From 9e109191cc362ebc064bf84c45339d4b85ec33f1 Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Fri, 6 Aug 2021 16:34:20 +0200 Subject: [PATCH] Fix missing iterations value in dnssec-guide In the "Migrating from NSEC to NSEC3" section, it says: dnssec-policy "standard" { nsec3param iterations optout no salt-length 16; }; There should be an integer after "iterations". Based on the following text, the number of iterations should be 10. --- doc/dnssec-guide/recipes.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/dnssec-guide/recipes.rst b/doc/dnssec-guide/recipes.rst index 91d14be07f..2c177c3074 100644 --- a/doc/dnssec-guide/recipes.rst +++ b/doc/dnssec-guide/recipes.rst @@ -800,7 +800,7 @@ DNSSEC policy, using 10 iterations, no opt-out, and a random string that is :: dnssec-policy "standard" { - nsec3param iterations optout no salt-length 16; + nsec3param iterations 10 optout no salt-length 16; }; Then reconfigure the server with ``rndc``. You can tell that it worked if you