1ldns-keygen(1) General Commands Manual ldns-keygen(1)
2
3
4
6 ldns-keygen - generate a DNSSEC key pair
7
9 ldns-keygen [ OPTION ] DOMAIN
10
11
13 ldns-keygen is used to generate a private/public keypair. When run, it
14 will create 3 files; a .key file with the public DNSKEY, a .private
15 file with the private keydata and a .ds with the DS record of the
16 DNSKEY record.
17
18 ldns-keygen can also be used to create symmetric keys (for TSIG) by
19 selecting the appropriate algorithm: hmac-md5.sig-alg.reg.int,
20 hmac-sha1 or hmac-sha256. In that case no DS record will be created
21 and no .ds file.
22
23 ldns-keygen prints the basename for the key files: K<name>+<alg>+<id>
24
25
27 -a <algorithm>
28 Create a key with this algorithm. Specifying 'list' here gives a
29 list of supported algorithms. Several alias names are also
30 accepted (from older versions and other software), the list
31 gives names from the RFC. Also the plain algo number is
32 accepted.
33
34
35 -b <bits>
36 Use this many bits for the key length.
37
38
39 -k When given, generate a key signing key. This just sets the flag
40 field to 257 instead of 256 in the DNSKEY RR in the .key file.
41
42
43 -r device
44 Make ldns-keygen use this file to seed the random generator
45 with. This will default to /dev/random.
46
47
48 -v Show the version and exit
49
50
52 Written by the ldns team as an example for ldns usage.
53
54
56 Report bugs to <ldns-team@nlnetlabs.nl>.
57
58
60 Copyright (C) 2005-2008 NLnet Labs. This is free software. There is NO
61 warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PUR‐
62 POSE.
63
64
65
66 27 May 2008 ldns-keygen(1)