diff options
Diffstat (limited to 'doc/arm/man.isc-hmac-fixup.html')
| -rw-r--r-- | doc/arm/man.isc-hmac-fixup.html | 32 |
1 files changed, 13 insertions, 19 deletions
diff --git a/doc/arm/man.isc-hmac-fixup.html b/doc/arm/man.isc-hmac-fixup.html index 20367ea677fd..ca78b731ef22 100644 --- a/doc/arm/man.isc-hmac-fixup.html +++ b/doc/arm/man.isc-hmac-fixup.html @@ -14,13 +14,12 @@ - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR - PERFORMANCE OF THIS SOFTWARE. --> -<!-- $Id$ --> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"> <title>isc-hmac-fixup</title> -<meta name="generator" content="DocBook XSL Stylesheets V1.71.1"> -<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> +<meta name="generator" content="DocBook XSL Stylesheets V1.78.1"> +<link rel="home" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual"> <link rel="up" href="Bv9ARM.ch13.html" title="Manual pages"> <link rel="prev" href="man.genrandom.html" title="genrandom"> <link rel="next" href="man.nsec3hash.html" title="nsec3hash"> @@ -39,7 +38,7 @@ </table> <hr> </div> -<div class="refentry" lang="en"> +<div class="refentry"> <a name="man.isc-hmac-fixup"></a><div class="titlepage"></div> <div class="refnamediv"> <h2>Name</h2> @@ -49,8 +48,8 @@ <h2>Synopsis</h2> <div class="cmdsynopsis"><p><code class="command">isc-hmac-fixup</code> {<em class="replaceable"><code>algorithm</code></em>} {<em class="replaceable"><code>secret</code></em>}</p></div> </div> -<div class="refsect1" lang="en"> -<a name="id2619915"></a><h2>DESCRIPTION</h2> +<div class="refsection"> +<a name="id-1.14.27.7"></a><h2>DESCRIPTION</h2> <p> Versions of BIND 9 up to and including BIND 9.6 had a bug causing HMAC-SHA* TSIG keys which were longer than the digest length of the @@ -62,11 +61,11 @@ <p> This bug has been fixed in BIND 9.7. However, the fix may cause incompatibility between older and newer versions of - BIND, when using long keys. <span><strong class="command">isc-hmac-fixup</strong></span> + BIND, when using long keys. <span class="command"><strong>isc-hmac-fixup</strong></span> modifies those keys to restore compatibility. </p> <p> - To modify a key, run <span><strong class="command">isc-hmac-fixup</strong></span> and + To modify a key, run <span class="command"><strong>isc-hmac-fixup</strong></span> and specify the key's algorithm and secret on the command line. If the secret is longer than the digest length of the algorithm (64 bytes for SHA1 through SHA256, or 128 bytes for SHA384 and SHA512), then a @@ -75,10 +74,10 @@ printed without modification.) </p> </div> -<div class="refsect1" lang="en"> -<a name="id2659333"></a><h2>SECURITY CONSIDERATIONS</h2> +<div class="refsection"> +<a name="id-1.14.27.8"></a><h2>SECURITY CONSIDERATIONS</h2> <p> - Secrets that have been converted by <span><strong class="command">isc-hmac-fixup</strong></span> + Secrets that have been converted by <span class="command"><strong>isc-hmac-fixup</strong></span> are shortened, but as this is how the HMAC protocol works in operation anyway, it does not affect security. RFC 2104 notes, "Keys longer than [the digest length] are acceptable but the @@ -86,18 +85,13 @@ strength." </p> </div> -<div class="refsect1" lang="en"> -<a name="id2659349"></a><h2>SEE ALSO</h2> +<div class="refsection"> +<a name="id-1.14.27.9"></a><h2>SEE ALSO</h2> <p> <em class="citetitle">BIND 9 Administrator Reference Manual</em>, <em class="citetitle">RFC 2104</em>. </p> </div> -<div class="refsect1" lang="en"> -<a name="id2659366"></a><h2>AUTHOR</h2> -<p><span class="corpauthor">Internet Systems Consortium</span> - </p> -</div> </div> <div class="navfooter"> <hr> @@ -118,6 +112,6 @@ </tr> </table> </div> -<p style="text-align: center;">BIND 9.9.8-P4 (Extended Support Version)</p> +<p xmlns:db="http://docbook.org/ns/docbook" style="text-align: center;">BIND 9.9.9-P3 (Extended Support Version)</p> </body> </html> |