How to generate a key to dynamically update a DNS zone?

Question

linux

Tell me how to generate a key to dynamically update the DNS zone on the bind server.
Previously, this was done by the team

dnssec-keygen -a HMAC-MD5 -b 128 -r /dev/urandom -n USER DDNS_UPDATE

The HMAC algorithm is no longer supported in bind as of version 9.13.0.

Answer 1

-a algorithm
Selects the cryptographic algorithm. For DNSSEC keys, the value of algorithm must be one of RSAMD5, RSASHA1, DSA, NSEC3RSASHA1, NSEC3DSA, RSASHA256, RSASHA512, ECDSAP256SHA256, ECDSAP384SHA384, ED25519 or ED448. For TKEY, the value must be DH (Diffie Hellman); specifying his value will automatically set the -T KEY option as well.

https://manpages.debian.org/experimental/bind-util...

Answer 2

Decision
tsig-keygen DNS_UPDATER