upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

[master] update secroots doc in rndc man page

Browse source
This commit is contained in:
Evan Hunt 2017-11-01 15:37:12 -07:00
parent 0698ad8503
commit 4359be18f4
1 changed files with 15 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
bin/rndc/rndc.docbook
View file

@ -774,9 +774,15 @@
<term><userinput>secroots <optional>-</optional> <optional><replaceable>view ...</replaceable></optional></userinput></term>
<listitem>
<para>
Dump the server's security roots and negative trust anchors
for the specified views. If no view is specified, all views
are dumped.
Dump the security roots (i.e., trust anchors
configured via <command>trusted-keys</command>,
<command>managed-keys</command>, or
<command>dnssec-validation auto</command>) and negative trust
anchors for the specified views. If no view is specified, all
views are dumped. Security roots will indicate whether
they are configured as trusted keys, managed keys, or
initializing managed keys (managed keys that have not yet
been updated by a successful key refresh query).
</para>
<para>
If the first argument is "-", then the output is
@ -963,15 +969,15 @@
<listitem>
<para>
When called without arguments, display the current
values of the <command>tcp-initial-timeout</command>,
values of the <command>tcp-initial-timeout</command>,
<command>tcp-idle-timeout</command>,
<command>tcp-keepalive-timeout</command> and
<command>tcp-advertised-timeout</command> options.
When called with arguments, update these values. This
allows an administrator to make rapid adjustments when
under a denial of service attack. See the descriptions of
these options in the BIND 9 Administrator Reference Manual
for details of their use.
When called with arguments, update these values. This
allows an administrator to make rapid adjustments when
under a denial of service attack. See the descriptions of
these options in the BIND 9 Administrator Reference Manual
for details of their use.
</para>
</listitem>
</varlistentry>