xref: /netbsd-src/external/mpl/bind/dist/bin/confgen/tsig-keygen.rst (revision d16b7486a53dcb8072b60ec6fcb4373a2d0c27b7)
1.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
2..
3.. SPDX-License-Identifier: MPL-2.0
4..
5.. This Source Code Form is subject to the terms of the Mozilla Public
6.. License, v. 2.0.  If a copy of the MPL was not distributed with this
7.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
8..
9.. See the COPYRIGHT file distributed with this work for additional
10.. information regarding copyright ownership.
11
12.. highlight: console
13
14.. BEWARE: Do not forget to edit also ddns-confgen.rst!
15
16.. _man_tsig-keygen:
17
18tsig-keygen - TSIG key generation tool
19--------------------------------------
20
21Synopsis
22~~~~~~~~
23:program:`tsig-keygen` [**-a** algorithm] [**-h**] [name]
24
25Description
26~~~~~~~~~~~
27
28``tsig-keygen`` is an utility that generates keys for use in TSIG signing.
29The resulting keys can be used, for example, to secure dynamic DNS updates
30to a zone, or for the ``rndc`` command channel.
31
32A domain name can be specified on the command line to be used as the name
33of the generated key. If no name is specified, the default is ``tsig-key``.
34
35Options
36~~~~~~~
37
38``-a algorithm``
39   This option specifies the algorithm to use for the TSIG key. Available
40   choices are: hmac-md5, hmac-sha1, hmac-sha224, hmac-sha256, hmac-sha384,
41   and hmac-sha512. The default is hmac-sha256. Options are
42   case-insensitive, and the "hmac-" prefix may be omitted.
43
44``-h``
45   This option prints a short summary of options and arguments.
46
47See Also
48~~~~~~~~
49
50:manpage:`nsupdate(1)`, :manpage:`named.conf(5)`, :manpage:`named(8)`, BIND 9 Administrator Reference Manual.
51