mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-30 14:07:59 +00:00
Updated to reflect the existence of the entropy API
This commit is contained in:
@@ -15,11 +15,10 @@ The tools for generating DNSSEC keys and signatures are now in the
|
|||||||
bin/dnssec directory. Documentation for these programs can be found
|
bin/dnssec directory. Documentation for these programs can be found
|
||||||
in doc/arm/Bv9ARM.4.html.
|
in doc/arm/Bv9ARM.4.html.
|
||||||
|
|
||||||
The random data used in generating DNSSEC keys and signatures
|
The random data used in generating DNSSEC keys and signatures comes from
|
||||||
currently contains a significant pseudo-random component and is
|
/dev/random if the OS supports that. Otherwise, the DNSSEC tools must
|
||||||
therefore not cryptographically strong. We do not recommend that keys
|
be fed a file containing entropy/random data. Future releases will allow
|
||||||
generated by the key generation tools in this distribution be used in
|
entropy to be entered manually from the keyboard.
|
||||||
production.
|
|
||||||
|
|
||||||
|
|
||||||
Serving secure zones
|
Serving secure zones
|
||||||
@@ -69,4 +68,4 @@ an update occurs. Advanced access control is possible using the
|
|||||||
"update-policy" statement in the zone definition.
|
"update-policy" statement in the zone definition.
|
||||||
|
|
||||||
|
|
||||||
$Id: dnssec,v 1.2 2000/05/23 16:41:25 gson Exp $
|
$Id: dnssec,v 1.3 2000/06/14 23:03:21 bwelling Exp $
|
||||||
|
Reference in New Issue
Block a user