> It seems like ldns-keygen does NOT do this (it doesn't have a HOST or TSIG > option) I think this is what you're looking for: (adapt key size and name of course): ldns-keygen -a hmac-md5.sig-alg.reg.int -b 128 name Regards, -JP