From: Evan Hunt <each@isc.org>
Date: Tue, 1 Jul 2014 23:01:59 +0000 (-0700)
Subject: [master] add "rndc nta" options to "rndc -h" output
X-Git-Tag: v9.11.0a1~1485
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=547411428e467f2a2848886eaac0a8b3e136a9ab;p=thirdparty%2Fbind9.git

[master] add "rndc nta" options to "rndc -h" output
---

diff --git a/bin/rndc/rndc.c b/bin/rndc/rndc.c
index 0f728ea0670..d11c027cceb 100644
--- a/bin/rndc/rndc.c
+++ b/bin/rndc/rndc.c
@@ -158,6 +158,18 @@ command is one of the following:\n\
 		Delete a TKEY-negotiated TSIG key.\n\
   validation newstate [view]\n\
 		Enable / disable DNSSEC validation.\n\
+  nta [-lifetime duration] [-force] domain [view]\n\
+		Set a negative trust anchor, disabling DNSSEC validation\n\
+		for the given domain.\n\
+		Using -lifetime specifies the duration of the NTA, up\n\
+		to one day.\n\
+		Using -force prevents the NTA from expiring before its\n\
+		full lifetime, even if the domain can validate sooner.\n\
+  nta -remove domain [view]\n\
+		Remove a negative trust anchor, re-enabling validation\n\
+		for the given domain.\n\
+  nta -dump\n\
+		List all negative trust anchors.\n\
   addzone zone [class [view]] { zone-options }\n\
 		Add zone to given view. Requires new-zone-file option.\n\
   delzone [-clean] zone [class [view]]\n\