From: Matthijs Mekking <matthijs@isc.org>
Date: Fri, 6 Aug 2021 14:34:20 +0000 (+0200)
Subject: Fix missing iterations value in dnssec-guide
X-Git-Tag: v9.17.18~44^2
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=9e109191cc362ebc064bf84c45339d4b85ec33f1;p=thirdparty%2Fbind9.git

Fix missing iterations value in dnssec-guide

In the "Migrating from NSEC to NSEC3" section, it says:

    dnssec-policy "standard" {
        nsec3param iterations optout no salt-length 16;
    };

There should be an integer after "iterations". Based on the following
text, the number of iterations should be 10.
---

diff --git a/doc/dnssec-guide/recipes.rst b/doc/dnssec-guide/recipes.rst
index 91d14be07fd..2c177c30745 100644
--- a/doc/dnssec-guide/recipes.rst
+++ b/doc/dnssec-guide/recipes.rst
@@ -800,7 +800,7 @@ DNSSEC policy, using 10 iterations, no opt-out, and a random string that is
 ::
 
     dnssec-policy "standard" {
-        nsec3param iterations optout no salt-length 16;
+        nsec3param iterations 10 optout no salt-length 16;
     };
 
 Then reconfigure the server with ``rndc``. You can tell that it worked if you