Format of 'dig -k' "TSIG key file"?

Hauke Lampe list+bindusers at
Sat Aug 22 12:45:19 UTC 2009

Joseph S D Yao wrote:

> It turned out that this latter file was needed, but for some
> inexplicable reason perhaps having to do with library routines [I have
> not gone chasing down the code], it ALSO wants the "mynet.private" file!

The nsupdate manpages mentions this behaviour in the "BUGS" section:

|       The TSIG key is redundantly stored in two separate files. This
|       is a consequence of nsupdate using the DST library for its
|       cryptographic operations, and may change in future releases.

Maybe the dig manpage should, too, until it changes in future releases.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: dig.1.patch
Type: text/x-patch
Size: 968 bytes
Desc: not available
URL: <>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the bind-users mailing list