3fa71d2c66
The encryption key uses 32 bytes now, not 16 bytes
36 lines
1.1 KiB
Plaintext
36 lines
1.1 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: 'Commands: operator keygen'
|
|
sidebar_title: keygen
|
|
description: >
|
|
The `operator keygen` command generates an encryption key that can be used for
|
|
Nomad server's gossip traffic encryption. The keygen command uses a
|
|
cryptographically strong pseudo-random number generator to generate the key.
|
|
---
|
|
|
|
# Command: operator keygen
|
|
|
|
The `operator keygen` command generates an encryption key that can be used for
|
|
Nomad server's gossip traffic encryption. The keygen command uses a
|
|
cryptographically strong pseudo-random number generator to generate the key.
|
|
|
|
The resulting key is encoded in the [RFC4648] "URL and filename safe" base64
|
|
alphabet. If you use another tool such as OpenSSL to generate the gossip key,
|
|
you should pipe the input through the `base64(1)` command to ensure it is
|
|
safely encoded. For example: `openssl rand 32 | base64`
|
|
|
|
## Usage
|
|
|
|
```plaintext
|
|
nomad operator keygen
|
|
```
|
|
|
|
## Example
|
|
|
|
```shell-session
|
|
$ nomad operator keygen
|
|
6RhfKFZ5uYEaU6RgWzx69ssLcpiIkvnEZs5KBOQxvxA=
|
|
```
|
|
|
|
[RFC4648]: https://tools.ietf.org/html/rfc4648#section-5
|