From c2e1869358324f4323475e3838fcb77ac4e9ba41 Mon Sep 17 00:00:00 2001 From: Peter van Dijk Date: Tue, 21 Oct 2014 10:30:25 +0200 Subject: [PATCH] document alternative TSIG algos, thanks maik --- pdns/docs/pdns.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pdns/docs/pdns.xml b/pdns/docs/pdns.xml index 162cd66cec..bfce6f117f 100644 --- a/pdns/docs/pdns.xml +++ b/pdns/docs/pdns.xml @@ -14727,7 +14727,7 @@ pdnssec hsm create-key zone key-id In PowerDNS, TSIG shared secrets are stored by the various backends. In case of the popular Generic backends, they can be found in the 'tsigkeys' table. The name can be chosen freely, but - the algorithm name will typically be 'hmac-md5'. The content is a Base64-encoded secret. + the algorithm name will typically be 'hmac-md5'. Other supported algorithms are 'hmac-sha1', 'hmac-shaX' where X is 224, 256, 384 or 512. The content is a Base64-encoded secret. Most backends require DNSSEC support enabled to support TSIG. For the Generic SQL Backend make sure to use the DNSSEC enabled schema and to turn on the relevant '-dnssec' flag (for example, gmysql-dnssec)! -- 2.47.2