[dns-operations] Use of TSIG

Evan Hunt each at isc.org
Wed Jan 3 22:08:28 UTC 2018


On Wed, Jan 03, 2018 at 04:07:51PM -0500, Phillip Hallam-Baker wrote:
> As folk who are following a certain FB page know, I am configuring a BIND
> server direct for the first time in a while and so just for the heck of it,
> I decided to configure using only sources that I find on the Web that are
> not actual manuals.

I'm not sure why you decided to do that, but I can tell you that what
you're reading is massively out of date.  If you want to generate a TSIG
key, use "tsig-keygen". It uses an appropriate source of randomness and
produces output in a format suitable for use in named.conf.

What was the source of the information you found?

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.



More information about the dns-operations mailing list