| Skip Navigation Links | |
| Exit Print View | |
 | man pages section 1M: System Administration Commands Oracle Solaris 11 Information Library |
| Skip Navigation Links | |
| Exit Print View | |
| man pages section 1M: System Administration Commands Oracle Solaris 11 Information Library |
- DNSSEC DS RR generation tool
dnssec-dsfromkey [-vlevel] [-1] [-2] [-aalg]keyfile
dnssec-dsfromkey-s [-vlevel] [-1] [-2] [-aalg] [-cclass] [-ddir]keyfile
dnssec-dsfromkey
The following options are supported:
UseSHA-1 as the digest algorithm. The default is to use bothSHA-1 andSHA-256.
Use SHA-256 as the digest algorithm.
Select the digest algorithm. The value ofalgorithm must be one ofSHA-1 (SHA1) orSHA-256 (SHA256). These values are case-insensitive.
Sets the debugging level.
Keyset mode: in place of the keyfile name, the argument is the DNS domain name of a keyset file. The-c and-d options have meaning only in this mode.
Specifies the DNS class (default isIN); useful only in the keyset mode.
Look for keyset files in directory as the directory; ignored when not in the keyset mode.
To build the SHA-256 DS RR from theKexample.com.+003+26160 keyfile name, usea command such as the following:
#dnssec-dsfromkey -2 Kexample.com.+003+26160
This command would produce output similar to the following:
example.com. IN DS 26160 5 23A1EADA7A74B8D0BA86726B0C227AA85AB8BBD2B2004F41A868A54F0C5EA0B94
The keyfile can be designated by the key identificationKnnnn.+aaa+iiiii, or thefull file nameKnnnn.+aaa+iiiii.key, as generated bydnssec-keygen(1M).
The keyset file name is built from the directory, the stringkeyset-and thednsname.
Seeattributes(5) for descriptions of the following attributes:
|
dnssec-keygen(1M),dnssec-signzone(1M),attributes(5)
RFC 3658,RFC 4509
See the BIND 9Administrator's Reference Manual. As of the date of publication ofthis man page, this document is available athttps://www.isc.org/software/bind/documentation.
A keyfile error can produce a “file not found” message, even ifthe file exists.
Copyright © 2011, Oracle and/or its affiliates. All rights reserved.Legal Notices |   |