ndnsec-dsk-gen

ndnsec-dsk-gen is tool to generate a pair of Data-Signing-Key (DSK) for the specified identity and sign the generated key using the corresponding Key-Signing-Key (KSK). The generated DSK will be set as the default key of the identity.

Usage

$ ndnsec-dsk-gen [-h] [-t keyType] identity

Description

ndnsec-dsk-gen creates a pair of Data-Signing-Key (DSK) for the specified identity and sign the generated key using the corresponding Key-Signing-Key (KSK). The tool will first check the default KSK of the identity, and then generate a DSK and sign the DSK using the KSK. The information encoded in the DSK certificate is set the same as the KSK certificate. In the end, the DSK is set as the default key of the identity.

Options

-t keyType

Specify the key type, r (default) for RSA and e for ECDSA.

Examples

$ ndnsec-dsk-gen /ndn/test
OK: dsk certificate with name [/ndn/test/KEY/dsk-1417501749768/ID-CERT/%FD%00%00%01J%09%B02%8B] has been successfully installed
$ ndnsec-list -c
* /ndn/test
  +->* /ndn/test/dsk-1417501749768
       +->* /ndn/test/KEY/dsk-1417501749768/ID-CERT/%FD%00%00%01J%09%B02%8B
  +->  /ndn/test/ksk-1417475325879
       +->* /ndn/test/KEY/ksk-1417475325879/ID-CERT/%FD%00%00%01J%09%AE.Y