1ldns-keygen(1)              General Commands Manual             ldns-keygen(1)
2
3
4

NAME

6       ldns-keygen - generate a DNSSEC key pair
7

SYNOPSIS

9       ldns-keygen [ OPTION ] DOMAIN
10
11

DESCRIPTION

13       ldns-keygen  is used to generate a private/public keypair. When run, it
14       will create 3 files; a .key file with the  public  DNSKEY,  a  .private
15       file  with  the  private  keydata  and  a .ds with the DS record of the
16       DNSKEY record.
17
18       ldns-keygen can also be used to create symmetric  keys  (for  TSIG)  by
19       selecting    the   appropriate   algorithm:   hmac-md5.sig-alg.reg.int,
20       hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384  or  hmac-sha512.   In
21       that case no DS record will be created and no .ds file.
22
23       ldns-keygen prints the basename for the key files: K<name>+<alg>+<id>
24
25

OPTIONS

27       -a <algorithm>
28              Create a key with this algorithm. Specifying 'list' here gives a
29              list of supported algorithms.   Several  alias  names  are  also
30              accepted  (from  older  versions  and  other software), the list
31              gives names from  the  RFC.   Also  the  plain  algo  number  is
32              accepted.
33
34
35       -b <bits>
36              Use this many bits for the key length.
37
38
39       -k     When  given, generate a key signing key. This just sets the flag
40              field to 257 instead of 256 in the DNSKEY RR in the .key file.
41
42
43       -r device
44              Make ldns-keygen use this file  to  seed  the  random  generator
45              with. This will default to /dev/random.
46
47
48       -v     Show the version and exit
49
50

AUTHOR

52       Written by the ldns team as an example for ldns usage.
53
54

REPORTING BUGS

56       Report bugs to <ldns-team@nlnetlabs.nl>.
57
58

60       Copyright  (C) 2005-2008 NLnet Labs. This is free software. There is NO
61       warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PUR‐
62       POSE.
63
64
65
66                                  27 May 2008                   ldns-keygen(1)
Impressum