Regarding HMAC-SHA256 and RSASHA512 key generation algorithm in dnssec-keygen

Evan Hunt each at isc.org
Thu Mar 20 00:06:53 UTC 2014


On Thu, Mar 06, 2014 at 11:34:45AM +0100, Carsten Strotmann wrote:
> there could be a hard-link from a name like "tsig-keygen" to
> "dnssec-keygen" which changes the type of key created to "-n HOST". That
> would not require any change to the existing interface. Just an idea.
> 
> I'm not suggesting to change the existing interface, as it will break
> existing stuff.

FYI, the "tsig-keygen" command is now available in 9.10.0b2.  (Published
to the FTP site, should be on the web site shortly.)

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.


More information about the bind-users mailing list