dnssec-keygen

DNSSEC key-generation tool

Syntax:

dnssec-keygen {-a algorithm} {-b keysize} {-n nametype}
              [-c class] [-e] [-f flag] [-g generator]
              [-h] [-k] [-p protocol] [-r randomdev]
              [-s strength] [-t type] [-v level] {name}

Runs on:

Neutrino

Options:

See http://netbsd.gw.com/cgi-bin/man-cgi?dnssec-keygen++NetBSD-5.0 in the NetBSD documentation.

Description:

The dnssec-keygen utility generates keys for DNSSEC (Secure DNS), as defined in RFC 2535 and RFC 4034. It can also generate keys for use with TSIG (Transaction Signatures), as defined in RFC 2845. For more information, see http://netbsd.gw.com/cgi-bin/man-cgi?dnssec-keygen++NetBSD-5.0 in the NetBSD documentation.

See also:

dnssec-dsfromkey, dnssec-signzone in the NetBSD documentation