-.\" Copyright (C) 2009, 2014-2016 Internet Systems Consortium, Inc. ("ISC")
+.\" Copyright (C) 2009, 2014-2017 Internet Systems Consortium, Inc. ("ISC")
.\"
.\" This Source Code Form is subject to the terms of the Mozilla Public
.\" License, v. 2.0. If a copy of the MPL was not distributed with this
.SH "SYNOPSIS"
.HP \w'\fBnsec3hash\fR\ 'u
\fBnsec3hash\fR {\fIsalt\fR} {\fIalgorithm\fR} {\fIiterations\fR} {\fIdomain\fR}
+.HP \w'\fBnsec3hash\ \-r\fR\ 'u
+\fBnsec3hash \-r\fR {\fIalgorithm\fR} {\fIflags\fR} {\fIiterations\fR} {\fIsalt\fR} {\fIdomain\fR}
.SH "DESCRIPTION"
.PP
\fBnsec3hash\fR
generates an NSEC3 hash based on a set of NSEC3 parameters\&. This can be used to check the validity of NSEC3 records in a signed zone\&.
+.PP
+If this command is invoked as
+\fBnsec3hash \-r\fR, it takes arguments in an order matching the first four fields of an NSEC3 record, followed by the domain name: algorithm, flags, iterations, salt, domain\&. This makes it convenient to copy and paste a portion of an NSEC3 or NSEC3PARAM record into a command line to confirm the correctness of an NSEC3 hash\&.
.SH "ARGUMENTS"
.PP
salt
A number indicating the hash algorithm\&. Currently the only supported hash algorithm for NSEC3 is SHA\-1, which is indicated by the number 1; consequently "1" is the only useful value for this argument\&.
.RE
.PP
+flags
+.RS 4
+Provided for compatibility with NSEC3 record presentation format, but ignored since the flags do not affect the hash\&.
+.RE
+.PP
iterations
.RS 4
The number of additional times the hash should be performed\&.
\fBInternet Systems Consortium, Inc\&.\fR
.SH "COPYRIGHT"
.br
-Copyright \(co 2009, 2014-2016 Internet Systems Consortium, Inc. ("ISC")
+Copyright \(co 2009, 2014-2017 Internet Systems Consortium, Inc. ("ISC")
.br
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<!--
- - Copyright (C) 2009, 2014-2016 Internet Systems Consortium, Inc. ("ISC")
+ - Copyright (C) 2009, 2014-2017 Internet Systems Consortium, Inc. ("ISC")
-
- This Source Code Form is subject to the terms of the Mozilla Public
- License, v. 2.0. If a copy of the MPL was not distributed with this
{<em class="replaceable"><code>iterations</code></em>}
{<em class="replaceable"><code>domain</code></em>}
</p></div>
+ <div class="cmdsynopsis"><p>
+ <code class="command">nsec3hash -r</code>
+ {<em class="replaceable"><code>algorithm</code></em>}
+ {<em class="replaceable"><code>flags</code></em>}
+ {<em class="replaceable"><code>iterations</code></em>}
+ {<em class="replaceable"><code>salt</code></em>}
+ {<em class="replaceable"><code>domain</code></em>}
+ </p></div>
</div>
<div class="refsection">
a set of NSEC3 parameters. This can be used to check the validity
of NSEC3 records in a signed zone.
</p>
+
+ <p>
+ If this command is invoked as <span class="command"><strong>nsec3hash -r</strong></span>,
+ it takes arguments in an order matching the first four fields
+ of an NSEC3 record, followed by the domain name: algorithm, flags,
+ iterations, salt, domain. This makes it convenient to copy and
+ paste a portion of an NSEC3 or NSEC3PARAM record into a command
+ line to confirm the correctness of an NSEC3 hash.
+ </p>
+
</div>
<div class="refsection">
useful value for this argument.
</p>
</dd>
+<dt><span class="term">flags</span></dt>
+<dd>
+ <p>
+ Provided for compatibility with NSEC3 record presentation
+ format, but ignored since the flags do not affect the hash.
+ </p>
+ </dd>
<dt><span class="term">iterations</span></dt>
<dd>
<p>
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_features"></a>New Features</h3></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+ <p>
+ <span class="command"><strong>nsec3hash -r</strong></span> ("rdata order") takes arguments
+ in the same order as they appear in NSEC3 or NSEC3PARAM records.
+ This makes it easier to generate an NSEC3 hash using values cut
+ and pasted from an existing record. Thanks to Tony Finch for
+ the contribution. [RT #45183]
+ </p>
+ </li>
<li class="listitem">
<p>
Setting <span class="command"><strong>max-journal-size</strong></span> to
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+ <p>
+ Reloading or reconfiguring <span class="command"><strong>named</strong></span> could
+ fail on some platforms when LMDB was in use. [RT #45203]
+ </p>
+ </li>
<li class="listitem">
<p>
Due to some incorrectly deleted code, when BIND was
{<em class="replaceable"><code>iterations</code></em>}
{<em class="replaceable"><code>domain</code></em>}
</p></div>
+ <div class="cmdsynopsis"><p>
+ <code class="command">nsec3hash -r</code>
+ {<em class="replaceable"><code>algorithm</code></em>}
+ {<em class="replaceable"><code>flags</code></em>}
+ {<em class="replaceable"><code>iterations</code></em>}
+ {<em class="replaceable"><code>salt</code></em>}
+ {<em class="replaceable"><code>domain</code></em>}
+ </p></div>
</div>
<div class="refsection">
a set of NSEC3 parameters. This can be used to check the validity
of NSEC3 records in a signed zone.
</p>
+
+ <p>
+ If this command is invoked as <span class="command"><strong>nsec3hash -r</strong></span>,
+ it takes arguments in an order matching the first four fields
+ of an NSEC3 record, followed by the domain name: algorithm, flags,
+ iterations, salt, domain. This makes it convenient to copy and
+ paste a portion of an NSEC3 or NSEC3PARAM record into a command
+ line to confirm the correctness of an NSEC3 hash.
+ </p>
+
</div>
<div class="refsection">
useful value for this argument.
</p>
</dd>
+<dt><span class="term">flags</span></dt>
+<dd>
+ <p>
+ Provided for compatibility with NSEC3 record presentation
+ format, but ignored since the flags do not affect the hash.
+ </p>
+ </dd>
<dt><span class="term">iterations</span></dt>
<dd>
<p>
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_features"></a>New Features</h3></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+ <p>
+ <span class="command"><strong>nsec3hash -r</strong></span> ("rdata order") takes arguments
+ in the same order as they appear in NSEC3 or NSEC3PARAM records.
+ This makes it easier to generate an NSEC3 hash using values cut
+ and pasted from an existing record. Thanks to Tony Finch for
+ the contribution. [RT #45183]
+ </p>
+ </li>
<li class="listitem">
<p>
Setting <span class="command"><strong>max-journal-size</strong></span> to
<div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem">
+ <p>
+ Reloading or reconfiguring <span class="command"><strong>named</strong></span> could
+ fail on some platforms when LMDB was in use. [RT #45203]
+ </p>
+ </li>
<li class="listitem">
<p>
Due to some incorrectly deleted code, when BIND was
projects / thirdparty / bind9.git / commitdiff
