dtck1p

Usage

Overview

dtck checks DNSSEC-Tools data files to determine if the entries are valid. dtck checks the validity of DNSSEC-Tools configuration files, rollrec files, and keyrec files. It does not perform the file checking itself, but runs checking programs specific to each type of data file.

A dtck configuration file is consulted to determine the files to check. This file lists the DNSSEC-Tools data files and their types. If a dtck configuration file is not given on the command line, dtck will only check the DNSSEC-Tools configuration file. This is equivalent to running dtconfchk directly.

DTCK configuration file

A dtck configuration file contains a list of the files to be checked by dtck. Except for comments, each line has the following format:

    keyword file directory

keyword is one of "config", "rollrec", or "keyrec". file is the pathname of the file to be checked. directory is the name of the directory that holds file and is optional.

The dtck configuration file contains the following types of records:

config

These lines define the DNSSEC-Tools configuration files that will be checked. The dtconfchk program will be used to verify these files.

rollrec

These lines define the rollrec files that will be checked. The rollchk program will be used to verify these files.

keyrec

These lines define the keyrec files that will be checked. The krfcheck program will be used to verify these files.

comments

Any lines starting with an octothorpe (#) are comment lines and are ignored.

Options

dtck takes two types of options. Options of the first type are handled directly by dtck, controlling its output and processing. Options of the second type are passed to the file-checking programs and are not further handled by dtck.