Fix keytag typos in DNSSEC guide

The key identifiers in the comments did not match those in the
output.

(cherry picked from commit a2b36d4bcb)
This commit is contained in:
Ethan Meng 2026-03-03 13:03:51 -06:00 committed by Matthijs Mekking (GitLab job 7038461)
parent cd11dd6cf3
commit f1bf717d71

View file

@ -262,7 +262,7 @@ file:
# cd /etc/bind/keys/example.com
# cat Kexample.com.+008+51623.key
; This is a zone-signing key, keyid 11623, for example.com.
; This is a zone-signing key, keyid 51623, for example.com.
; Created: 20201130160024 (Mon Dec 1 00:00:24 2020)
; Publish: 20201202000000 (Fri Dec 2 08:00:00 2020)
; Activate: 20210101000000 (Sun Jan 1 08:00:00 2021)
@ -477,9 +477,9 @@ DS record based on the new key, 23550:
# cd /etc/bind/keys/example.com/
# dnssec-settime -I 20210101 -D 20210201 Kexample.com.+007+24828
./Kexample.com.+007+24848.key
./Kexample.com.+007+24848.private
# dnssec-keygen -S Kexample.com.+007+24848
./Kexample.com.+007+24828.key
./Kexample.com.+007+24828.private
# dnssec-keygen -S Kexample.com.+007+24828
Generating key pair.......................................................................................++ ...................................++
Kexample.com.+007+23550
# dnssec-dsfromkey -a SHA-1 Kexample.com.+007+23550.key
@ -491,7 +491,7 @@ stored.
The second, :iscman:`dnssec-settime`, sets an inactive (:option:`-I <dnssec-settime -I>`) date of January 1,
2021, and a deletion (:option:`-D <dnssec-settime -D>`) date of February 1, 2021 for the current KSK
(``Kexample.com.+007+24848``).
(``Kexample.com.+007+24828``).
The third command, :iscman:`dnssec-keygen`, creates a successor key, using
the exact same parameters (algorithms, key sizes, etc.) as the current