2659. [doc] Clarify dnssec-keygen doc: key name must match zone

                        name for DNSSEC keys. [RT #19938]

diff --git a/CHANGES b/CHANGES
index 46cd6c5a89668f41e05125fb3ba8f61c3c16068e..b3c74971eb9b0f2b63d0f831ec77261421d5d61a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -153,6 +153,9 @@
 2661.  [bug]           Check whether socket fd exceeds FD_SETSIZE when
                        creating lwres context. [RT #20029]
 
+2659.  [doc]           Clarify dnssec-keygen doc: key name must match zone
+                       name for DNSSEC keys. [RT #19938]
+
 2656.  [func]          win32: add a "tools only" check box to the installer
                        which causes it to only install dig, host, nslookup,
                        nsupdate and relevant DLLs.  [RT #19998]

diff --git a/bin/dnssec/dnssec-keygen.docbook b/bin/dnssec/dnssec-keygen.docbook
index c267a1b4c25f0f5054c293e03ae79b724e85b906..f34268311536d3b9002d450d3c60c14cae6f48fb 100644 (file)
--- a/bin/dnssec/dnssec-keygen.docbook
+++ b/bin/dnssec/dnssec-keygen.docbook
@@ -18,7 +18,7 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-<!-- $Id: dnssec-keygen.docbook,v 1.22 2008/10/14 14:32:50 jreed Exp $ -->
+<!-- $Id: dnssec-keygen.docbook,v 1.22.44.1 2009/12/03 04:30:39 marka Exp $ -->
 <refentry id="man.dnssec-keygen">
   <refentryinfo>
     <date>June 30, 2000</date>
@@ -80,6 +80,11 @@
       and RFC 4034.  It can also generate keys for use with
       TSIG (Transaction Signatures), as defined in RFC 2845.
     </para>
+    <para>
+      The <option>name</option> of the key is specified on the command
+      line.  For DNSSEC keys, this must match the name of the zone for
+      which the key is being generated.
+    </para>
   </refsect1>
 
   <refsect1>