Format of 'dig -k' "TSIG key file"?

Joseph S D Yao jsdy at tux.org
Sat Aug 22 13:15:13 UTC 2009


On Sat, Aug 22, 2009 at 02:45:19PM +0200, Hauke Lampe wrote:
> Joseph S D Yao wrote:
> 
> > It turned out that this latter file was needed, but for some
> > inexplicable reason perhaps having to do with library routines [I have
> > not gone chasing down the code], it ALSO wants the "mynet.private" file!
> 
> The nsupdate manpages mentions this behaviour in the "BUGS" section:
> 
> | BUGS
> |       The TSIG key is redundantly stored in two separate files. This
> |       is a consequence of nsupdate using the DST library for its
> |       cryptographic operations, and may change in future releases.
> 
> Maybe the dig manpage should, too, until it changes in future releases.


Given that the "new" 'nslookup' uses common library routines, this makes
sense.  And I believe someone even mentioned that, which was a big hint.
I am just not used to looking in the 'nslookup' manual entry for
information on 'dig'.  ;-)


-- 
/*********************************************************************\
**
** Joe Yao				jsdy at tux.org - Joseph S. D. Yao
**
\*********************************************************************/



More information about the bind-users mailing list