Lines Matching full:root

18 performs setup or update of the root trust anchor for DNSSEC validation.
21 It can be run (as root) from the commandline, or run as part of startup
28 	# provide or update the root anchor (if necessary)
30 	# Please note usage of this root anchor is at your own risk
39 This tool provides builtin default contents for the root anchor and root
42 It tests if the root anchor file works, and if not, and an update is possible,
43 attempts to update the root anchor using the root update certificate.
44 It performs a https fetch of root-anchors.xml and checks the results (RFC7958),
45 if all checks are successful, it updates the root anchor file.  Otherwise
46 the root anchor file is unchanged.  It performs RFC5011 tracking if the
55 The root anchor key file, that is read in and written out.
57 If the file does not exist, or is empty, a builtin root key is written to it.
60 The root update certificate file, that is read in.
65 List the builtin root key and builtin root update certificate on stdout.
80 The pathname to the root\-anchors.xml file on the server. (forms URL with \-u).
81 The default is /root\-anchors/root\-anchors.xml.
84 The pathname to the root\-anchors.p7s file on the server. (forms URL with \-u).
85 The default is /root\-anchors/root\-anchors.p7s.  This file has to be a PKCS7
110 .B \-r \fIroot.hints
111 Use the given root.hints file (same syntax as the BIND and Unbound root hints
112 file) to bootstrap domain resolution.  By default a list of builtin root
114 to resolve the server (\-u option) and to check the root DNSKEY records.
120 Allow fallback from \-f resolv.conf file to direct root servers query.
122 to direct root query if they do not respond or do not support DNSSEC.
128 errors by default; in that case the original root anchor file is simply
138 Debug option to force update of the root anchor through downloading the xml
148 This tool exits with value 1 if the root anchor was updated using the
149 certificate or if the builtin root-anchor was used.  It exits with code
155 	unbound-anchor \-a "root.key" || logger "Please check root.key"
159 The root keys and update certificate included in this tool
168 The build\-in configuration can be overridden by providing a root\-cert
173 The root anchor file, updated with 5011 tracking, and read and written to.
178 DNSSEC root trust anchor.  You can update it by fetching it from
179 https://data.iana.org/root\-anchors/icannbundle.pem (and validate it).
182 .I https://data.iana.org/root\-anchors/root\-anchors.xml
183 Source for the root key information.
185 .I https://data.iana.org/root\-anchors/root\-anchors.p7s
186 Signature on the root key information.