2019-03-31 06:49:47 -04:00
|
|
|
.. Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
|
|
|
..
|
|
|
|
|
.. SPDX-License-Identifier: MPL-2.0
|
2021-06-03 02:37:05 -04:00
|
|
|
..
|
2019-03-31 06:49:47 -04:00
|
|
|
.. This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
|
.. License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
|
.. file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
2021-06-03 02:37:05 -04:00
|
|
|
..
|
2019-03-31 06:49:47 -04:00
|
|
|
.. See the COPYRIGHT file distributed with this work for additional
|
|
|
|
|
.. information regarding copyright ownership.
|
|
|
|
|
|
|
|
|
|
.. highlight: console
|
|
|
|
|
|
2022-03-03 09:32:35 -05:00
|
|
|
.. iscman:: nsec3hash
|
2022-03-02 10:36:34 -05:00
|
|
|
.. program:: nsec3hash
|
2019-03-31 06:49:47 -04:00
|
|
|
.. _man_nsec3hash:
|
|
|
|
|
|
|
|
|
|
nsec3hash - generate NSEC3 hash
|
|
|
|
|
-------------------------------
|
|
|
|
|
|
|
|
|
|
Synopsis
|
|
|
|
|
~~~~~~~~
|
|
|
|
|
|
|
|
|
|
:program:`nsec3hash` {salt} {algorithm} {iterations} {domain}
|
|
|
|
|
|
|
|
|
|
:program:`nsec3hash` **-r** {algorithm} {flags} {iterations} {salt} {domain}
|
|
|
|
|
|
|
|
|
|
Description
|
|
|
|
|
~~~~~~~~~~~
|
|
|
|
|
|
2022-03-03 10:00:43 -05:00
|
|
|
:program:`nsec3hash` generates an NSEC3 hash based on a set of NSEC3
|
2019-03-31 06:49:47 -04:00
|
|
|
parameters. This can be used to check the validity of NSEC3 records in a
|
|
|
|
|
signed zone.
|
|
|
|
|
|
2020-06-03 16:01:17 -04:00
|
|
|
If this command is invoked as ``nsec3hash -r``, it takes arguments in
|
|
|
|
|
order, matching the first four fields of an NSEC3 record followed by the
|
|
|
|
|
domain name: ``algorithm``, ``flags``, ``iterations``, ``salt``, ``domain``. This makes it
|
2019-03-31 06:49:47 -04:00
|
|
|
convenient to copy and paste a portion of an NSEC3 or NSEC3PARAM record
|
|
|
|
|
into a command line to confirm the correctness of an NSEC3 hash.
|
|
|
|
|
|
|
|
|
|
Arguments
|
|
|
|
|
~~~~~~~~~
|
|
|
|
|
|
2022-03-02 09:12:17 -05:00
|
|
|
.. option:: salt
|
|
|
|
|
|
2020-06-03 16:01:17 -04:00
|
|
|
This is the salt provided to the hash algorithm.
|
2019-03-31 06:49:47 -04:00
|
|
|
|
2022-03-02 09:12:17 -05:00
|
|
|
.. option:: algorithm
|
|
|
|
|
|
2020-06-03 16:01:17 -04:00
|
|
|
This is a number indicating the hash algorithm. Currently the only supported
|
2019-03-31 06:49:47 -04:00
|
|
|
hash algorithm for NSEC3 is SHA-1, which is indicated by the number
|
|
|
|
|
1; consequently "1" is the only useful value for this argument.
|
|
|
|
|
|
2022-03-02 09:12:17 -05:00
|
|
|
.. option:: flags
|
|
|
|
|
|
2020-06-03 16:01:17 -04:00
|
|
|
This is provided for compatibility with NSEC3 record presentation format, but
|
|
|
|
|
is ignored since the flags do not affect the hash.
|
2019-03-31 06:49:47 -04:00
|
|
|
|
2022-03-02 09:12:17 -05:00
|
|
|
.. option:: iterations
|
|
|
|
|
|
2020-06-03 16:01:17 -04:00
|
|
|
This is the number of additional times the hash should be performed.
|
2019-03-31 06:49:47 -04:00
|
|
|
|
2022-03-02 09:12:17 -05:00
|
|
|
.. option:: domain
|
|
|
|
|
|
2020-06-03 16:01:17 -04:00
|
|
|
This is the domain name to be hashed.
|
2019-03-31 06:49:47 -04:00
|
|
|
|
|
|
|
|
See Also
|
|
|
|
|
~~~~~~~~
|
|
|
|
|
|
|
|
|
|
BIND 9 Administrator Reference Manual, :rfc:`5155`.
|