FreeBSD Manual Pages
NSEC3HASH(1) BIND 9 NSEC3HASH(1) NAME nsec3hash - generate NSEC3 hash SYNOPSIS nsec3hash {salt} {algorithm} {iterations} {domain} nsec3hash -r {algorithm} {flags} {iterations} {salt} {domain} DESCRIPTION nsec3hash generates an NSEC3 hash based on a set of NSEC3 parameters. This can be used to check the validity of NSEC3 records in a signed zone. If this command is invoked as nsec3hash -r, it takes arguments in order, matching the first four fields of an NSEC3 record followed by the domain name: algorithm, flags, iterations, salt, domain. This makes it convenient to copy and paste a portion of an NSEC3 or NSEC3PARAM record into a command line to confirm the correctness of an NSEC3 hash. ARGUMENTS salt This is the salt provided to the hash algorithm. algorithm This is a number indicating the hash algorithm. Currently the only supported hash algorithm for NSEC3 is SHA-1, which is indicated by the number 1; consequently "1" is the only useful value for this ar- gument. flags This is provided for compatibility with NSEC3 record presentation format, but is ignored since the flags do not affect the hash. iterations This is the number of additional times the hash should be performed. domain This is the domain name to be hashed. SEE ALSO BIND 9 Administrator Reference Manual, RFC 5155 <https://datatracker.ietf .org/doc/html/rfc5155.html>. Author Internet Systems Consortium Copyright 2026, Internet Systems Consortium 9.20.26 2026-07-20 NSEC3HASH(1)
NAME | SYNOPSIS | DESCRIPTION | ARGUMENTS | SEE ALSO | Author | Copyright
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=nsec3hash&sektion=1&manpath=FreeBSD+Ports+15.1.quarterly>