Edit: /usr/sbin/dnssec-keygen (48584B)
ELF > N @ H @ 8
@ @ @ @ H' H' 0 0 0 I I & & P @ @ @ 8 8 8 0 0 h h h D D Std 8 8 8 0 0 Ptd , , , Qtd Rtd /lib64/ld-linux-x86-64.so.2 GNU GNU 5)b _)"U] GNU o D 4(
@8 8- ` M@ o q r u y { } =Ck|3rv @R |bqX K|j C x\Llk]V9BE=2bKl s& P
: Uez=fҐb5Mf & ] 3 @
P F " k m F # z U k N r ' F W w ' ^ _ \ I 5 w I g } g 0 7 u : 4 # C 1 , n [ 0\ " b 0< 0 4 @` Z ( W E @ E pZ y a U 3 U N & = X 8 T V _ ^ n P_ h ' V - n `^ } Y ` : `X e Px ` _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable __cxa_finalize __libc_start_main stderr fwrite __fprintf_chk exit fflush __vfprintf_chk fputc isc_result_totext __stack_chk_fail dns_name_format dns_secalg_format __snprintf_chk isc_log_create isc_log_setcontext dns_log_init dns_log_setcontext isc_log_settag isc_log_createchannel isc_log_usechannel isc_error_runtimecheck isc_log_destroy isc_assertion_failed strcasecmp strtol strspn strlcpy dns_time64_fromtext strlcat strlen dns_rdataclass_fromtext dns_dsdigest_fromtext qsort isc_dir_init isc_dir_open isc_dir_close dst_key_getprivateformat dst_key_setprivateformat isc_stdtime_get dst_key_settime dst_key_id dst_key_rid dst_key_alg dns_dnssec_findmatchingkeys dns_dnsseckey_destroy dst_key_buildfilename isc_file_exists dst_key_fromnamedfile dst_key_isprivate dst_key_name dst_key_size dst_key_flags dst_key_format dst_key_gettime dst_key_free dst_key_generate dst_key_setbits dst_key_setnum dst_key_setbool dst_key_setttl dst_key_tofile puts dns_fixedname_initname isc_commandline_index dns_rootname dns_name_fromtext dst_algorithm_supported isc_commandline_argument isc_commandline_option dns_result_register isc_commandline_errprint isc_commandline_parse isc_commandline_reset isc_mem_create __ctype_toupper_loc isc_mem_debugging isatty dst_lib_init strcmp cfg_parser_create cfg_type_namedconf cfg_parse_file cfg_map_get cfg_list_first cfg_listelt_value cfg_tuple_get cfg_obj_asstring cfg_kasp_fromconfig dns_kasp_freeze dns_kasp_detach dns_kasp_keys dns_kasp_dnskeyttl dns_kasp_key_algorithm dns_kasp_key_size dns_kasp_key_ksk dns_kasp_key_zsk dns_kasp_key_lifetime cfg_obj_destroy cfg_parser_destroy dst_lib_destroy isc_mem_destroy dns_secalg_fromtext stdout isc_mem_stats cfg_list_next libdns-9.16.23-RH.so libisccfg-9.16.23-RH.so libisc-9.16.23-RH.so libc.so.6 _edata sig_format _IO_stdin_used setfatalcallback isoptarg strtoclass key_collision strtottl set_keyversion strtodsdigest lctx verbose fatal add_dtype vbprintf __data_start _end setup_logging strtokeystate program __bss_start strtotime try_dir check_result check_keyversion cleanup_logging quiet GLIBC_2.4 GLIBC_2.34 GLIBC_2.3.4 GLIBC_2.3 GLIBC_2.2.5 ) ii
[ e ti p ii
| ui N N ( 0 8 ̆ ؆ x
' = > F M O ȿ U п V ؿ b g i x
ȼ м ؼ ( 0 8 @ H P X ` ! h " p # x $ % & ( ) * + , - . Ƚ / н 0 ؽ 1 2 3 4 5 6 7 8 9 : ( ; 0 < 8 ? @ @ H A P B X C ` D h E p G x H I J K L N P Q R S Ⱦ T о W ؾ X Y Z [ \ ] ^ _ ` a ( c 0 d 8 e @ f H h P j X k ` l h m p n HHя HtH 5B %C h h h h h h h h q h a h Q h
A h 1 h ! h
h h h h h h h h h h q h a h Q h A h 1 h ! h h h h h! h" h# h$ h% h& h' q h( a h) Q h* A h+ 1 h, ! h- h. h/ h0 h1 h2 h3 h4 h5 h6 h7 q h8 a h9 Q h: A h; 1 h< ! h= h> h? h@ hA hB hC hD hE hF hG q hH a hI Q hJ A hK 1 hL ! hM hN hO hP hQ hR hS hT hU hV hW q hX a hY Q hZ A h[ 1 h\ ! h] h^ h_ %= D %5 D %- D %% D % D % D %
D % D % D % D % D % D %݅ D %Յ D %ͅ D %Ņ D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D %
D % D % D % D % D % D %݄ D %Մ D %̈́ D %ń D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D %
D % D % D % D % D % D %݃ D %Ճ D %̓ D %Ń D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D AW AVAUATUSHH dH%( H$8 1H$ HD$8 H|$(HƄ$ HDŽ$ DŽ$ IH-\ L=G HÂ L-G mw HLuHւ L- b L5 L=G HD$8HHD$ H$ 'H$ HD$ HD$ D HL 3C
IcD L> H) 1Ht$@HD$@ H89H HD$@8 tH=G] 1H H H H$ qf H
Ht$@H8HT$@$ : u 5H=\ 1 Ƅ$$ Hi
Ht$@H8HT$@$ : u = H=[ 1 D H! H H$ f H H H$ f H H H$ qf H H8 $ M D H
Ht$@H8HT$@$ : uH=YE 1 Ha H0Ht$ Ht$H K R
f$ f. H) 6 H=xZ HP H
Ht$@H8HT$@$ : u^H=Z 1 H H H$5 D H
Ht$@H8HT$@$ : uH=Y 1 HA H HD$ @ H) H5JD L LLD$LD$m $ D H~ H H$ y$ 0 $ " H~ $ H$ H8H# $ $ $ D LLL7 + $ HM~ $ H$ H8H $ H~ H8Y Ƅ$ $ D H} H8H$ yH$ H=B H1 $ $
H} $ H$ H8H $ $ $ D Ƅ$" HA} H HD$ @ LLL5 z $ H
H} $ H$ H8Hs $ Ƅ$% k $ O
$ A
H| $ H$ H8H $ $ $
D Ƅ$! HQ| LL0Lu
H| H5@ Lu
H{ H5@ Lu
H{ LLu
H{ H5@ LH{ @ 1C Ht$H|$8 H- | H|$8H H<$- f$ H$ H 8 H$ H$ Hc H$ H$ W $% ; $ $ $ $ $ $! 4
H5A $ H|$8/ Lt$XHu HD$X HD$P LHD$H HD$PHPz H|$XH$ HHD$f HD$8H|$PHT$`H5@ HD$` H$ L-@ HD$HD$h HDŽ$ HDŽ$ H|$`L$$IMG LsLHD$h HI,HHH HM HT$1LL$hL$ LL$$- H|$hH HD$hL$ H\$hHD$HLl$hMtsLMmXM? HPPIUPHPPH$ HA HHXHJXH@PH@XH9$ H9$ , HLl$hMuH|$HHe ;H' H|$HH|$HƄ$ $ Ll$(H}HƄ$! H߈$ 6H߉$ Hf$ H߈$0 UH߈$1 Ht$8LLH$( H[HzH|$HH|$XHt$L H= H$ J D LH5< LD$
k id=q ] w ) SH p H=0 H Hp H;H0 H1 H; 1H
0 H0 H H=0 H H=0 lH . H=@7 SH 1 H=W7 :H ? H=v7 !H H=o0 H ! H=7 H H=7 H , H=7 H H= 0 H $ H=7 H H= 0 rH; 1H0 H; 1H~7 H; 1H7 qH; 1H7 VH H=/ H ! H=y7 H ! H=7 H H=/ H H=/ H Y H=e7 pH 7 H=7 WH - H=7 >H H=7 %H ) H=7 H H=/ H ) H=7 H H=7 H 6 H=8 H H=$8 H ) H=+8 vH O H=B8 ]H D H=y8 DH K H=8 +H H=C. H H=8 H , H=8 H - H=8 H " H=9 H H=- H E H=8 |H G H=(9 cH D H=W9 JH 5 H=9 1H 7 H=9 H 3 H=9 H D H=9 H / H=: H ? H=): H 6 H=P: H P H=o: H H=, iH 8 H=: P6f D SA* wHOK D8H j DH3 H;[ ATISH Ht$(HT$0HL$8LD$@LL$Ht7)D$P)L$`)T$p)$ )$ )$ )$ )$ dH%( HD$1H Dj Hj H+ HH;1H;HLH$ $ HD$HD$ D$0 HD$H3
NHOj Htп f D DH5 HH5G Hc H>f D iǀQ H D i H D @h H;$ H1D$0 jH;HL HD$dH+%( u H [A\ PXL' HZ) HH|g HH811 AVAUATIUHH8SӺ H dH%( H$ 1L$ IL}" LE0ML( H LP1AVLH$ dH+%( uH []A\A]A^ ATSHHHH g dH%( HD$81H$ HD$ D`DDHT$H]H<$H<$ H<$bHsf H|$H0Hf DH|$ A L%' HD$ H LLD$D$ HD$( HD$H|$11LuAH$HHD$8dH+%( uBHH[A\f. A% Hi5 H=5 `;A HdH%( HD$1HtCHH H$HtHh11:HD$dH+%( u$H D H
& 1Ҿ H=5 ATH5& IHdH%( HD$1GtH5& L4u 1HT$dH+%( u4HA\ HL1sH4$DžuI9tL%H=B& 1w AUH5 & ATUHSHtgH5& HtT1H5 & L-L^ f. It AHt Hkt%HHuHH=% 1 @ A HD[]A\A] @ AWAVAUIH5u% ATIUHSHH8dH%( HD$(1u2H 1HT$(dH+%( H8[]A\A]A^A_ÐH5% LtHtA $0t[-tVH5#% L7IHtNHtHA<$n A|$o A|$w A\$M|$Lo D A|$ u1MO<4APՁ tuHl$ LH4BD4 I Ht$H Hl$A +t?- Ht$I1 Ht$L?HH)fM Ht$I1Ht$L H{ H5# HKzLH=@# 1BLH=# H1ff. UH0dH%( HD$(1HtBH|$HHt$H|$D$u*D$HT$(dH+%( uH0] HH=M# 1# UHH0dH%( HD$(1H|$:Ht$H|$D$uD$HT$(dH+%( uH0]HH=" 1Rf L` 1L09tqt0Ht09u HH=0 1ff D A< H
@L ATUH H $ H( dH%( H$ 1HIH5LHJAąt#H$ dH+%( uH( D]A\fHXa UHHdH%( HD$1HHt$GT$. $uF~AuRHD$dH+%( u=H]f H
! H=H/ CHH=/ 12 HH=/ 1 UHH dH%( HD$1HT$ Ht$|$fu|$ t HsD$~"tHD$dH+%( uKH ]Ã|$ H|$T$1H H
H=`. [f D AWIAVIAUMATUHSHHx dH%( H$h 1HD$ MtA L?LAdLfD$G< H|$D$HD$ HD$( T$HLLD$ H_ HD$ HQ ADL$Ll$L|$t$AHD$H89) E1HD$HH0H HP(HQ(HL$ H Hp0Hr0H@(H@0H9M H;D$(b LHHD$ H Er HP0HD$H HH(HJ(HH(HP0H HQ0HT$ H@(H@0H9 H9D$( LH}HD$ Hu A H$h dH+%( Hx D[]A\A]A^A_f D HD$H8kAHD$H8fA9AfD9l$A fE9AfE9e H\ 8H[ L$EH, H81HD$HH0HZf D H;D$( HP(HL$ HT$(HHH9 HH0HL$ 9 Hl$`HL$ LL Hl$(D$ !fuBHD$0 HD$8 HD$@HD$HHD$P D$X HA H
d H=* H
^ H=* H
X H=* HD$Ht HZ 8
H$Z L$ H H81 D E1 H9D$(u~HH(HL$(] HT$ bf D H
j H=) H
~ # H=) H
x # H=) H
# H=) )f AWIAVAUATIԺ USHH \dH%( H$ 1H$ HD$@ HHD$(HD$H I?H
A` A\ EG@EB I( I0 A A A A A A A IwLD$HHٺ F H|$H H|$HL$ H|$HHH|$HAG\?H|$HAG@QH|$H LA|HD$PH|$HHt$AG` ' H)W M H- HHV H81NAw@ = v
A Mw(M H5l L] AOLfA I fE oDA< Df% fD$ f= Df% f= A T$
A
DE1H D$H$ ED$P!fuBLd$@HD$ HD$XHD$` HD$h HD$pHD$xHDŽ$ Ƅ$ LA t |$ + AGHj EDAW@Aw\ATHSEOEw85AWLс L$ H5 LL$ tH5 LyL$ M fA I mH IGZfA Aw<+AG< DAO@ ADH=~% 1 A` H$ `L-IN HIcE M4LLt$XLD$P!fuBD$`D$d HD$h HD$pHD$xHDŽ$ Ƅ$ VE11HD$dHD$PHD$HHM H~ A\ AG\A < t< AG\f D Mg0Mk AGO` H5 L H5| L H5l LW Eg@EyAG@ A H5 LT$ uT$ O I H IGTAOL &Ht$(H= 1 AG` AG@ AG@ Aw@F= H= 1if Aw@ = H@H= 15 D E1E_@E A AG`A A Awh AƇ AOdAGl9sH= 1f. E1<<
v
<f D <AG\<
tv
<:U <uBHuK AG@ DEHJ H H81_<vH= 1 D A AOdufA AOhfE AGlkH5t LL$
L$ LH=W 1A @ XH=" 1wAWlAƇ )AWhAWl)9 AOdyL$ HDD$ L\|$ HT$(LH=L! H1
LH=" 1H5
LELH= 1 @ H=!! 1LH=
1LH=G 1H|$HL$ D$ L|$ LH=" H1]H|$@L$ D$ L|$ 趿LH=V
H1"H=S 1H= 1H= 1H= 1H=k 1H=5 1H=w 1H= 1H=C 1LH= 1L$PLH=] 1~I7H= oI7H= H1THt$(H=P 1AH= 13H= 1%H= 1萾H=
HIcE I41Ht$(H=
_H=@! H1iLH= 1 AVAUATL%GG UHSM,$HHLA1Et[]A\A]A^ D L59G IcHHHtI$A []A\A]A^fHF Hx M D H(G HHF H81\IcHH HH Usage:
%s [options] name
9.16.23-RH Version: %s
name: owner of the key
Options:
-a :
ED25519 | ED448 | DH
-b :
RSASHA1: [1024..%d]
DH: [128..4096]
ED25519: ignored
ED448: ignored
-E :
-h: print usage and exit
Timing options:
Output:
%s: fatal: time value %s is invalid %s: %s %s
%s/%s/%d stderr logp != ((void *)0) none never TTL must be numeric hidden unknown key state %s 0123456789 000000 time value %s is invalid: %s unknown class %s unknown DS algorithm %s major <= 1 Key ID %d exists
(matchkeys).tail == (key) (matchkeys).head == (key) (matchkeys).head != (key) (matchkeys).tail != (key) invalid key name %s: %s unsupported algorithm: %s NOAUTH NOCONF NOAUTHCONF invalid type %s Invalid keyfile %s: %s %s is not a private key RSA key size %d out of range DH key size %d out of range no nametype specified zone host entity user invalid KEY nametype %s other invalid DNSKEY nametype %s invalid DNSKEY protocol: %d Generating key pair. failed to write key %s: %s
%s: missing argument -%c %s
record trace usage size mctx unknown flag '%s' -g requires a positive number cannot open directory %s: %s DNSKEY unknown type '%s' sync dnskey -P specified more than once -A specified more than once -R specified more than once -I specified more than once -D specified more than once %s: invalid argument -%c
%s: unhandled option -%c
could not initialize dst: %s /etc/named.conf extraneous arguments no algorithm specified unknown algorithm %s default dnssec-policy name kasp != ((void *)0) (kasplist).tail == (kasp) (kasplist).head == (kasp) (kasplist).head != (kasp) (kasplist).tail != (kasp) rumoured omnipresent unretentive dnssec-keygen -K : write keys into directory
-k : generate keys for dnssec-policy
-l : configuration file with dnssec-policy statement
RSASHA1 | NSEC3RSASHA1 |
RSASHA256 | RSASHA512 |
ECDSAP256SHA256 | ECDSAP384SHA384 |
-3: use NSEC3-capable algorithm
NSEC3RSASHA1: [1024..%d]
RSASHA256: [1024..%d]
RSASHA512: [1024..%d]
ECDSAP256SHA256: ignored
ECDSAP384SHA384: ignored
(key size defaults are set according to
algorithm and usage (ZSK or KSK)
-n : ZONE | HOST | ENTITY | USER | OTHER
(DNSKEY generation defaults to ZONE)
-c : (default: IN)
-d (0 => max, default)
name of an OpenSSL engine to use
-f : KSK | REVOKE
-g : use specified generator (DH only)
-L : default key TTL
-p : (default: 3 [dnssec])
-s : strength value this key signs DNS records with (default: 0)
-T : DNSKEY | KEY (default: DNSKEY; use KEY for SIG(0))
-t : AUTHCONF | NOAUTHCONF | NOAUTH | NOCONF (default: AUTHCONF)
-m :
usage | trace | record | size | mctx
-v : set verbosity level (0 - 10)
-V: print version information
-P date/[+-]offset/none: set key publication date (default: now)
-P sync date/[+-]offset/none: set CDS and CDNSKEY publication date
-A date/[+-]offset/none: set key activation date (default: now)
-R date/[+-]offset/none: set key revocation date
-I date/[+-]offset/none: set key inactivation date
-D date/[+-]offset/none: set key deletion date
-D sync date/[+-]offset/none: set CDS and CDNSKEY deletion date
-G: generate key only; do not set -P or -A
-C: generate a backward-compatible key, omitting all dates
-S : generate a successor to an existing key
-i : prepublication interval for successor key (default: 30 days)
K++.key, K++.private
'%s' ambiguous: use 'mi' for minutes or 'mo' for months isc_log_usechannel(logconfig, "stderr", ((void *)0), ((void *)0)) == 0 ../../../bin/dnssec/dnssectool.c too many -a digest type arguments Key %s has incompatible format version %d.%d, use -f to force upgrade to new version. Key %s has incompatible format version %d.%d, use -f to force downgrade to current version. Key ID %d could collide with %d
algorithm %s is incompatible with NSEC3, do not use the -3 option key size not specified; defaulting to %d
key size not specified (-b option) Activation and publication dates are closer together than the
prepublication interval. Time until activation is shorter than the
prepublication interval. -S and -a cannot be used together -S and -b cannot be used together -S and -n cannot be used together -S and -t cannot be used together -S and -P cannot be used together -S and -A cannot be used together -S and -3 cannot be used together -S and -C cannot be used together -S and -G cannot be used together Key %s has incompatible format version %d.%d
It is not possible to generate a successor key. Key %s has no activation date.
You must use dnssec-settime -A to set one before generating a successor. Key %s has no inactivation date.
You must use dnssec-settime -I to set one before generating a successor. Key %s becomes inactive
sooner than the prepublication period for the new key ends.
Either change the inactivation date with dnssec-settime -I,
or use the -i option to set a shorter prepublication interval. %s: WARNING: Key %s has no removal date;
it will remain in the zone indefinitely after rollover.
You can use dnssec-settime -D to change this.
specified DH generator for a non-DH key specified null key with non-zero size specified null key with signing authority a key with algorithm %s cannot be a zone key failed to generate key %s/%s: %s
cannot use -G together with -P or -A options %s: warning: Key is not flagged as a KSK, but -R was used. Revoking a ZSK is legal, but undefined.
%s: warning: Key is scheduled to be deleted before it is scheduled to be made inactive.
cannot use -C together with -P, -A, -R, -I, -D, or -G options cannot generate a null key due to possible key ID collision %s: %s already exists, or might collide with another key upon revokation. Generating a new key
failed to update predecessor %s: %s
dst_key_buildfilename returned: %s
3A:a:b:Cc:D:d:E:eFf:Gg:hI:i:K:k:L:l:m:n:P:p:qR:r:S:s:T:t:v:V -b requires a non-negative number -d requires a non-negative number phased-out option -e (was 'use (RSA) large exponent')
-p must be followed by a number [0..255] The -r option has been deprecated.
System random data is always used.
-s must be followed by a number [0..15] -v must be followed by a number -P sync specified more than once -D sync specified more than once the key name was not specified -k and -n cannot be used together -k and -S cannot be used together -k and -C cannot be used together -k and -L cannot be used together -k and -i cannot be used together -k and -b cannot be used together -k and -f cannot be used together -k and -T KEY cannot be used together -k and -3 cannot be used together cfg_parser_create(mctx, lctx, &parser) == 0 ../../../bin/dnssec/dnssec-keygen.c unable to load dnssec-policy '%s' from '%s' failed to configure dnssec-policy '%s': %s failed to load dnssec-policy '%s' dnssec-policy '%s' has no keys configured t$tkb; %wF%{3KieJ c]tbD5X5Hh u0mF}Bfn<ȟ Nx ՝%\>flYH= ɼ 7k rWxt92 4sSVqgyrnvDn;2DROLo VhOO I9 SE==,=&kR+8a?puUI= |]G'wP>~a* ړC*Ճҫq_ӄ{@:9{q./DZ#0|aq 2t#l9k~FYqyW>RyʿA ©='"9mXFG]6ݜ.73Nu э{ Q.an ]Y$ {]ZZm5<
;, 4;^<ݴ,>(\HtםY[ < `i~O&
&K5'Z 74bD5/]"R%I R
H&';<-;~,6ۈ @&0c op^6^.p:ML\ zJ!,lhv0DJy( d>k'پ
.업۰P$e_܃ @}}PFSb$͏
LzQH
L9 Lb?i?0( /A+H {XJ5/v5T'i;u t`ћ\ܤ ikNy$2 SF2AeÐ?pْlѷD0&U
W$8e gnp'=\;Lȳ?)I%MF1]elqR yB
,EⰍ ^}0 J
O & sg YZ .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .got .data .bss .gnu_debuglink .gnu_debugdata 8 8 0 & h h $ 9 G o Q h
Y a o n o ` } ( B H H 0 0 0 0 06 06 0< 0< < y y
, , , @ @ @ ` ` 0
4 D (