named-rrchecker

GNU make is required to build the export libraries (other part of BIND 9 can still be built with other types of make). In the reminder of this document, "make" means GNU make. Note that @@ -657,7 +657,7 @@

$ ./configure --enable-exportlib [other flags] $ make @@ -672,7 +672,7 @@ $ make

-Installation

+Installation

 $ cd lib/export
 $ make install
@@ -694,7 +694,7 @@ $ make install
 
 
 
-Known Defects/Restrictions
+Known Defects/Restrictions
 
 Currently, win32 is not supported for the export
       library. (Normal BIND 9 application can be built as
@@ -734,7 +734,7 @@ $ make
 
 
 
-The dns.conf File
+The dns.conf File
 The IRS library supports an "advanced" configuration file
   related to the DNS library for configuration parameters that
   would be beyond the capability of the
@@ -752,14 +752,14 @@ $ make
 
 

 
-Sample Applications
+Sample Applications
 Some sample application programs using this API are
   provided for reference. The following is a brief description of
   these applications.
   
 
 
-sample: a simple stub resolver utility
+sample: a simple stub resolver utility
 
   It sends a query of a given name (of a given optional RR type) to a
   specified recursive server, and prints the result as a list of
@@ -823,7 +823,7 @@ $ make
 
 

 
-sample-async: a simple stub resolver, working asynchronously
+sample-async: a simple stub resolver, working asynchronously
 
   Similar to "sample", but accepts a list
   of (query) domain names as a separate file and resolves the names
@@ -864,7 +864,7 @@ $ make
 
 

 
-sample-request: a simple DNS transaction client
+sample-request: a simple DNS transaction client
 
   It sends a query to a specified server, and
   prints the response with minimal processing. It doesn't act as a
@@ -905,7 +905,7 @@ $ make
 
 

 
-sample-gai: getaddrinfo() and getnameinfo() test code
+sample-gai: getaddrinfo() and getnameinfo() test code
 
   This is a test program
   to check getaddrinfo() and getnameinfo() behavior. It takes a
@@ -922,7 +922,7 @@ $ make
 
 

 
-sample-update: a simple dynamic update client program
+sample-update: a simple dynamic update client program
 
   It accepts a single update command as a
   command-line argument, sends an update request message to the
@@ -1017,7 +1017,7 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
 
 

 
-nsprobe: domain/name server checker in terms of RFC 4074
+nsprobe: domain/name server checker in terms of RFC 4074

 
   It checks a set
   of domains to see the name servers of the domains behave
@@ -1074,7 +1074,7 @@ $ sample-update -a sample-update -k Kxxx.+nnn+mm
 
 

 
-Library References
+Library References

 As of this writing, there is no formal "manual" of the
   libraries, except this document, header files (some of them
   provide pretty detailed explanations), and sample application
diff --git a/doc/arm/Bv9ARM.ch10.html b/doc/arm/Bv9ARM.ch10.html
index 484c0615ba3..137c53b10c9 100644
--- a/doc/arm/Bv9ARM.ch10.html
+++ b/doc/arm/Bv9ARM.ch10.html
@@ -97,6 +97,9 @@
 named-journalprint — print zone journal in human-readable form
 
 

+named-rrchecker — A syntax checker for individual DNS resource records
+
+
 nsupdate — Dynamic DNS update utility
 
 
@@ -125,6 +128,7 @@
 
 
 
+<xi:include></xi:include>
 
 
 
diff --git a/doc/arm/Bv9ARM.html b/doc/arm/Bv9ARM.html
index 72a13ab1d05..412219883c7 100644
--- a/doc/arm/Bv9ARM.html
+++ b/doc/arm/Bv9ARM.html
@@ -113,39 +113,39 @@
 
 DNSSEC, Dynamic Zones, and Automatic Signing
 
-Converting from insecure to secure
-Dynamic DNS update method
-Fully automatic zone signing
-Private-type records
-DNSKEY rollovers
-Dynamic DNS update method
-Automatic key rollovers
-NSEC3PARAM rollovers via UPDATE
-Converting from NSEC to NSEC3
-Converting from NSEC3 to NSEC
-Converting from secure to insecure
-Periodic re-signing
-NSEC3 and OPTOUT
+Converting from insecure to secure
+Dynamic DNS update method
+Fully automatic zone signing
+Private-type records
+DNSKEY rollovers
+Dynamic DNS update method
+Automatic key rollovers
+NSEC3PARAM rollovers via UPDATE
+Converting from NSEC to NSEC3
+Converting from NSEC3 to NSEC
+Converting from secure to insecure
+Periodic re-signing
+NSEC3 and OPTOUT
 
 Dynamic Trust Anchor Management
 
-Validating Resolver
-Authoritative Server
+Validating Resolver
+Authoritative Server
 
 PKCS#11 (Cryptoki) support
 
-Prerequisites
-Native PKCS#11
-OpenSSL-based PKCS#11
-PKCS#11 Tools
-Using the HSM
-Specifying the engine on the command line
-Running named with automatic zone re-signing
+Prerequisites
+Native PKCS#11
+OpenSSL-based PKCS#11
+PKCS#11 Tools
+Using the HSM
+Specifying the engine on the command line
+Running named with automatic zone re-signing
 
 DLZ (Dynamically Loadable Zones)
 
-Configuring DLZ
-Sample DLZ Driver
+Configuring DLZ
+Sample DLZ Driver
 
 IPv6 Support in BIND 9
 
@@ -251,13 +251,13 @@
 
 BIND 9 DNS Library Support
 
-Prerequisite
-Compilation
-Installation
-Known Defects/Restrictions
-The dns.conf File
-Sample Applications
-Library References
+Prerequisite
+Compilation
+Installation
+Known Defects/Restrictions
+The dns.conf File
+Sample Applications
+Library References
 
 
 I. Manual pages
@@ -311,6 +311,9 @@
 named-journalprint — print zone journal in human-readable form
 
 
+named-rrchecker — A syntax checker for individual DNS resource records
+
+
 nsupdate — Dynamic DNS update utility
 
 
diff --git a/doc/arm/man.arpaname.html b/doc/arm/man.arpaname.html
index bc2193171f0..38fa0b8fe3e 100644
--- a/doc/arm/man.arpaname.html
+++ b/doc/arm/man.arpaname.html
@@ -50,20 +50,20 @@
 arpaname  {ipaddress ...}
 
 
-DESCRIPTION
+DESCRIPTION
 
       arpaname translates IP addresses (IPv4 and
       IPv6) to the corresponding IN-ADDR.ARPA or IP6.ARPA names.
     
 
 
-SEE ALSO
+SEE ALSO
 
       BIND 9 Administrator Reference Manual.
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.ddns-confgen.html b/doc/arm/man.ddns-confgen.html
index 27d6e8be9a7..681a848bf0b 100644
--- a/doc/arm/man.ddns-confgen.html
+++ b/doc/arm/man.ddns-confgen.html
@@ -50,7 +50,7 @@
 ddns-confgen  [-a algorithm] [-h] [-k keyname] [-r randomfile] [ -s name  |   -z zone ] [-q] [name]
 
 
-DESCRIPTION
+DESCRIPTION
 ddns-confgen
       generates a key for use by nsupdate
       and named.  It simplifies configuration
@@ -77,7 +77,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -a algorithm
 
@@ -144,7 +144,7 @@
 
 
 
-SEE ALSO
+SEE ALSO
 nsupdate(1),
       named.conf(5),
       named(8),
@@ -152,7 +152,7 @@
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.delve.html b/doc/arm/man.delve.html
index 8e3141ba71d..5bec93d22a2 100644
--- a/doc/arm/man.delve.html
+++ b/doc/arm/man.delve.html
@@ -52,7 +52,7 @@
 delve  [queryopt...] [query...]
 
 
-DESCRIPTION
+DESCRIPTION
 delve
       (Domain Entity Lookup & Validation Engine) is a tool for sending
       DNS queries and validating the results, using the the same internal
@@ -95,7 +95,7 @@
     
 
 
-SIMPLE USAGE
+SIMPLE USAGE
 
       A typical invocation of delve looks like:
       
@@ -150,7 +150,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -a
 
@@ -265,7 +265,7 @@
 
 
 
-QUERY OPTIONS
+QUERY OPTIONS
 delve
       provides a number of query options which affect the way results are
       displayed, and in some cases the way lookups are performed.
@@ -445,12 +445,12 @@
     
 
 
-FILES
+FILES
 /etc/bind.keys
 /etc/resolv.conf
 
 
-SEE ALSO
+SEE ALSO
 dig(1),
       named(8),
       RFC4034,
diff --git a/doc/arm/man.dig.html b/doc/arm/man.dig.html
index 0812960b144..72627fb0638 100644
--- a/doc/arm/man.dig.html
+++ b/doc/arm/man.dig.html
@@ -52,7 +52,7 @@
 
dig  [global-queryopt...] [query...]
 
 
-DESCRIPTION
+DESCRIPTION
 dig
       (domain information groper) is a flexible tool
       for interrogating DNS name servers.  It performs DNS lookups and
@@ -99,7 +99,7 @@
     
 
 
-SIMPLE USAGE
+SIMPLE USAGE
 
       A typical invocation of dig looks like:
       
@@ -152,7 +152,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
       The -b option sets the source IP address of the query
       to address.  This must be a valid
@@ -256,7 +256,7 @@
     
 
 
-QUERY OPTIONS
+QUERY OPTIONS
 dig
       provides a number of query options which affect
       the way in which lookups are made and the results displayed.  Some of
@@ -641,7 +641,7 @@
     
 
 
-MULTIPLE QUERIES
+MULTIPLE QUERIES
 
       The BIND 9 implementation of dig 
       supports
@@ -687,7 +687,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
     
 
 
-IDN SUPPORT
+IDN SUPPORT
 
       If dig has been built with IDN (internationalized
       domain name) support, it can accept and display non-ASCII domain names.
@@ -701,14 +701,14 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
     
 
 
-FILES
+FILES
 /etc/resolv.conf
     
 ${HOME}/.digrc
     
 
 
-SEE ALSO
+SEE ALSO
 host(1),
       named(8),
       dnssec-keygen(8),
@@ -716,7 +716,7 @@ dig +qr www.isc.org any -x 127.0.0.1 isc.org ns +noqr
     
 
 
-BUGS
+BUGS
 
       There are probably too many query options.
     
diff --git a/doc/arm/man.dnssec-checkds.html b/doc/arm/man.dnssec-checkds.html
index dd680d151b5..14885c8faa0 100644
--- a/doc/arm/man.dnssec-checkds.html
+++ b/doc/arm/man.dnssec-checkds.html
@@ -51,7 +51,7 @@
 dnssec-dsfromkey  [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone}
 
 
-DESCRIPTION
+DESCRIPTION
 dnssec-checkds
       verifies the correctness of Delegation Signer (DS) or DNSSEC
       Lookaside Validation (DLV) resource records for keys in a specified
@@ -59,7 +59,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -f file
 
@@ -88,14 +88,14 @@
 
 
 
-SEE ALSO
+SEE ALSO
 dnssec-dsfromkey(8),
       dnssec-keygen(8),
       dnssec-signzone(8),
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.dnssec-coverage.html b/doc/arm/man.dnssec-coverage.html
index 415906bb782..226a15bc2a0 100644
--- a/doc/arm/man.dnssec-coverage.html
+++ b/doc/arm/man.dnssec-coverage.html
@@ -50,7 +50,7 @@
 dnssec-coverage  [-K directory] [-l length] [-f file] [-d DNSKEY TTL] [-m max TTL] [-r interval] [-c compilezone path] [-k] [-z] [zone]
 
 
-DESCRIPTION
+DESCRIPTION
 dnssec-coverage
       verifies that the DNSSEC keys for a given zone or a set of zones
       have timing metadata set properly to ensure no future lapses in DNSSEC
@@ -78,7 +78,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -K directory
 
@@ -192,7 +192,7 @@
 
 
 
-SEE ALSO
+SEE ALSO
 
       dnssec-checkds(8),
       dnssec-dsfromkey(8),
@@ -201,7 +201,7 @@
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.dnssec-dsfromkey.html b/doc/arm/man.dnssec-dsfromkey.html
index 63f364a1490..a8a5d5b639d 100644
--- a/doc/arm/man.dnssec-dsfromkey.html
+++ b/doc/arm/man.dnssec-dsfromkey.html
@@ -51,14 +51,14 @@
 dnssec-dsfromkey  {-s} [-1] [-2] [-a alg] [-K directory] [-l domain] [-s] [-c class] [-T TTL] [-f file] [-A] [-v level] {dnsname}
 
 
-DESCRIPTION
+DESCRIPTION
 dnssec-dsfromkey
       outputs the Delegation Signer (DS) resource record (RR), as defined in
       RFC 3658 and RFC 4509, for the given key(s).
     
 
 
-OPTIONS
+OPTIONS
 
 -1
 
@@ -135,7 +135,7 @@
 
 
 
-EXAMPLE
+EXAMPLE
 
       To build the SHA-256 DS RR from the
       Kexample.com.+003+26160
@@ -150,7 +150,7 @@
     
 
 
-FILES
+FILES
 
       The keyfile can be designed by the key identification
       Knnnn.+aaa+iiiii or the full file name
@@ -164,13 +164,13 @@
     
 
 
-CAVEAT
+CAVEAT
 
       A keyfile error can give a "file not found" even if the file exists.
     
 
 
-SEE ALSO
+SEE ALSO
 dnssec-keygen(8),
       dnssec-signzone(8),
       BIND 9 Administrator Reference Manual,
@@ -180,7 +180,7 @@
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.dnssec-keyfromlabel.html b/doc/arm/man.dnssec-keyfromlabel.html
index 7af9738904d..24e2d64c274 100644
--- a/doc/arm/man.dnssec-keyfromlabel.html
+++ b/doc/arm/man.dnssec-keyfromlabel.html
@@ -50,7 +50,7 @@
 dnssec-keyfromlabel  {-l label} [-3] [-a algorithm] [-A date/offset] [-c class] [-D date/offset] [-E engine] [-f flag] [-G] [-I date/offset] [-k] [-K directory] [-L ttl] [-n nametype] [-P date/offset] [-p protocol] [-R date/offset] [-t type] [-v level] [-y] {name}
 
 
-DESCRIPTION
+DESCRIPTION
 dnssec-keyfromlabel
       gets keys with the given label from a crypto hardware and builds
       key files for DNSSEC (Secure DNS), as defined in RFC 2535
@@ -63,7 +63,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -a algorithm
 
@@ -226,7 +226,7 @@
 
 
 
-TIMING OPTIONS
+TIMING OPTIONS
 
       Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
       If the argument begins with a '+' or '-', it is interpreted as
@@ -274,7 +274,7 @@
 
 
 
-GENERATED KEY FILES
+GENERATED KEY FILES
 
       When dnssec-keyfromlabel completes
       successfully,
@@ -313,7 +313,7 @@
     
 
 
-SEE ALSO
+SEE ALSO
 dnssec-keygen(8),
       dnssec-signzone(8),
       BIND 9 Administrator Reference Manual,
@@ -322,7 +322,7 @@
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.dnssec-keygen.html b/doc/arm/man.dnssec-keygen.html
index fa4a1b49f9a..68662dceaa9 100644
--- a/doc/arm/man.dnssec-keygen.html
+++ b/doc/arm/man.dnssec-keygen.html
@@ -50,7 +50,7 @@
 dnssec-keygen  [-a algorithm] [-b keysize] [-n nametype] [-3] [-A date/offset] [-C] [-c class] [-D date/offset] [-E engine] [-f flag] [-G] [-g generator] [-h] [-I date/offset] [-i interval] [-K directory] [-L ttl] [-k] [-P date/offset] [-p protocol] [-q] [-R date/offset] [-r randomdev] [-S key] [-s strength] [-t type] [-v level] [-z] {name}
 
 
-DESCRIPTION
+DESCRIPTION
 dnssec-keygen
       generates keys for DNSSEC (Secure DNS), as defined in RFC 2535
       and RFC 4034.  It can also generate keys for use with
@@ -64,7 +64,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -a algorithm
 
@@ -281,7 +281,7 @@
 
 
 
-TIMING OPTIONS
+TIMING OPTIONS
 
       Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
       If the argument begins with a '+' or '-', it is interpreted as
@@ -355,7 +355,7 @@
 
 
 
-GENERATED KEYS
+GENERATED KEYS
 
       When dnssec-keygen completes
       successfully,
@@ -401,7 +401,7 @@
     
 
 
-EXAMPLE
+EXAMPLE
 
       To generate a 768-bit DSA key for the domain
       example.com, the following command would be
@@ -422,7 +422,7 @@
     
 
 
-SEE ALSO
+SEE ALSO
 dnssec-signzone(8),
       BIND 9 Administrator Reference Manual,
       RFC 2539,
@@ -431,7 +431,7 @@
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.dnssec-revoke.html b/doc/arm/man.dnssec-revoke.html
index 1759226843b..bedf6fd349e 100644
--- a/doc/arm/man.dnssec-revoke.html
+++ b/doc/arm/man.dnssec-revoke.html
@@ -50,7 +50,7 @@
 dnssec-revoke  [-hr] [-v level] [-K directory] [-E engine] [-f] [-R] {keyfile}
 
 
-DESCRIPTION
+DESCRIPTION
 dnssec-revoke
       reads a DNSSEC key file, sets the REVOKED bit on the key as defined
       in RFC 5011, and creates a new pair of key files containing the
@@ -58,7 +58,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -h
 
@@ -105,14 +105,14 @@
 
 
 
-SEE ALSO
+SEE ALSO
 dnssec-keygen(8),
       BIND 9 Administrator Reference Manual,
       RFC 5011.
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.dnssec-settime.html b/doc/arm/man.dnssec-settime.html
index b764ecbb3fb..18bcd9f69dc 100644
--- a/doc/arm/man.dnssec-settime.html
+++ b/doc/arm/man.dnssec-settime.html
@@ -50,7 +50,7 @@
 dnssec-settime  [-f] [-K directory] [-L ttl] [-P date/offset] [-A date/offset] [-R date/offset] [-I date/offset] [-D date/offset] [-h] [-v level] [-E engine] {keyfile}
 
 
-DESCRIPTION
+DESCRIPTION
 dnssec-settime
       reads a DNSSEC private key file and sets the key timing metadata
       as specified by the -P, -A,
@@ -76,7 +76,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -f
 
@@ -127,7 +127,7 @@
 
 
 
-TIMING OPTIONS
+TIMING OPTIONS
 
       Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
       If the argument begins with a '+' or '-', it is interpreted as
@@ -206,7 +206,7 @@
 
 
 
-PRINTING OPTIONS
+PRINTING OPTIONS
 
       dnssec-settime can also be used to print the
       timing metadata associated with a key.
@@ -232,7 +232,7 @@
 
 
 
-SEE ALSO
+SEE ALSO
 dnssec-keygen(8),
       dnssec-signzone(8),
       BIND 9 Administrator Reference Manual,
@@ -240,7 +240,7 @@
     
 
 
-AUTHOR
+AUTHOR
 Internet Systems Consortium
     
 
diff --git a/doc/arm/man.dnssec-signzone.html b/doc/arm/man.dnssec-signzone.html
index 81ec89a5b54..8603775501d 100644
--- a/doc/arm/man.dnssec-signzone.html
+++ b/doc/arm/man.dnssec-signzone.html
@@ -50,7 +50,7 @@
 dnssec-signzone  [-a] [-c class] [-d directory] [-D] [-E engine] [-e end-time] [-f output-file] [-g] [-h] [-K directory] [-k key] [-L serial] [-l domain] [-M domain] [-i interval] [-I input-format] [-j jitter] [-N soa-serial-format] [-o origin] [-O output-format] [-P] [-p] [-R] [-r randomdev] [-S] [-s start-time] [-T ttl] [-t] [-u] [-v level] [-X extended end-time] [-x] [-z] [-3 salt] [-H iterations] [-A] {zonefile} [key...]
 
 
-DESCRIPTION
+DESCRIPTION
 dnssec-signzone
       signs a zone.  It generates
       NSEC and RRSIG records and produces a signed version of the
@@ -61,7 +61,7 @@
     
 
 
-OPTIONS
+OPTIONS
 
 -a
 
@@ -505,7 +505,7 @@
 
 
 
-EXAMPLE
+EXAMPLE
 
       The following command signs the example.com
       zone with the DSA key generated by dnssec-keygen
@@ -535,14 +535,14 @@ db.example.com.signed
 %

-SEE ALSO +SEE ALSO dnssec-keygen(8), BIND 9 Administrator Reference Manual, RFC 4033, RFC 4641. -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.dnssec-verify.html b/doc/arm/man.dnssec-verify.html index b7f4e5a6e5c..0a2a251dfe9 100644 --- a/doc/arm/man.dnssec-verify.html +++ b/doc/arm/man.dnssec-verify.html @@ -50,7 +50,7 @@ dnssec-verify [-c class] [-E engine] [-I input-format] [-o origin] [-v level] [-x] [-z] {zonefile} -DESCRIPTION +DESCRIPTION dnssec-verify verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the zone, and that the NSEC / NSEC3 @@ -58,7 +58,7 @@ -OPTIONS +OPTIONS -c class @@ -134,7 +134,7 @@ -SEE ALSO +SEE ALSO dnssec-signzone(8), BIND 9 Administrator Reference Manual, @@ -142,7 +142,7 @@ -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.genrandom.html b/doc/arm/man.genrandom.html index fda605e9ef5..1d03798b31b 100644 --- a/doc/arm/man.genrandom.html +++ b/doc/arm/man.genrandom.html @@ -50,7 +50,7 @@ genrandom [-n number] {size} {filename} -DESCRIPTION +DESCRIPTION genrandom generates a file or a set of files containing a specified quantity @@ -59,7 +59,7 @@ -ARGUMENTS +ARGUMENTS -n number @@ -77,14 +77,14 @@ -SEE ALSO +SEE ALSO rand(3), arc4random(3) -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.host.html b/doc/arm/man.host.html index ab68009d93e..8e278e6361e 100644 --- a/doc/arm/man.host.html +++ b/doc/arm/man.host.html @@ -50,7 +50,7 @@ host [-aCdlnrsTwv] [-c class] [-N ndots] [-R number] [-t type] [-W wait] [-m flag] [-4] [-6] {name} [server] -DESCRIPTION +DESCRIPTION host is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses and vice versa. @@ -202,7 +202,7 @@ -IDN SUPPORT +IDN SUPPORT If host has been built with IDN (internationalized domain name) support, it can accept and display non-ASCII domain names. @@ -216,12 +216,12 @@ -FILES +FILES /etc/resolv.conf -SEE ALSO +SEE ALSO dig(1), named(8). diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 7e6339695ec..007547acd9e 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -50,7 +50,7 @@ isc-hmac-fixup {algorithm} {secret} -DESCRIPTION +DESCRIPTION Versions of BIND 9 up to and including BIND 9.6 had a bug causing HMAC-SHA* TSIG keys which were longer than the digest length of the @@ -76,7 +76,7 @@ -SECURITY CONSIDERATIONS +SECURITY CONSIDERATIONS Secrets that have been converted by isc-hmac-fixup are shortened, but as this is how the HMAC protocol works in @@ -87,14 +87,14 @@ -SEE ALSO +SEE ALSO BIND 9 Administrator Reference Manual, RFC 2104. -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.named-checkconf.html b/doc/arm/man.named-checkconf.html index 574cd87dc6b..2236c01609f 100644 --- a/doc/arm/man.named-checkconf.html +++ b/doc/arm/man.named-checkconf.html @@ -50,7 +50,7 @@ named-checkconf [-h] [-v] [-j] [-t directory] {filename} [-p] [-x] [-z] -DESCRIPTION +DESCRIPTION named-checkconf checks the syntax, but not the semantics, of a named configuration file. The file is parsed @@ -70,7 +70,7 @@ -OPTIONS +OPTIONS -h @@ -119,21 +119,21 @@ -RETURN VALUES +RETURN VALUES named-checkconf returns an exit status of 1 if errors were detected and 0 otherwise. -SEE ALSO +SEE ALSO named(8), named-checkzone(8), BIND 9 Administrator Reference Manual. -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.named-checkzone.html b/doc/arm/man.named-checkzone.html index 876ecd20d4d..90a1d455e9b 100644 --- a/doc/arm/man.named-checkzone.html +++ b/doc/arm/man.named-checkzone.html @@ -51,7 +51,7 @@ named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-J filename] [-i mode] [-k mode] [-m mode] [-n mode] [-l ttl] [-L serial] [-r mode] [-s style] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {-o filename} {zonename} {filename} -DESCRIPTION +DESCRIPTION named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does when loading a @@ -71,7 +71,7 @@ -OPTIONS +OPTIONS -d @@ -305,14 +305,14 @@ -RETURN VALUES +RETURN VALUES named-checkzone returns an exit status of 1 if errors were detected and 0 otherwise. -SEE ALSO +SEE ALSO named(8), named-checkconf(8), RFC 1035, @@ -320,7 +320,7 @@ -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.named-journalprint.html b/doc/arm/man.named-journalprint.html index 085174c1e22..87ff366589d 100644 --- a/doc/arm/man.named-journalprint.html +++ b/doc/arm/man.named-journalprint.html @@ -23,7 +23,7 @@ - + @@ -33,7 +33,7 @@ Prev Manual pages - Next + Next @@ -50,7 +50,7 @@ named-journalprint {journal} -DESCRIPTION +DESCRIPTION named-journalprint prints the contents of a zone journal file in a human-readable @@ -76,7 +76,7 @@ -SEE ALSO +SEE ALSO named(8), nsupdate(8), @@ -84,7 +84,7 @@ -AUTHOR +AUTHOR Internet Systems Consortium @@ -96,14 +96,14 @@ Prev Up - Next + Next named Home - nsupdate + named-rrchecker diff --git a/doc/arm/man.named-rrchecker.html b/doc/arm/man.named-rrchecker.html new file mode 100644 index 00000000000..0d0d764953d --- /dev/null +++ b/doc/arm/man.named-rrchecker.html @@ -0,0 +1,109 @@ + + + + + +named-rrchecker + + + + + + + + + + + + + + + +named-rrchecker +Prev Manual pages Next + + + + + + +Name +named-rrchecker — A syntax checker for individual DNS resource records + + +Synopsis +named-rrchecker [-h] [-o origin] [-p] [-u] [-C] [-T] [-P] + + +DESCRIPTION +named-rrchecker + read a individual DNS resource record from standard input and checks if it + is syntactically correct. + + + The -h prints out the help menu. + + + The -o origin + option specifies a origin to be used when interpreting the record. + + + The -p prints out the resulting record in canonical + form. If there is no canonical form defined then the record will be + printed in unknown record format. + + + The -u prints out the resulting record in unknown record + form. + + + The -C, -T and -P + print out the known class, standard type and private type mnemonics + respectively. + + + +SEE ALSO + + RFC 1034, + RFC 1035, + named(8) + + + + + + + + + + + + + + + + + +Prev Up Next + +named-journalprint Home nsupdate + + + + diff --git a/doc/arm/man.named.html b/doc/arm/man.named.html index 56605098922..caff9dea209 100644 --- a/doc/arm/man.named.html +++ b/doc/arm/man.named.html @@ -50,7 +50,7 @@ named [-4] [-6] [-c config-file] [-d debug-level] [-D string] [-E engine-name] [-f] [-g] [-m flag] [-n #cpus] [-p port] [-s] [-S #max-socks] [-t directory] [-U #listeners] [-u user] [-v] [-V] [-x cache-file] -DESCRIPTION +DESCRIPTION named is a Domain Name System (DNS) server, part of the BIND 9 distribution from ISC. For more @@ -65,7 +65,7 @@ -OPTIONS +OPTIONS -4 @@ -276,7 +276,7 @@ -SIGNALS +SIGNALS In routine operation, signals should not be used to control the nameserver; rndc should be used @@ -297,7 +297,7 @@ -CONFIGURATION +CONFIGURATION The named configuration file is too complex to describe in detail here. A complete description is provided @@ -314,7 +314,7 @@ -FILES +FILES /etc/named.conf @@ -327,7 +327,7 @@ -SEE ALSO +SEE ALSO RFC 1033, RFC 1034, RFC 1035, @@ -340,7 +340,7 @@ -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.nsec3hash.html b/doc/arm/man.nsec3hash.html index a0047b7dd49..3991aec04ca 100644 --- a/doc/arm/man.nsec3hash.html +++ b/doc/arm/man.nsec3hash.html @@ -48,7 +48,7 @@ nsec3hash {salt} {algorithm} {iterations} {domain} -DESCRIPTION +DESCRIPTION nsec3hash generates an NSEC3 hash based on a set of NSEC3 parameters. This can be used to check the validity @@ -56,7 +56,7 @@ -ARGUMENTS +ARGUMENTS salt @@ -80,14 +80,14 @@ -SEE ALSO +SEE ALSO BIND 9 Administrator Reference Manual, RFC 5155. -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.nsupdate.html b/doc/arm/man.nsupdate.html index e5e5bf2530d..a9688f74f35 100644 --- a/doc/arm/man.nsupdate.html +++ b/doc/arm/man.nsupdate.html @@ -22,7 +22,7 @@ - + @@ -31,7 +31,7 @@ nsupdate -Prev +Prev Manual pages Next @@ -50,7 +50,7 @@ nsupdate [-d] [-D] [[-g] | [-o] | [-l] | [-y [hmac:]keyname:secret] | [-k keyfile]] [-t timeout] [-u udptimeout] [-r udpretries] [-R randomdev] [-v] [-T] [-P] [filename] -DESCRIPTION +DESCRIPTION nsupdate is used to submit Dynamic DNS Update requests as defined in RFC 2136 to a name server. @@ -226,7 +226,7 @@ -INPUT FORMAT +INPUT FORMAT nsupdate reads input from filename @@ -514,7 +514,7 @@ -EXAMPLES +EXAMPLES The examples below show how nsupdate @@ -568,7 +568,7 @@ -FILES +FILES /etc/resolv.conf @@ -591,7 +591,7 @@ -SEE ALSO +SEE ALSO RFC 2136, RFC 3007, @@ -606,7 +606,7 @@ -BUGS +BUGS The TSIG key is redundantly stored in two separate files. This is a consequence of nsupdate using the DST library @@ -620,14 +620,14 @@ +Prev +named-rrchecker diff --git a/doc/arm/man.rndc-confgen.html b/doc/arm/man.rndc-confgen.html index 05b06429020..9b5c7917959 100644 --- a/doc/arm/man.rndc-confgen.html +++ b/doc/arm/man.rndc-confgen.html @@ -50,7 +50,7 @@ rndc-confgen [-a] [-A algorithm] [-b keysize] [-c keyfile] [-h] [-k keyname] [-p port] [-r randomfile] [-s address] [-t chrootdir] [-u user] -DESCRIPTION +DESCRIPTION rndc-confgen generates configuration files for rndc. It can be used as a @@ -66,7 +66,7 @@ -OPTIONS +OPTIONS -a @@ -180,7 +180,7 @@ -EXAMPLES +EXAMPLES To allow rndc to be used with no manual configuration, run @@ -197,7 +197,7 @@ -SEE ALSO +SEE ALSO rndc(8), rndc.conf(5), named(8), @@ -205,7 +205,7 @@ -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.rndc.conf.html b/doc/arm/man.rndc.conf.html index ad47ef78e12..e499d840d33 100644 --- a/doc/arm/man.rndc.conf.html +++ b/doc/arm/man.rndc.conf.html @@ -50,7 +50,7 @@ rndc.conf -DESCRIPTION +DESCRIPTION rndc.conf is the configuration file for rndc, the BIND 9 name server control utility. This file has a similar structure and syntax to @@ -136,7 +136,7 @@ -EXAMPLE +EXAMPLE options { default-server localhost; @@ -210,7 +210,7 @@ -NAME SERVER CONFIGURATION +NAME SERVER CONFIGURATION The name server must be configured to accept rndc connections and to recognize the key specified in the rndc.conf @@ -220,7 +220,7 @@ -SEE ALSO +SEE ALSO rndc(8), rndc-confgen(8), mmencode(1), @@ -228,7 +228,7 @@ -AUTHOR +AUTHOR Internet Systems Consortium diff --git a/doc/arm/man.rndc.html b/doc/arm/man.rndc.html index 511bf2ecfed..dc6154ef7cc 100644 --- a/doc/arm/man.rndc.html +++ b/doc/arm/man.rndc.html @@ -50,7 +50,7 @@ rndc [-b source-address] [-c config-file] [-k key-file] [-s server] [-p port] [-V] [-y key_id] {command} -DESCRIPTION +DESCRIPTION rndc controls the operation of a name server. It supersedes the ndc utility @@ -81,7 +81,7 @@ -OPTIONS +OPTIONS -b source-address @@ -147,7 +147,7 @@ -COMMANDS +COMMANDS A list of commands supported by rndc can be seen by running rndc without arguments. @@ -530,7 +530,7 @@ -LIMITATIONS +LIMITATIONS There is currently no way to provide the shared secret for a key_id without using the configuration file. @@ -540,7 +540,7 @@ -SEE ALSO +SEE ALSO rndc.conf(5), rndc-confgen(8), named(8), @@ -550,7 +550,7 @@ -AUTHOR +AUTHOR Internet Systems Consortium -Prev Up Next -named-journalprint Home rndc

-Converting from insecure to secure

-Dynamic DNS update method

-Fully automatic zone signing

-Private-type records

-DNSKEY rollovers

-Dynamic DNS update method

-Automatic key rollovers

-NSEC3PARAM rollovers via UPDATE

-Converting from NSEC to NSEC3

-Converting from NSEC3 to NSEC

-Converting from secure to insecure

-Periodic re-signing

-NSEC3 and OPTOUT

-Validating Resolver

-Authoritative Server

-Prerequisites

-Native PKCS#11

-OpenSSL-based PKCS#11

-Patching OpenSSL

-Building OpenSSL for the AEP Keyper on Linux

-Building OpenSSL for the SCA 6000 on Solaris

-Building OpenSSL for SoftHSM

-Configuring BIND 9 for Linux with the AEP Keyper

-Configuring BIND 9 for Solaris with the SCA 6000

-Configuring BIND 9 for SoftHSM

-PKCS#11 Tools

-Using the HSM

-Specifying the engine on the command line

-Running named with automatic zone re-signing

-Configuring DLZ

-Sample DLZ Driver

-Prerequisite

-Compilation

-Installation

-Known Defects/Restrictions

-The dns.conf File

-Sample Applications

-sample: a simple stub resolver utility

-sample-async: a simple stub resolver, working asynchronously

-sample-request: a simple DNS transaction client

-sample-gai: getaddrinfo() and getnameinfo() test code

-sample-update: a simple dynamic update client program

-nsprobe: domain/name server checker in terms of RFC 4074

-Library References

DESCRIPTION

DESCRIPTION

SEE ALSO

SEE ALSO

AUTHOR

AUTHOR

DESCRIPTION

DESCRIPTION

OPTIONS

OPTIONS

SEE ALSO

SEE ALSO

AUTHOR

AUTHOR

DESCRIPTION

DESCRIPTION

SIMPLE USAGE

SIMPLE USAGE

OPTIONS

OPTIONS

QUERY OPTIONS

QUERY OPTIONS

FILES

FILES

SEE ALSO

SEE ALSO

DESCRIPTION

DESCRIPTION

SIMPLE USAGE

SIMPLE USAGE

OPTIONS

OPTIONS

QUERY OPTIONS

QUERY OPTIONS

MULTIPLE QUERIES

MULTIPLE QUERIES