OS Manuals

/usr/bin/dnssec-revoke

Utilities for DNSSEC keys and DNS zone files management

From bind-dnssec-tools 9.20.30-r1 (os), captured 2026-11-05 by running dnssec-revoke --help (exit 1). permalink

dnssec-revoke: invalid argument --
Usage:
    dnssec-revoke [options] keyfile

Version: 9.20.30
    -E engine:    specify OpenSSL engine
    -f:           force overwrite
    -h:           help
    -K directory: use directory for key files
    -r:           remove old keyfiles after creating revoked version
    -v level:     set level of verbosity
    -V:           print version information
Output:
     K<name>+<alg>+<new id>.key, K<name>+<alg>+<new id>.private
Options (8)
OptionDescriptionSource
-E engine:This option specifies the cryptographic hardware to use, when applicable.help + man
-fThis option indicates a forced overwrite and causes dnssec-revoke to write the new key pair, even if a file already exists matching the algorithm and key ID of the revoked key.help + man
-hThis option emits a usage message and exits.help + man
-rThis option indicates to remove the original keyset files after writing the new keyset files.help + man
-v level:This option sets the debugging level.help + man
-VThis option prints version information.help + man
-K directoryThis option sets the directory in which the key files are to reside. (in the manual page but not in --help)man
-RThis option prints the key tag of the key with the REVOKE bit set, but does not revoke the key. (in the manual page but not in --help)man

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.