2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 14:07:59 +00:00

Updated to reflect the existence of the entropy API

This commit is contained in:
Brian Wellington
2000-06-14 23:03:21 +00:00
parent b5f24a6988
commit 9dc499f133

View File

@@ -15,11 +15,10 @@ The tools for generating DNSSEC keys and signatures are now in the
bin/dnssec directory. Documentation for these programs can be found bin/dnssec directory. Documentation for these programs can be found
in doc/arm/Bv9ARM.4.html. in doc/arm/Bv9ARM.4.html.
The random data used in generating DNSSEC keys and signatures The random data used in generating DNSSEC keys and signatures comes from
currently contains a significant pseudo-random component and is /dev/random if the OS supports that. Otherwise, the DNSSEC tools must
therefore not cryptographically strong. We do not recommend that keys be fed a file containing entropy/random data. Future releases will allow
generated by the key generation tools in this distribution be used in entropy to be entered manually from the keyboard.
production.
Serving secure zones Serving secure zones
@@ -69,4 +68,4 @@ an update occurs. Advanced access control is possible using the
"update-policy" statement in the zone definition. "update-policy" statement in the zone definition.
$Id: dnssec,v 1.2 2000/05/23 16:41:25 gson Exp $ $Id: dnssec,v 1.3 2000/06/14 23:03:21 bwelling Exp $