I am signing a test zone of okstate.edu and am having some
trouble with the command. The KSK went fine but when I try:
dnssec-keygen -K /var/named/etc/namedb/dynamic/okstate.edu -s 7 RSASHA1 -b
1024 -n ZONE okstate.edu
I get:
dnssec-keygen: fatal: extraneous arguments
Originally, the example I had used had no value after
-s, but that produced a very informative error telling me I
needed a number from 0 to 15. A look at the man page says this
number apparently does nothing quite yet, but it is a strength
value so one day, it may obfuscate the key, but right now, it is
a place holder. So, what should I have in that particular
command to make it generate the ZSK?
Thank you.
Martin McCormick
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
