man.dnssec-keyfromlabel.html revision 66f25f2ceeb589e67efe7af2413baaa3426b0042
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - Copyright (C) 2004-2010 Internet Systems Consortium, Inc. ("ISC")
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - Copyright (C) 2000-2003 Internet Software Consortium.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - Permission to use, copy, modify, and/or distribute this software for any
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - purpose with or without fee is hereby granted, provided that the above
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - copyright notice and this permission notice appear in all copies.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering - PERFORMANCE OF THIS SOFTWARE.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<!-- $Id: man.dnssec-keyfromlabel.html,v 1.105 2010/12/26 01:14:06 tbox Exp $ -->
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
b5efdb8af40ea759a1ea584c1bc44ecc81dd00ceLennart Poettering<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
96aad8d15a324d0e956a4e5653a11a67b209b41aLennart Poettering<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
4ad7f2761da661853dcc29d542efb4727abb1101Nick Owens<link rel="prev" href="man.dnssec-dsfromkey.html" title="dnssec-dsfromkey">
39d8db043b599a7382f94bfc904d5e108af438bdLennart Poettering<link rel="next" href="man.dnssec-keygen.html" title="dnssec-keygen">
3abaabdab73bd0f3e4f68284dc3cb00902b8e1c6Lennart Poettering<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering<table width="100%" summary="Navigation header">
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering<tr><th colspan="3" align="center"><span class="application">dnssec-keyfromlabel</span></th></tr>
ec2c5e4398f9d65e5dfe61530f2556224733d1e6Lennart Poettering<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
309e9d86f0e7f9c5f0a2a09227bdfdb3174d4436Lennart Poettering<th width="60%" align="center">Manual pages</th>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-keygen.html">Next</a>
818f766b12e025683cf4fed12b3da2a025bb0b31Lennart Poettering<a name="man.dnssec-keyfromlabel"></a><div class="titlepage"></div>
ec2c5e4398f9d65e5dfe61530f2556224733d1e6Lennart Poettering<p><span class="application">dnssec-keyfromlabel</span> — DNSSEC key generation tool</p>
818f766b12e025683cf4fed12b3da2a025bb0b31Lennart Poettering<div class="cmdsynopsis"><p><code class="command">dnssec-keyfromlabel</code> {-l <em class="replaceable"><code>label</code></em>} [<code class="option">-3</code>] [<code class="option">-a <em class="replaceable"><code>algorithm</code></em></code>] [<code class="option">-A <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-D <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-E <em class="replaceable"><code>engine</code></em></code>] [<code class="option">-f <em class="replaceable"><code>flag</code></em></code>] [<code class="option">-G</code>] [<code class="option">-I <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-k</code>] [<code class="option">-K <em class="replaceable"><code>directory</code></em></code>] [<code class="option">-n <em class="replaceable"><code>nametype</code></em></code>] [<code class="option">-P <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-p <em class="replaceable"><code>protocol</code></em></code>] [<code class="option">-R <em class="replaceable"><code>date/offset</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-v <em class="replaceable"><code>level</code></em></code>] [<code class="option">-y</code>] {name}</p></div>
a761c1ca851a9397b5a207ef600e077d0f7f4534Lennart Poettering<a name="id2612126"></a><h2>DESCRIPTION</h2>
019036a47fcd10fcf0286800d144c706f3773e2fLennart Poettering<p><span><strong class="command">dnssec-keyfromlabel</strong></span>
547973dea7abd6c124ff6c79fe2bbe322a7314aeLennart Poettering gets keys with the given label from a crypto hardware and builds
b2b796b8ab5565fbe60b544d2579e2bfca31bf6aLennart Poettering key files for DNSSEC (Secure DNS), as defined in RFC 2535
91adc4db33f69606aabd332813a5d7d5751c859fLennart Poettering The <code class="option">name</code> of the key is specified on the command
91adc4db33f69606aabd332813a5d7d5751c859fLennart Poettering line. This must match the name of the zone for which the key is
edbcc1fdd94355c5cf22263ba2c1cfa4ec2eb010Lennart Poettering being generated.
faa133f3aa7a18f26563dc5d6b95898cb315c37aLennart Poettering<dt><span class="term">-a <em class="replaceable"><code>algorithm</code></em></span></dt>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering Selects the cryptographic algorithm. The value of
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering <code class="option">algorithm</code> must be one of RSAMD5, RSASHA1,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512 or ECCGOST.
faa133f3aa7a18f26563dc5d6b95898cb315c37aLennart Poettering These values are case insensitive.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering If no algorithm is specified, then RSASHA1 will be used by
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering default, unless the <code class="option">-3</code> option is specified,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering in which case NSEC3RSASHA1 will be used instead. (If
63c372cb9df3bee01e3bf8cd7f96f336bddda846Lennart Poettering <code class="option">-3</code> is used and an algorithm is specified,
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering that algorithm will be checked for compatibility with NSEC3.)
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering Note 1: that for DNSSEC, RSASHA1 is a mandatory to implement
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering algorithm, and DSA is recommended.
ec2c5e4398f9d65e5dfe61530f2556224733d1e6Lennart Poettering Note 2: DH automatically sets the -k flag.
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering Use an NSEC3-capable algorithm to generate a DNSSEC key.
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering If this option is used and no algorithm is explicitly
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering set on the command line, NSEC3RSASHA1 will be used by
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering<dt><span class="term">-E <em class="replaceable"><code>engine</code></em></span></dt>
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering Specifies the name of the crypto hardware (OpenSSL engine).
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering When compiled with PKCS#11 support it defaults to "pkcs11".
78c6a153c47f8d597c827bdcaf8c4e42ac87f738Lennart Poettering<dt><span class="term">-l <em class="replaceable"><code>label</code></em></span></dt>
78c6a153c47f8d597c827bdcaf8c4e42ac87f738Lennart Poettering Specifies the label of the key pair in the crypto hardware.
78c6a153c47f8d597c827bdcaf8c4e42ac87f738Lennart Poettering The label may be preceded by an optional OpenSSL engine name,
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering separated by a colon, as in "pkcs11:keylabel".
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering<dt><span class="term">-n <em class="replaceable"><code>nametype</code></em></span></dt>
0dd25fb9f005d8ab7ac4bc10a609d00569f8c56aLennart Poettering Specifies the owner type of the key. The value of
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering <code class="option">nametype</code> must either be ZONE (for a DNSSEC
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering zone key (KEY/DNSKEY)), HOST or ENTITY (for a key associated with
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering a host (KEY)),
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering USER (for a key associated with a user(KEY)) or OTHER (DNSKEY).
faa133f3aa7a18f26563dc5d6b95898cb315c37aLennart Poettering These values are case insensitive.
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering Compatibility mode: generates an old-style key, without
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering any metadata. By default, <span><strong class="command">dnssec-keyfromlabel</strong></span>
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering will include the key's creation date in the metadata stored
faa133f3aa7a18f26563dc5d6b95898cb315c37aLennart Poettering with the private key, and other dates may be set there as well
faa133f3aa7a18f26563dc5d6b95898cb315c37aLennart Poettering (publication date, activation date, etc). Keys that include
faa133f3aa7a18f26563dc5d6b95898cb315c37aLennart Poettering this data may be incompatible with older versions of BIND; the
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering <code class="option">-C</code> option suppresses them.
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering<dt><span class="term">-c <em class="replaceable"><code>class</code></em></span></dt>
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering Indicates that the DNS record containing the key should have
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering the specified class. If not specified, class IN is used.
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering<dt><span class="term">-f <em class="replaceable"><code>flag</code></em></span></dt>
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering Set the specified flag in the flag field of the KEY/DNSKEY record.
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering The only recognized flags are KSK (Key Signing Key) and REVOKE.
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering Generate a key, but do not publish it or sign with it. This
ce736ace37399f3dc45e6981852881a6f2448de2Lennart Poettering option is incompatible with -P and -A.
ec2c5e4398f9d65e5dfe61530f2556224733d1e6Lennart Poettering Prints a short summary of the options and arguments to
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering <span><strong class="command">dnssec-keyfromlabel</strong></span>.
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering<dt><span class="term">-K <em class="replaceable"><code>directory</code></em></span></dt>
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering Sets the directory in which the key files are to be written.
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering Generate KEY records rather than DNSKEY records.
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering<dt><span class="term">-p <em class="replaceable"><code>protocol</code></em></span></dt>
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering Sets the protocol value for the key. The protocol
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering is a number between 0 and 255. The default is 3 (DNSSEC).
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering Other possible values for this argument are listed in
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering RFC 2535 and its successors.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<dt><span class="term">-t <em class="replaceable"><code>type</code></em></span></dt>
51323288fc628a5cac50914df915545d685b793eLennart Poettering Indicates the use of the key. <code class="option">type</code> must be
51323288fc628a5cac50914df915545d685b793eLennart Poettering one of AUTHCONF, NOAUTHCONF, NOAUTH, or NOCONF. The default
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering is AUTHCONF. AUTH refers to the ability to authenticate
ce736ace37399f3dc45e6981852881a6f2448de2Lennart Poettering data, and CONF the ability to encrypt data.
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering<dt><span class="term">-v <em class="replaceable"><code>level</code></em></span></dt>
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering Sets the debugging level.
ce736ace37399f3dc45e6981852881a6f2448de2Lennart Poettering Allows DNSSEC key files to be generated even if the key ID
ce736ace37399f3dc45e6981852881a6f2448de2Lennart Poettering would collide with that of an existing key, in the event of
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering either key being revoked. (This is only safe to use if you
ce736ace37399f3dc45e6981852881a6f2448de2Lennart Poettering are sure you won't be using RFC 5011 trust anchor maintenance
ce736ace37399f3dc45e6981852881a6f2448de2Lennart Poettering with either of the keys involved.)
309e9d86f0e7f9c5f0a2a09227bdfdb3174d4436Lennart Poettering<a name="id2612583"></a><h2>TIMING OPTIONS</h2>
8ba9fd9cee0eef572f7b3ed7a8c3ed31160e93d3Lennart Poettering Dates can be expressed in the format YYYYMMDD or YYYYMMDDHHMMSS.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering If the argument begins with a '+' or '-', it is interpreted as
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering an offset from the present time. For convenience, if such an offset
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering is followed by one of the suffixes 'y', 'mo', 'w', 'd', 'h', or 'mi',
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering then the offset is computed in years (defined as 365 24-hour days,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering ignoring leap years), months (defined as 30 24-hour days), weeks,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering days, hours, or minutes, respectively. Without a suffix, the offset
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering is computed in seconds.
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering<dt><span class="term">-P <em class="replaceable"><code>date/offset</code></em></span></dt>
309e9d86f0e7f9c5f0a2a09227bdfdb3174d4436Lennart Poettering Sets the date on which a key is to be published to the zone.
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering After that date, the key will be included in the zone but will
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering not be used to sign it. If not set, and if the -G option has
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering not been used, the default is "now".
309e9d86f0e7f9c5f0a2a09227bdfdb3174d4436Lennart Poettering<dt><span class="term">-A <em class="replaceable"><code>date/offset</code></em></span></dt>
309e9d86f0e7f9c5f0a2a09227bdfdb3174d4436Lennart Poettering Sets the date on which the key is to be activated. After that
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering date, the key will be included in the zone and used to sign
ad867662936a4c7ab2c7116d804c272338801231Lennart Poettering it. If not set, and if the -G option has not been used, the
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering default is "now".
da927ba997d68401563b927f92e6e40e021a8e5cMichal Schmidt<dt><span class="term">-R <em class="replaceable"><code>date/offset</code></em></span></dt>
2d4c5cbc0ed3ccb09dc086a040088b454c22c644Lennart Poettering Sets the date on which the key is to be revoked. After that
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering date, the key will be flagged as revoked. It will be included
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering in the zone and will be used to sign it.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<dt><span class="term">-U <em class="replaceable"><code>date/offset</code></em></span></dt>
51323288fc628a5cac50914df915545d685b793eLennart Poettering Sets the date on which the key is to be retired. After that
51323288fc628a5cac50914df915545d685b793eLennart Poettering date, the key will still be included in the zone, but it
51323288fc628a5cac50914df915545d685b793eLennart Poettering will not be used to sign it.
51323288fc628a5cac50914df915545d685b793eLennart Poettering<dt><span class="term">-D <em class="replaceable"><code>date/offset</code></em></span></dt>
51323288fc628a5cac50914df915545d685b793eLennart Poettering Sets the date on which the key is to be deleted. After that
51323288fc628a5cac50914df915545d685b793eLennart Poettering date, the key will no longer be included in the zone. (It
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering may remain in the key repository, however.)
51323288fc628a5cac50914df915545d685b793eLennart Poettering<a name="id2614524"></a><h2>GENERATED KEY FILES</h2>
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering When <span><strong class="command">dnssec-keyfromlabel</strong></span> completes
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering it prints a string of the form <code class="filename">Knnnn.+aaa+iiiii</code>
51323288fc628a5cac50914df915545d685b793eLennart Poettering to the standard output. This is an identification string for
51323288fc628a5cac50914df915545d685b793eLennart Poettering the key files it has generated.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<div class="itemizedlist"><ul type="disc">
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<li><p><code class="filename">nnnn</code> is the key name.
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<li><p><code class="filename">aaa</code> is the numeric representation
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering of the algorithm.
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering<li><p><code class="filename">iiiii</code> is the key identifier (or
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<p><span><strong class="command">dnssec-keyfromlabel</strong></span>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering creates two files, with names based
0dd25fb9f005d8ab7ac4bc10a609d00569f8c56aLennart Poettering on the printed string. <code class="filename">Knnnn.+aaa+iiiii.key</code>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering contains the public key, and
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering <code class="filename">Knnnn.+aaa+iiiii.private</code> contains the
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering The <code class="filename">.key</code> file contains a DNS KEY record
801ad6a6a9cd8fbd58b9f9c27f20dbb3c87d47ddLennart Poettering can be inserted into a zone file (directly or with a $INCLUDE
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering The <code class="filename">.private</code> file contains
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering algorithm-specific
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering fields. For obvious security reasons, this file does not have
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering general read permission.
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering<p><span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering <em class="citetitle">BIND 9 Administrator Reference Manual</em>,
966c66e34940001a40806142ecebaae61b478444Lennart Poettering<p><span class="corpauthor">Internet Systems Consortium</span>
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering<table width="100%" summary="Navigation footer">
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering<a accesskey="p" href="man.dnssec-dsfromkey.html">Prev</a>�</td>
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-keygen.html">Next</a>
74b2466e14a1961bf3ac0e8a60cfaceec705bd59Lennart Poettering<td width="40%" align="left" valign="top">
4afd3348c7506dd1d36305b7bcb9feb8952b9d6bLennart Poettering<span class="application">dnssec-dsfromkey</span>�</td>
23b298bce75a0d1f4f15f34458af9678b4a30c3aLennart Poettering<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
45ec7efb6c2560c80dfa752bc9d3733749dc52cbLennart Poettering<td width="40%" align="right" valign="top">�<span class="application">dnssec-keygen</span>