| Alexander Afanasyev | ace7445 | 2014-11-30 22:28:24 -0800 | [diff] [blame] | 1 | ndnsec-dsk-gen |
| 2 | ============== |
| 3 | |
| 4 | ``ndnsec-dsk-gen`` is tool to generate a pair of Data-Signing-Key (DSK) for the specified ``identity`` |
| 5 | and sign the generated key using the corresponding Key-Signing-Key (KSK). |
| 6 | The generated DSK will be set as the default key of the identity. |
| 7 | |
| 8 | Usage |
| 9 | ----- |
| 10 | |
| 11 | :: |
| 12 | |
| 13 | $ ndnsec-dsk-gen [-h] [-t keyType] identity |
| 14 | |
| 15 | Description |
| 16 | ----------- |
| 17 | |
| 18 | ``ndnsec-dsk-gen`` creates a pair of Data-Signing-Key (DSK) for the specified ``identity`` |
| 19 | and sign the generated key using the corresponding Key-Signing-Key (KSK). |
| 20 | The tool will first check the default KSK of the identity, and then generate a DSK |
| 21 | and sign the DSK using the KSK. |
| 22 | The information encoded in the DSK certificate is set the same as the KSK certificate. |
| 23 | In the end, the DSK is set as the default key of the identity. |
| 24 | |
| 25 | Options |
| 26 | ------- |
| 27 | |
| 28 | ``-t keyType`` |
| 29 | Specify the key type, ``r`` (default) for RSA and ``e`` for ECDSA. |
| 30 | |
| 31 | Examples |
| 32 | -------- |
| 33 | |
| 34 | :: |
| 35 | |
| 36 | $ ndnsec-dsk-gen /ndn/test |
| 37 | OK: dsk certificate with name [/ndn/test/KEY/dsk-1417501749768/ID-CERT/%FD%00%00%01J%09%B02%8B] has been successfully installed |
| 38 | $ ndnsec-list -c |
| 39 | * /ndn/test |
| 40 | +->* /ndn/test/dsk-1417501749768 |
| 41 | +->* /ndn/test/KEY/dsk-1417501749768/ID-CERT/%FD%00%00%01J%09%B02%8B |
| 42 | +-> /ndn/test/ksk-1417475325879 |
| 43 | +->* /ndn/test/KEY/ksk-1417475325879/ID-CERT/%FD%00%00%01J%09%AE.Y |