create
Enable DNSSEC keys and create associated DNSKEY records for your DNS zone
Usage
ionosctl dns dnssec create [flags]
Aliases
For dnssec
command:
[sec dnskey key keys]
For create
command:
[c post]
Description
Enable DNSSEC keys and create associated DNSKEY records for your DNS zone
Options
--algorithm string Algorithm used to generate signing keys (both Key Signing Keys and Zone Signing Keys) (default "RSASHA256")
-u, --api-url string Override default host url (default "dns.de-fra.ionos.com")
--cols strings Set of columns to be printed on output
Available columns: [Id KeyTag DigestAlgorithmMnemonic Digest Validity Flags PubKey ComposedKeyData Algorithm KskBits ZskBits NsecMode Nsec3Iterations Nsec3SaltBits] (default [Id,KeyTag,DigestAlgorithmMnemonic,Digest,Validity])
-c, --config string Configuration file used for authentication (default "$XDG_CONFIG_HOME/ionosctl/config.json")
-f, --force Force command to execute without user input
-h, --help Print usage
--ksk-bits int Key signing key length in bits. kskBits >= zskBits: [1024/2048/4096] (default 1024)
--no-headers Don't print table headers when table output is used
--nsec-mode string NSEC mode.. Can be one of: NSEC, NSEC3 (default "NSEC")
--nsec3-iterations int Number of iterations for NSEC3. [0..50]
--nsec3-salt-bits int Salt length in bits for NSEC3. [64..128], multiples of 8 (default 64)
-o, --output string Desired output format [text|json|api-json] (default "text")
-q, --quiet Quiet output
--validity int Signature validity in days [90..365] (default 90)
-v, --verbose Print step-by-step process when running command
-z, --zone string The name or ID of the DNS zone
--zsk-bits int Zone signing key length in bits. zskBits <= kskBits: [1024/2048/4096] (default 1024)
Examples
ionosctl dns keys create --zone ZONE
Last updated