1ldns-keygen(1)              General Commands Manual             ldns-keygen(1)
2
3
4

NAME

6       ldns-keygen - generate a DNSSEC key pair
7

SYNOPSIS

9       ldns-keygen [ OPTION ] DOMAIN
10
11

DESCRIPTION

13       ldns-keygen  is used to generate a private/public keypair. When run, it
14       will create 3 files; a .key file with the  public  DNSKEY,  a  .private
15       file  with  the  private  keydata  and  a .ds with the DS record of the
16       DNSKEY record.
17
18       ldns-keygen can also be used to create symmetric keys (for TSIG) by se‐
19       lecting the appropriate algorithm: hmac-md5.sig-alg.reg.int, hmac-sha1,
20       hmac-sha224, hmac-sha256, hmac-sha384 or hmac-sha512.  In that case  no
21       DS record will be created and no .ds file.
22
23       ldns-keygen prints the basename for the key files: K<name>+<alg>+<id>
24
25

OPTIONS

27       -a <algorithm>
28              Create a key with this algorithm. Specifying 'list' here gives a
29              list of supported algorithms.  Several alias names are also  ac‐
30              cepted  (from older versions and other software), the list gives
31              names from the RFC.  Also the plain algo number is accepted.
32
33
34       -b <bits>
35              Use this many bits for the key length.
36
37
38       -k     When given, generate a key signing key. This just sets the  flag
39              field to 257 instead of 256 in the DNSKEY RR in the .key file.
40
41
42       -r device
43              Make  ldns-keygen  use  this  file  to seed the random generator
44              with. This will default to /dev/random.
45
46
47       -s     ldns-keygen will create symbolic links named .private to the new
48              generated  private key, .key to the public DNSKEY and .ds to the
49              file containing DS record data.
50
51
52       -f     force symlinks to be overwritten if they exist.
53
54
55       -v     Show the version and exit
56
57

AUTHOR

59       Written by the ldns team as an example for ldns usage.
60
61

REPORTING BUGS

63       Report bugs to <ldns-team@nlnetlabs.nl>.
64
65

67       Copyright (C) 2005-2008 NLnet Labs. This is free software. There is  NO
68       warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PUR‐
69       POSE.
70
71
72
73                                  27 May 2008                   ldns-keygen(1)
Impressum