---
name: "ods-kaspcheck"
section: "1"
platform: "linux"
package: "opendnssec-enforcer-mysql"
version: "1:2.1.12-2"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/ods-kaspcheck"
---

# ods-kaspcheck(1)

Performs a sanity check of the policy for OpenDNSSEC

## NAME

**ods-kaspcheck** - Performs a sanity check of the policy for OpenDNSSEC

## SYNOPSIS

**ods-kaspcheck** \[**-c** *path* **-k** *path*\]

## DESCRIPTION

The OpenDNSSEC XML configuration files (conf.xml and kasp.xml) offer the user many options to configure the OpenDNSSEC signing system. Some syntactic  constraints are placed on the configuration by the .rng definition (for example, whether an element is required or optional), but some semantic  constraints cannot be defined this way (for example, if NSEC3 is used to secure the zone, then a consistent DNSKEY algorithm choice should be made).

ods-kaspcheck is provided to check that the configuration files (conf.xml and kasp.xml) are semantically sane and contain no  inconsistencies. It is advisable to use this tool to check your configuration before starting to use OpenDNSSEC.

## OPTIONS

- **-c**, **--conf** *path*

  Path to an OpenDNSSEC configuration file

  (defaults to /etc/opendnssec/conf.xml)

- **-k**, **--kasp** *path*

  Path to KASP policy file

  (defaults to the path given in the configuration file)

- **-v**, **--version**

  Display version information

- **-h**, **-?**, **--help**

  Show the help screen

## SEE ALSO

[ods-control(8)](/ods-control/8.md), [ods-enforcerd(8)](/ods-enforcerd/8.md), [ods-enforcer(8)](/ods-enforcer/8.md), [ods-hsmspeed(1)](/ods-hsmspeed/1.md), [ods-hsmutil(1)](/ods-hsmutil/1.md), [ods-signer(8)](/ods-signer/8.md), [ods-signerd(8)](/ods-signerd/8.md), [ods-timing(5)](/ods-timing/5.md), ods-kasp, [opendnssec(7)](/opendnssec/7.md), **http://www.opendnssec.org/**

## AUTHORS

**ods-kaspcheck** was written by Alex Dalitz and Nominet as part of the OpenDNSSEC project.