February 23, 2003
Apricot 2003, Taipei, (.TW)
Slide
52
Generating a SIG(0) key
¥
dnssec-keygen -a RSA -b 1024 -n host
one.dynamic.myzone.example.
¥
The *.key file is added to the zone file
¥
cat Kone*.key >> dynamic.myzone.example.
¥
The *.private key is needed by
nsupdate
¥
only the "nsupdate -k <file>" will work