bin/dnssec/dnssec-keygen.rst

22 :program:`dnssec-keygen` [**-3**] [**-A** date/offset] [**-a** algorithm] [**-b** keysize] [**-C**]…
46    This option uses an NSEC3-capable algorithm to generate a DNSSEC key. If this
47    option is used with an algorithm that has both NSEC and NSEC3
49    ``dnssec-keygen -3 -a RSASHA1`` specifies the NSEC3RSASHA1 algorithm.
51 ``-a algorithm``
52    This option selects the cryptographic algorithm. For DNSSEC keys, the value of
53    ``algorithm`` must be one of RSASHA1, NSEC3RSASHA1, RSASHA256,
64    option, which copies the algorithm from the predecessor key.
72    depends on the algorithm used: RSA keys must be between 1024 and 4096
176    The name, algorithm, size, and type of the key are set to match
189    DNSSEC algorithm, but it can be overridden to KEY for use with
279 -  ``aaa`` is the numeric representation of the algorithm.
292 The ``.private`` file contains algorithm-specific fields. For obvious