summaryrefslogtreecommitdiffstats
path: root/doc
diff options
context:
space:
mode:
authorLibor Peltan <libor.peltan@nic.cz>2017-09-13 18:57:30 +0200
committerDaniel Salzman <daniel.salzman@nic.cz>2017-09-19 13:23:13 +0200
commitf2ddd68c84f593193578ce1a57160b7d61890a6a (patch)
tree84b3aa885693c518584448a0de19dbb476dc4d73 /doc
parentkasp: is_pub_only key flag introduced (diff)
downloadknot-f2ddd68c84f593193578ce1a57160b7d61890a6a.tar.xz
knot-f2ddd68c84f593193578ce1a57160b7d61890a6a.zip
keymgr: support importing public-only key
Diffstat (limited to 'doc')
-rw-r--r--doc/man/keymgr.8in4
-rw-r--r--doc/man_keymgr.rst4
2 files changed, 8 insertions, 0 deletions
diff --git a/doc/man/keymgr.8in b/doc/man/keymgr.8in
index fbdea046c..aad0f2e6b 100644
--- a/doc/man/keymgr.8in
+++ b/doc/man/keymgr.8in
@@ -86,6 +86,10 @@ from corresponding policy (if \fI\-c\fP or \fI\-C\fP options used) or from Knot
Imports a BIND\-style key into KASP database (converting it to PEM format).
Takes one argument: path to BIND key file (private or public, but both MUST exist).
.TP
+\fBimport\-pub\fP \fIBIND_pubkey_file\fP
+Imports a public key into KASP database. This key won\(aqt be rollovered nor used for signing.
+Takes one argument: path to BIND public key file.
+.TP
\fBimport\-pem\fP \fIPEM_file\fP [\fIarguments\fP\&...]
Imports a DNSSEC key from PEM file. The key parameters (same as for the generate action) need to be
specified (mainly algorithm, timers...) because they are not contained in the PEM format.
diff --git a/doc/man_keymgr.rst b/doc/man_keymgr.rst
index 3a7008c3a..eaec55dd6 100644
--- a/doc/man_keymgr.rst
+++ b/doc/man_keymgr.rst
@@ -63,6 +63,10 @@ Commands
Imports a BIND-style key into KASP database (converting it to PEM format).
Takes one argument: path to BIND key file (private or public, but both MUST exist).
+**import-pub** *BIND_pubkey_file*
+ Imports a public key into KASP database. This key won't be rollovered nor used for signing.
+ Takes one argument: path to BIND public key file.
+
**import-pem** *PEM_file* [*arguments*...]
Imports a DNSSEC key from PEM file. The key parameters (same as for the generate action) need to be
specified (mainly algorithm, timers...) because they are not contained in the PEM format.