diff --git a/bin/dnssec/dnssec-dsfromkey.docbook b/bin/dnssec/dnssec-dsfromkey.docbook index b5e17eb003..57746a6329 100644 --- a/bin/dnssec/dnssec-dsfromkey.docbook +++ b/bin/dnssec/dnssec-dsfromkey.docbook @@ -17,7 +17,7 @@ - PERFORMANCE OF THIS SOFTWARE. --> - + november 29, 2008 @@ -66,8 +66,8 @@ DESCRIPTION dnssec-dsfromkey - outputs the Delegation Signer (DS) resource record RR, as defined in RFC 3658 - and RFC 4509, for the given key(s). + outputs the Delegation Signer (DS) resource record RR, as defined in + RFC 3658 and RFC 4509, for the given key(s). @@ -214,213 +214,3 @@ ]> - - - - - - november 29, 2008 - - - - dnssec-dsfromkey - 8 - BIND9 - - - - dnssec-dsfromkey - DNSSEC DS RR generation tool - - - - - 2008 - Internet Systems Consortium, Inc. ("ISC") - - - - - - dnssec-dsfromkey - - - - - keyfile - - - dnssec-dsfromkey - -s - - - - - - - dnsname - - - - - DESCRIPTION - dnssec-dsfromkey - outputs the Delegation Signer (DS) resource record RR, as defined in RFC 3658 - and RFC 4509, for the given key(s). - - - - - OPTIONS - - - - -1 - - - Use SHA-1 as the digest algorithm (the default is to use - both SHA-1 and SHA-256). - - - - - - -2 - - - Use SHA-256 as the digest algorithm. - - - - - - -a algorithm - - - Select the digest algorithm. The value of - must be one of SHA-1 (SHA1) or - SHA-256 (SHA256). These values are case insensitive. - - - - - - -v level - - - Sets the debugging level. - - - - - - -s - - - Keyset mode: in place of the keyfile name, the argument is - the DNS domain name of a keyset file. Following options make sense - only in this mode. - - - - - - -c class - - - Specifies the DNS class (default is IN), useful only - in the keyset mode. - - - - - - -d directory - - - Look for keyset files in - as the directory, ignored when - not in the keyset mode. - - - - - - - - - EXAMPLE - - To build the SHA-256 DS RR from the - Kexample.com.+003+26160 - keyfile name, the following command would be issued: - - dnssec-dsfromkey -2 Kexample.com.+003+26160 - - - The command would print something like: - - example.com. IN DS 26160 5 2 3A1EADA7A74B8D0BA86726B0C227AA85AB8BBD2B2004F41A868A54F0 C5EA0B94 - - - - - FILES - - The keyfile can be designed by the key identification - Knnnn.+aaa+iiiii or the full file name - Knnnn.+aaa+iiiii.key as generate by - dnssec-keygen8. - - - The keyset file name is built from the , - the string keyset- and the - . - - - - - CAVEAT - - A keyfile error can give a "file not found" even if the file exists. - - - - - SEE ALSO - - dnssec-keygen8 - , - - dnssec-signzone8 - , - BIND 9 Administrator Reference Manual, - RFC 3658, - RFC 4509. - - - - - AUTHOR - Internet Systems Consortium - - - -