manually generating tsig keys

2009-02-08 Thread Justin T Pryzby
ARM9.5 still mentions manual generation of TSIG data:
https://www.isc.org/software/bind/documentation/arm95#tsig

Is there any advtantage to using -keygen ?  ISTR some mention of an
algorithm used to minimize the possibility of collisions.  Or is that
true for any key used with HMAC?

Justin
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: manually generating tsig keys

2009-02-08 Thread Mark Andrews

In message 20090206194146.ga24...@norchemlab.com, Justin T Pryzby writes:
 ARM9.5 still mentions manual generation of TSIG data:
 https://www.isc.org/software/bind/documentation/arm95#tsig
 
 Is there any advtantage to using -keygen ?

It really depends  on how you are going to use the key.
For zone transfers there is no benefit as you have to copy
and paste at both ends.  For nsupdate there is benefit as
you can use nsupdate -k keyfile.

  ISTR some mention of an
 algorithm used to minimize the possibility of collisions.  Or is that
 true for any key used with HMAC?
 
 Justin
 ___
 bind-users mailing list
 bind-users@lists.isc.org
 https://lists.isc.org/mailman/listinfo/bind-users
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: mark_andr...@isc.org
___
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users