172Sjhb already a DNSKEY RRset in place, in which case the existing TTL 59107172Sjhb would take precedence. importkey the default TTL to 60107172Sjhb <code class="literal">0</code> or <code class="literal">none</code> removes it. 61107172Sjhb </p></dd> 62107172Sjhb<dt><span class="term">-h</span></dt> 63107172Sjhb<dd><p> 64107172Sjhb Emit usage message and exit. 65107172Sjhb </p></dd> 66107172Sjhb<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt> 67107172Sjhb<dd><p> 68107172Sjhb Sets the debugging level. 69107172Sjhb </p></dd> 70107172Sjhb</dl></div> 71107172Sjhb</div> 72107172Sjhb<div class="refsect1"> 73107172Sjhb<a name="idp5336224"></a><h2>TIMING OPTIONS</h2> 74107172Sjhb<p> 75107172Sjhb Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS. 76107172Sjhb If the argument begins with a '+' or '-', it is interpreted as 77107172Sjhb an offset from the present time. For convenience, if such an offset 78107172Sjhb is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi', 79107172Sjhb then the offset is computed in years (defined as 365 24-hour days, 80107172Sjhb ignoring leap years), months (defined as 30 24-hour days), weeks, 81107172Sjhb days, hours, or minutes, respectively. Without a suffix, the offset 82107172Sjhb is computed in seconds. To unset a date, use 'none'. 83107172Sjhb </p> 84107172Sjhb<div class="variablelist"><dl class="variablelist"> 85107172Sjhb<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt> 86107172Sjhb<dd><p> 87107248Sjhb Sets the date on which a key is to be published to the zone. 88107172Sjhb After that date, the key will be included in the zone but will 89107172Sjhb not be used to sign it. 90107172Sjhb </p></dd> 91107248Sjhb<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt> 92107172Sjhb<dd><p> 93107172Sjhb Sets the date on which the key is to be deleted. After that 94107172Sjhb date, the key will no longer be included in the zone. (It 95107248Sjhb may remain in the key repository, however.) 96107172Sjhb </p></dd> 97107172Sjhb</dl></div> 98107172Sjhb</div> 99107248Sjhb<div class="refsect1"> 100107172Sjhb<a name="idp5342816"></a><h2>SEE ALSO</h2> 101107172Sjhb<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>, 102107172Sjhb <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>, 103107172Sjhb <em class="citetitle">BIND 9 Administrator Reference Manual</em>, 104107172Sjhb <em class="citetitle">RFC 5011</em>. 105107172Sjhb </p> 106107172Sjhb</div> 107107172Sjhb<div class="refsect1"> 108107172Sjhb<a name="idp5346704"></a><h2>AUTHOR</h2> 109107172Sjhb<p><span class="corpauthor">Internet Systems Consortium</span> 110107172Sjhb </p> 111107172Sjhb</div> 112107172Sjhb</div></body> 113107172Sjhb</html> 114215820Sjhb