ldns-keygen

Section: User Commands (1)
Updated: 27 May 2008
Page Index
 

NAME

ldns-keygen - generate a DNSSEC key pair  

SYNOPSIS

ldns-keygen [ OPTION ] DOMAIN

 

DESCRIPTION

ldns-keygen is used to generate a private/public keypair. When run, it will create 3 files; a .key file with the public DNSKEY, a .private file with the private keydata and a .ds with the DS record of the DNSKEY record.

ldns-keygen can also be used to create symmetric keys (for TSIG) by selecting the appropriate algorithm: hmac-md5.sig-alg.reg.int, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384 or hmac-sha512. In that case no DS record will be created and no .ds file.

ldns-keygen prints the basename for the key files: K<name>+<alg>+<id>

 

OPTIONS

-a <algorithm>
Create a key with this algorithm. Specifying 'list' here gives a list of supported algorithms. Several alias names are also accepted (from older versions and other software), the list gives names from the RFC. Also the plain algo number is accepted.

-b <bits>
Use this many bits for the key length.

-k
When given, generate a key signing key. This just sets the flag field to 257 instead of 256 in the DNSKEY RR in the .key file.

-r device
Make ldns-keygen use this file to seed the random generator with. This will default to /dev/random.

-v
Show the version and exit

 

AUTHOR

Written by the ldns team as an example for ldns usage.

 

REPORTING BUGS

Report bugs to <ldns-team@nlnetlabs.nl>.

 

COPYRIGHT

Copyright (C) 2005-2008 NLnet Labs. This is free software. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.


 

Index

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
AUTHOR
REPORTING BUGS
COPYRIGHT