[9.18] fix: doc: Fix keytag typos in DNSSEC guide

The key identifiers in the comments did not match those in the
output.

Closes #5785

Backport of MR !11634

Merge branch 'backport-5785-dnssec-guide-patch-9.18' into 'bind-9.18'

See merge request isc-projects/bind9!11701
This commit is contained in:
Matthijs Mekking 2026-03-16 16:53:27 +00:00
commit 379683473a

View file

@ -262,7 +262,7 @@ file:
# cd /etc/bind/keys/example.com
# cat Kexample.com.+008+51623.key
; This is a zone-signing key, keyid 11623, for example.com.
; This is a zone-signing key, keyid 51623, for example.com.
; Created: 20201130160024 (Mon Dec 1 00:00:24 2020)
; Publish: 20201202000000 (Fri Dec 2 08:00:00 2020)
; Activate: 20210101000000 (Sun Jan 1 08:00:00 2021)
@ -477,9 +477,9 @@ DS record based on the new key, 23550:
# cd /etc/bind/keys/example.com/
# dnssec-settime -I 20210101 -D 20210201 Kexample.com.+007+24828
./Kexample.com.+007+24848.key
./Kexample.com.+007+24848.private
# dnssec-keygen -S Kexample.com.+007+24848
./Kexample.com.+007+24828.key
./Kexample.com.+007+24828.private
# dnssec-keygen -S Kexample.com.+007+24828
Generating key pair.......................................................................................++ ...................................++
Kexample.com.+007+23550
# dnssec-dsfromkey -a SHA-1 Kexample.com.+007+23550.key
@ -491,7 +491,7 @@ stored.
The second, :iscman:`dnssec-settime`, sets an inactive (:option:`-I <dnssec-settime -I>`) date of January 1,
2021, and a deletion (:option:`-D <dnssec-settime -D>`) date of February 1, 2021 for the current KSK
(``Kexample.com.+007+24848``).
(``Kexample.com.+007+24828``).
The third command, :iscman:`dnssec-keygen`, creates a successor key, using
the exact same parameters (algorithms, key sizes, etc.) as the current