3139N/A - Copyright (C) 2001 Internet Software Consortium. 3139N/A - Permission to use, copy, modify, and distribute this software for any 3139N/A - purpose with or without fee is hereby granted, provided that the above 3139N/A - copyright notice and this permission notice appear in all copies. 3356N/A - THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM 3474N/A - DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL 3139N/A - IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL 3139N/A - INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, 3139N/A - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING 3139N/A - FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, 3139N/A - NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION 3356N/A - WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 3139N/ACONTENT="Modular DocBook HTML Stylesheet Version 1.61 3139N/A> -- DNSSEC zone signing tool</
DIV 3387N/A> generates a key set from one
3139N/A a file containing a KEY record for each key, and self-signs the key
3139N/A set with each zone key. The output file is of the form
3139N/A> Verify all generated signatures.
3139N/A> Specify the date and time when the generated SIG records
3139N/A become valid. This can be either an absolute or relative
3139N/A time. An absolute start time is indicated by a number
3139N/A in YYYYMMDDHHMMSS notation; 20000530144500 denotes
3139N/A 14:45:00 UTC on May 30th, 2000. A relative start time is
3139N/A indicated by +N, which is N seconds from the current time.
3139N/A> Specify the date and time when the generated SIG records
3139N/A time is indicated in YYYYMMDDHHMMSS notation. A time relative
3139N/A to the start time is indicated with +N, which is N seconds from
3139N/A the start time. A time realtive to the current time is
3139N/A indicated with now+N. If no <
TT 3139N/A specified, 30 days from the start time is used as a default.
3139N/A> Prints a short summary of the options and arguments to
3139N/A> Use pseudo-random data when signing the zone. This is faster,
3139N/A but less secure, than using real random data. This option
3139N/A may be useful when signing large zones or when the entropy
3139N/A> Specifies the source of randomness. If the operating
3139N/A system does not provide a <
TT 3139N/A or equivalent device, the default source of randomness
3139N/A the name of a character device or file containing random
3139N/A data to be used instead of the default. The special value
3139N/A> Specify the TTL (time to live) of the KEY and SIG records.
3139N/A The default is 3600 seconds.
3474N/A> Lists the keys included in the keyset file. These keys
3139N/A are expressed in the form <
TT 3139N/A> The following command generates a keyset containing the DSA key for
3139N/A contains the specified key and a self-generated signature.
3139N/A> The DNS administrator for <
TT 3139N/A .com zone is DNSSEC-aware and the administrators of the two zones
3139N/A have some mechanism for authenticating each other and exchanging
3139N/A the keys and signatures securely.
3139N/A>BIND 9 Administrator Reference Manual</
I 3139N/A> Internet Software Consortium