manually generating tsig keys

Mark Andrews Mark_Andrews at isc.org
Sun Feb 8 22:36:34 UTC 2009


In message <20090206194146.GA24736 at norchemlab.com>, Justin T Pryzby writes:
> ARM9.5 still mentions manual generation of TSIG data:
> https://www.isc.org/software/bind/documentation/arm95#tsig
> 
> Is there any advtantage to using -keygen ?

	It really depends  on how you are going to use the key.
	For zone transfers there is no benefit as you have to copy
	and paste at both ends.  For nsupdate there is benefit as
	you can use "nsupdate -k keyfile".

>  ISTR some mention of an
> algorithm used to minimize the possibility of collisions.  Or is that
> true for any key used with HMAC?
> 
> Justin
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list