'tsig-keygen' vs 'dnssec-keygen' - keysize

Browne, Stuart Stuart.Browne at team.neustar
Wed Sep 5 04:50:52 UTC 2018

Was adding in some new internal functionality and noted that the 'tsig-keygen' tool doesn't give the ability to alter the keysize like dnssec-keygen does for generating HMAC based tsig keys.

I also noticed that in 9.13, dnssec-keygen will no longer be able to generate HMAC tsig's, so I'm wondering if the ability to manipulate the tsig keysize will be implemented in tsig-keygen to maintain compatibility, or if there is some work-around I've not found to be able to set this.

Stuart Browne
Neustar, Inc. / Sr Systems Admin
Level 8, 10 Queens Road, Melbourne, Australia VIC 3004
Office: +61.3.9866.3710
stuart.browne at team.neustar / home.neustar

Follow Neustar: LinkedIn / Twitter

Reduce your environmental footprint. Print only if necessary.

The information contained in this email message is intended only for the use of the recipient(s) named above and may contain confidential and/or privileged information. If you are not the intended recipient you have received this email message in error and any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately and delete the original message.

More information about the bind-users mailing list