How can Client send TKEY to Server using nsupdate

pingman karthik.kumar23 at gmail.com
Wed Nov 8 06:55:48 UTC 2006


Hi Bind Gurus,
I am trying to send a dynamic update to server using Diffie-Hellman key
exchange.
I am trying to use nsupdate to send the message.
I have generated the DH keys by the following command.

dnssec-keygen -a DH -b 512 -n USER -g 2 kkkey

the following key was generated

Kkkkey.+002+01827.private

When i did
       nsupdate -k Kkkkey.+002+01827.private
I got the following error message:
"could not create key from Kkkkey.+002+01827.private: bad algorithm"

I then tried the following:
nsupdate
> server 1.1.1.1
> zone kk.com
> update add kk.bsr.com 0 TKEY hmac-md5.sig-alg.reg.int. 10318 37255 300 16 Y== 32593 NOERROR O
I got the following error message:
"invalid rdata format: not a valid number"

Please help me to send a TKEY RR, KEY RR, for DH exchange.

Thanks in advance
KK



More information about the bind-users mailing list