man.dnssec-keyfromlabel.html revision 922312472e2e05ebc64993d465999c5351b83036
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - Copyright (C) 2004-2008 Internet Systems Consortium, Inc. ("ISC")
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - Copyright (C) 2000-2003 Internet Software Consortium.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - Permission to use, copy, modify, and distribute this software for any
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - purpose with or without fee is hereby granted, provided that the above
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - copyright notice and this permission notice appear in all copies.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy - PERFORMANCE OF THIS SOFTWARE.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<!-- $Id: man.dnssec-keyfromlabel.html,v 1.31 2008/11/07 04:08:43 tbox Exp $ -->
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<link rel="next" href="man.dnssec-keygen.html" title="dnssec-keygen">
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<table width="100%" summary="Navigation header">
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<tr><th colspan="3" align="center"><span class="application">dnssec-keyfromlabel</span></th></tr>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<th width="60%" align="center">Manual pages</th>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-keygen.html">Next</a>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<a name="man.dnssec-keyfromlabel"></a><div class="titlepage"></div>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<p><span class="application">dnssec-keyfromlabel</span> — DNSSEC key generation tool</p>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-a <em class="replaceable"><code>algorithm</code></em>} {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-k</code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] {name}</p></div>
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy<a name="id2603227"></a><h2>DESCRIPTION</h2>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<p><span><strong class="command">dnssec-keyfromlabel</strong></span>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy gets keys with the given label from a crypto hardware and builds
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy key files for DNSSEC (Secure DNS), as defined in RFC 2535
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Selects the cryptographic algorithm. The value of
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy <code class="option">algorithm</code> must be one of RSAMD5 (RSA)
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy or RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA or DH (Diffie Hellman).
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy These values are case insensitive.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Note 1: that for DNSSEC, RSASHA1 is a mandatory to implement
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy algorithm, and DSA is recommended.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Note 2: DH automatically sets the -k flag.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<dt><span class="term">-l <em class="replaceable"><code>label</code></em></span></dt>
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy Specifies the label of keys in the crypto hardware
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy (PKCS#11 device).
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<dt><span class="term">-n <em class="replaceable"><code>nametype</code></em></span></dt>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Specifies the owner type of the key. The value of
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy <code class="option">nametype</code> must either be ZONE (for a DNSSEC
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy zone key (KEY/DNSKEY)), HOST or ENTITY (for a key associated with
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy a host (KEY)),
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy USER (for a key associated with a user(KEY)) or OTHER (DNSKEY).
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy These values are
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy case insensitive.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Indicates that the DNS record containing the key should have
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy the specified class. If not specified, class IN is used.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<dt><span class="term">-f <em class="replaceable"><code>flag</code></em></span></dt>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Set the specified flag in the flag field of the KEY/DNSKEY record.
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy The only recognized flag is KSK (Key Signing Key) DNSKEY.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Prints a short summary of the options and arguments to
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy <span><strong class="command">dnssec-keygen</strong></span>.
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy Generate KEY records rather than DNSKEY records.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<dt><span class="term">-p <em class="replaceable"><code>protocol</code></em></span></dt>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Sets the protocol value for the generated key. The protocol
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy is a number between 0 and 255. The default is 3 (DNSSEC).
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Other possible values for this argument are listed in
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy RFC 2535 and its successors.
1d32ba663e202c24a5a1f2e5aef83fffb447cb7fJohn Wren Kennedy<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy Indicates the use of the key. <code class="option">type</code> must be
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy is AUTHCONF. AUTH refers to the ability to authenticate
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy data, and CONF the ability to encrypt data.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>