I would suggest: tsig-keygen your-key-name
It does not need any options, the defaults are fine. -- Bob Harold On Fri, Apr 10, 2020 at 7:52 PM moo can via bind-users < bind-users@lists.isc.org> wrote: > Hello, > > For educational purpose I need to setup an DDNS between DCHPD and BIND. > > Everywhere, debian, zytrax, freeipa, veritas ... use dnssec-keygen. > > Zytrax: > dnssec-keygen -a HMAC-SHA512 -b 512 -n HOST keyname > > Veritas: > dnssec-keygen -a HMAC-MD5 -b 128 -n HOST example.com. > > Debian: > dnssec-keygen -a HMAC-MD5 -b 128 -r /dev/urandom -n USER DDNS_UPDATE > > HMAC-* support seems to have been removed from dnssec-keygen > https://gitlab.isc.org/fanf/bind9/commit/80788e72d0698f93e92a0e8f1aa60ff982623997 > > It seems we need to use tsig-keygen but it is not clear. > > I try to follow this guide from debian > https://wiki.debian.org/DDNS#How_to_set_up_DDNS as example but there is no -n > USER or -n HOST option with tsig-keygen. > > I do not find any clear example. > > Thanks you in advance for your help. > > Kind Regards > Fabien > > > > > > > > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users >
_______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users