key.html revision 9bff67898d55cddfcec9ce30cc2b1bb6211ec691
4632N/A<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
4632N/A<!--
4632N/A - Copyright (C) 1999, 2000 Internet Software Consortium.
4632N/A -
4632N/A - Permission to use, copy, modify, and distribute this software for any
4632N/A - purpose with or without fee is hereby granted, provided that the above
4632N/A - copyright notice and this permission notice appear in all copies.
4632N/A -
4632N/A - THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS
4632N/A - ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
4632N/A - OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE
4632N/A - CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
4632N/A - DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
4632N/A - PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
4632N/A - ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
4632N/A - SOFTWARE.
4632N/A-->
4632N/A
4632N/A<HTML>
4632N/A<HEAD>
4632N/A <TITLE>BIND key Statement</TITLE>
4632N/A</HEAD>
4632N/A
4632N/A<BODY>
4632N/A<H2>BIND Configuration File Guide--<CODE>key</CODE> Statement</H2>
4632N/A
4632N/A<HR>
4632N/A
4632N/A<A NAME="Syntax"><H3>Syntax</H3></A>
4632N/A
4632N/A<PRE>
4632N/Akey <VAR>key_id</VAR> {
4632N/A algorithm <VAR>algorithm_id</VAR>;
4632N/A secret <VAR>secret_string</VAR>;
4632N/A};
4632N/A</PRE>
4632N/A
4632N/A<HR>
4632N/A
<A NAME="Usage"><H3>Definition and Usage</H3></A>
<P>The <CODE>key</CODE> statement defines a key ID which can be used
in a <A HREF="server.html"><CODE>server</CODE></A> statement to
associate an authentication method with a particular name server.
<P>A key ID must be created with the <CODE>key</CODE>
statement before it can be used in a <CODE>server</CODE>
definition or an address match list.</P>
<P>The <VAR>algorithm_id</VAR> is a string that specifies a
security/authentication algorithm.
<VAR>secret_string</VAR> is the secret to be used by the algorithm,
and is treated as a base-64 encoded string.
<P>The <CODE>key</CODE> statement is intended for use in transaction
security. Unless included in a <A HREF="server.html"><CODE>server</CODE></A>
statement, it is not used to sign any requests. It is used to verify
requests matching the <VAR>key_id</VAR> and <VAR>algorithm_id</VAR>,
and sign replies to those requests.
<HR>
<CENTER><P>[ <A HREF="config.html">BIND Config. File</A>
| <A HREF="http://www.vix.com/isc/bind.html">BIND Home</A>
| <A HREF="http://www.isc.org">ISC</A> ]</P></CENTER>
<HR>
<ADDRESS>
Last Updated: $Id: key.html,v 1.2 2000/06/21 23:50:35 tale Exp $
</ADDRESS>
</BODY>
</HTML>