Co robi DNSSEC-KEYGEN użycie. Konsola TSIG) keys for domain-name . When the key is completed.

Czy przydatne?

Polecenie dnssec-keygen

Wykonanie, użycie: System administration command. Generate encrypted Secure DNS (DNSSEC) or Transaction Signatures (TSIG) keys for domain-name. When the key is completed, dnssec-keygen prints the key identifier to standard output and creates public and private keyfiles whose names are based on the key identifier and the filename extensions .key and .private. It creates both files even when using an asymmetric algorithm, such as HMAC-MD5. For more information on Secure DNS, see DNS and BIND (O'Reilly), or read RFC 2535

Opcje wykonania dnssec-keygen w konsoli

-a algorithm

Specify the cryptographic algorithm to use. Accepted values are RSAMD5, RSA, DSA, DH, or HMAC-MD5. DSA or RSA should be used for Secure DNS, and HMAC-MD5 for TSIG.

 -b bitsize

Specify the key bitsize. Accepted values depend on the encryption algorithm used, but, in general, a larger key size means stronger encryption. 128 bits is usually considered reasonably secure, and 512 quite good.

 -c class

The domain record for which the key is being generated should contain class. When this option is not given, a class of IN is assumed.

 -e

Use a large exponent when generating an RSA key.

 -g generator

Specify the number to use as a generator when creating a DH (Diffie Hellman) key. Accepted values are 2 and 5.

 -h

Print a help message, then exit.

 -n type

The owner of the key must be of the specified type. Accepted values are ZONE, HOST, ENTITY, or USER.

 -p protocol

Specify the protocol value for the generated key. Accepted values are given in RFC 2535 and other DNS Security RFCs. By default, the value is either 2 (email) or 3 (DNSSEC).

 -r device

Specify the device to use as a source of randomness when creating keys. This can be a device file, a file containing random data, or the string keyboard to specify keyboard input. By default, /dev/random will be used when available, and keyboard input will be used when it is not.

 -s type

Specify whether the key can be used for authentication, confirmation, both, or neither. Accepted values for type are AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF.

Przykłady dnssec-keygen działanie w Słownik polecenie D

Przykład DNSSEC-KEYGEN użycie :
Jak użyć options for ls by changing the LS_COLORS environment variable. If you specify a file, dircolors will read it to determine which colors to use. Otherwise, it will use a default set of colors co znaczy.
Przykład DNSSEC-KEYGEN użycie :
Jak użyć destroy the unused virtual console /dev/ttyN . Multiple consoles may be named with additional spaces and integers: deallocvt 1 4 will deallocate the /dev/tty1 and /dev/tty4 consoles. Consoles are krzyżówka.
Przykład DNSSEC-KEYGEN użycie :
Jak użyć date and time. You may specify a display format . format can consist of literal text strings (blanks must be quoted) as well as field descriptors, whose values will appear as described in the co to jest.
Przykład DNSSEC-KEYGEN użycie :
Jak użyć administration command. Sign a secure DNS zonefile with the signatures in the specified list of key-identifiers . If signed keysets associated with the zone are found in the current directory słownik.
Przykład DNSSEC-KEYGEN użycie :
Jak użyć used to query DNS servers; it is more flexible than the deprecated nslookup command. When invoked with just the -h option, it displays a list of options for the command. If you use it without any czym jest.