ipsec_mailkey8
Mail dns records for opportunistic encryption
Usage
ipsec --me
[email protected]
[--reverse
1.2.3.4
aaa]
[--forward
hostname.domain.tld]
Overview
Mailkey is a meta-program. It generates a script which will attempt to mail the TXT records required to enable Opportunistic Encryption (OE).
An e-mail address for the domainâs DNS administrator is derived from SOA records. The mail body and destination address are freely editable in the script.
If no administrator can be located, the output file will not be executable.
The --me option sets the Reply-to: address of the mail to be sent.
The --forward hostname sets the domain name to be used for initiator-only OE.
The --reverse ip-address sets the ip address to be used for full Opportunistic Encryption.
Examples
ipsec mailkey --me [email protected] --forward bofh.xelerance.com
|
creates the i-OE record for use on bofh.xelerance.com. |
|---|---|
ipsec mailkey --me [email protected] --reverse 193.110.157.17
|
creates full-OE record for use on bofh.xelerance.com's static IP address. |
Files
/etc/ipsec.secrets
Releases
3 releases since Debian 3.1 (Sarge); the text changed 2 times.
--forward until Debian 4.0 (Etch);
--me until Debian 4.0 (Etch);
--reverse until Debian 4.0 (Etch).