2659. [doc] Clarify dnssec-keygen doc: key name must match zone

                        name for DNSSEC keys. [RT #19938]

diff --git a/CHANGES b/CHANGES
index a2f38069aaf2e5d3194acd85e20c9353156830c0..fb7e911a34e49444263393ca84f6e723afa5ee0e 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -103,6 +103,9 @@
 2688.  [bug]           Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
                        to decide to fetch the destination address. [RT #20305]
 
+2659.  [doc]           Clarify dnssec-keygen doc: key name must match zone
+                       name for DNSSEC keys. [RT #19938]
+
 2533.  [doc]           ARM: document @ (at-sign). [RT #17144]
 
        --- 9.5.2 released ---

diff --git a/bin/dnssec/dnssec-keygen.docbook b/bin/dnssec/dnssec-keygen.docbook
index 30448b9cfa8bd829c4234ee9e99e4eeed0c593c8..0ef0d0c1cf07e3c628305a290be72d68d4eeae9f 100644 (file)
--- a/bin/dnssec/dnssec-keygen.docbook
+++ b/bin/dnssec/dnssec-keygen.docbook
@@ -18,7 +18,7 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-<!-- $Id: dnssec-keygen.docbook,v 1.19.130.2 2008/10/15 23:46:53 tbox Exp $ -->
+<!-- $Id: dnssec-keygen.docbook,v 1.19.130.3 2009/12/03 04:32:43 marka Exp $ -->
 <refentry id="man.dnssec-keygen">
   <refentryinfo>
     <date>June 30, 2000</date>
@@ -80,6 +80,11 @@
       and RFC 4034.  It can also generate keys for use with
       TSIG (Transaction Signatures), as defined in RFC 2845.
     </para>
+    <para>
+      The <option>name</option> of the key is specified on the command
+      line.  For DNSSEC keys, this must match the name of the zone for
+      which the key is being generated.
+    </para>
   </refsect1>
 
   <refsect1>