From 48ce026dc9e2b1aacfe47020ba23df2173653bf3 Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Thu, 5 Sep 2019 12:14:55 +0200 Subject: [PATCH] Sync options in dnssec-keygen Code and documentation were not in line: - Remove -z option from code - Remove -k option from docbook - Add -d option to docbook - Add -T option to docbook --- bin/dnssec/dnssec-keygen.c | 3 --- bin/dnssec/dnssec-keygen.docbook | 15 ++++++++++++++- 2 files changed, 14 insertions(+), 4 deletions(-) diff --git a/bin/dnssec/dnssec-keygen.c b/bin/dnssec/dnssec-keygen.c index 85362db2a1..8a7869c64f 100644 --- a/bin/dnssec/dnssec-keygen.c +++ b/bin/dnssec/dnssec-keygen.c @@ -367,9 +367,6 @@ main(int argc, char **argv) { if (*endp != '\0') fatal("-v must be followed by a number"); break; - case 'z': - /* already the default */ - break; case 'G': genonly = true; break; diff --git a/bin/dnssec/dnssec-keygen.docbook b/bin/dnssec/dnssec-keygen.docbook index 5833b79841..f194631db3 100644 --- a/bin/dnssec/dnssec-keygen.docbook +++ b/bin/dnssec/dnssec-keygen.docbook @@ -66,6 +66,7 @@ + @@ -74,7 +75,6 @@ - @@ -84,6 +84,7 @@ + @@ -207,6 +208,18 @@ + + -d bits + + + Key size in bits. For the algorithms RSASHA1, NSEC3RSASA1, + RSASHA256 and RSASHA512 the key size must be in range 1024-4096. + DH size is between 128 and 4096. This option is ignored for + algorithms ECDSAP256SHA256, ECDSAP384SHA384, ED25519 and ED448. + + + + -E engine