.\" Automatically generated by Pod::Man 2.25 (Pod::Simple 3.16)
.\"
.\" Standard preamble:
.\" ========================================================================
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \" Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \" End verbatim text
.ft R
.fi
..
.\" Set up some character translations and predefined strings.  \*(-- will
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
.\" double quote, and \*(R" will give a right double quote.  \*(C+ will
.\" give a nicer C++.  Capital omega is used to do unbreakable dashes and
.\" therefore won't be available.  \*(C` and \*(C' expand to `' in nroff,
.\" nothing in troff, for use with C<>.
.tr \(*W-
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
.    if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\"  diablo 12 pitch
.    ds L" ""
.    ds R" ""
.    ds C` ""
.    ds C' ""
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L" ``
.    ds R" ''
'br\}
.\"
.\" Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\"
.\" If the F register is turned on, we'll generate index entries on stderr for
.\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\" entries marked with X<> in POD.  Of course, you'll have to process the
.\" output yourself in some meaningful fashion.
.ie \nF \{\
.    de IX
.    tm Index:\\$1\t\\n%\t"\\$2"
..
.    nr % 0
.    rr F
.\}
.el \{\
.    de IX
..
.\}
.\"
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\" Fear.  Run.  Save yourself.  No user-serviceable parts.
.    \" fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&
.    ds #] \&
.\}
.    \" simple accents for nroff and troff
.if n \{\
.    ds ' \&
.    ds ` \&
.    ds ^ \&
.    ds , \&
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \" troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \" corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \" for low resolution devices (crt and lpr)
.if \n(.H>23 .if \n(.V>19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\" ========================================================================
.\"
.IX Title "KEYARCH 1p"
.TH KEYARCH 1p "2012-06-21" "perl v5.14.2" "User Contributed Perl Documentation"
.\" For nroff, turn off justification.  Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
.nh
.SH "NAME"
keyarch \- DNSSEC\-Tools daemon to archive old KSK and ZSK keys
.SH "SYNOPSIS"
.IX Header "SYNOPSIS"
.Vb 1
\&  keyarch [options] <keyrec_file | rollrec_file>
.Ve
.SH "DESCRIPTION"
.IX Header "DESCRIPTION"
The \fBkeyarch\fR program archives old \s-1KSK\s0 and \s-1ZSK\s0 keys.  Keys are considered old
if they are revoked or obsolete.  Keys marked as either \fIkskrev\fR or \fIzskrev\fR
are revoked; keys marked as either \fIkskobs\fR or \fIzskobs\fR are obsolete.
Archived keys are prefixed with the seconds-since-epoch as a means of
distinguishing a zone's keys that have the same five digit number.
.PP
If the required file argument is a \fIkeyrec\fR file, then expired keys listed
in that file are archived.  If the file argument is a \fIrollrec\fR file, the
\&\fIkeyrec\fR files of the zones in that file are checked for expired keys.
.PP
If the \fB\-zone\fR option is given, then only revoked and obsolete keys belonging
to the specified zone will be archived.
.PP
The archive directory is either zone-specific (listed in the zone's \fIkeyrec\fR
record in the zone's \fIkeyrec\fR file) or the default archive directory given
in the DNSSEC-Tools configuration file.
.PP
The count of archived keys is given as the program's exit code.  Error exit
codes are negative.
.SH "OPTIONS"
.IX Header "OPTIONS"
The following options are recognized:
.IP "\fB\-zone zone_file\fR" 4
.IX Item "-zone zone_file"
Name of the zone whose KSKs will be archived.  If this is not given, then
all the zones defined in the \fIrollrec\fR file will be checked.
.IP "\fB\-kskonly\fR" 4
.IX Item "-kskonly"
Only archive \s-1KSK\s0 keys.
.IP "\fB\-zskonly\fR" 4
.IX Item "-zskonly"
Only archive \s-1ZSK\s0 keys.
.IP "\fB\-dtconfig config_file\fR" 4
.IX Item "-dtconfig config_file"
Name of an alternate DNSSEC-Tools configuration file to be processed.
If specified, this configuration file is used \fIin place\fR of the normal
DNSSEC-Tools configuration file \fBnot\fR in addition to it.  Also, it will be
handled prior to \fIkeyrec\fR files, \fIrollrec\fR files, and command-line options.
.IP "\fB\-quiet\fR" 4
.IX Item "-quiet"
No output will be given.
.IP "\fB\-verbose\fR" 4
.IX Item "-verbose"
Verbose output will be given.
.IP "\fB\-help\fR" 4
.IX Item "-help"
Display a usage message.
.IP "\fB\-Version\fR" 4
.IX Item "-Version"
Displays the version information for \fBkeyarch\fR and the DNSSEC-Tools package.
.SH "EXIT VALUES"
.IX Header "EXIT VALUES"
On success, \fBkeyarch\fR's exit code is the number of keys archived.
.PP
\&\fBkeyarch\fR has a 0 exit code if the help message is given.
.PP
\&\fBkeyarch\fR has a negative exit code if an error is encountered.
.SH "COPYRIGHT"
.IX Header "COPYRIGHT"
Copyright 2007\-2012 \s-1SPARTA\s0, Inc.  All rights reserved.
See the \s-1COPYING\s0 file included with the DNSSEC-Tools package for details.
.SH "AUTHOR"
.IX Header "AUTHOR"
Wayne Morrison, tewok@tislabs.com
.SH "SEE ALSO"
.IX Header "SEE ALSO"
\&\fB\f(BIrollerd\fB\|(8)\fR,
\&\fB\f(BIzonesigner\fB\|(8)\fR
.PP
\&\fB\f(BINet::DNS::SEC::Tools::conf.pm\fB\|(3)\fR,
\&\fB\f(BINet::DNS::SEC::Tools::dnssectools.pm\fB\|(3)\fR,
\&\fB\f(BINet::DNS::SEC::Tools::defaults.pm\fB\|(3)\fR,
\&\fB\f(BINet::DNS::SEC::Tools::keyrec.pm\fB\|(3)\fR,
\&\fB\f(BINet::DNS::SEC::Tools::rollrec.pm\fB\|(3)\fR
.PP
\&\fB\f(BIkeyrec\fB\|(5)\fR,
\&\fB\f(BIrollrec\fB\|(5)\fR