From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Thu, 4 Apr 2024 13:15:55 +0000 (+0200)
Subject: dnsdist: Document how to generate a console key without dnsdist
X-Git-Tag: rec-5.1.0-alpha1~54^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8dbe16ad77116f18d22356de3f99612fbc6b96ab;p=thirdparty%2Fpdns.git

dnsdist: Document how to generate a console key without dnsdist
---

diff --git a/pdns/dnsdistdist/docs/guides/console.rst b/pdns/dnsdistdist/docs/guides/console.rst
index 35e65be958..68164b8d5a 100644
--- a/pdns/dnsdistdist/docs/guides/console.rst
+++ b/pdns/dnsdistdist/docs/guides/console.rst
@@ -20,6 +20,10 @@ Once you have a console-enabled dnsdist, the first step to enable encryption is
   > makeKey()
   setKey("ENCODED KEY")
 
+The key does not have a specific format, so base-64 encoding 32 random bytes works as well::
+
+  $ dd if=/dev/random bs=1 count=32 status=none | base64
+
 Then add the generated :func:`setKey` line to your dnsdist configuration file, along with a :func:`controlSocket`:
 
 .. code-block:: lua