Jannik Peters
fb17d936b4
Fix error message saying .pub expected
2025-10-09 15:17:46 +02:00
Philip Homburg
cbd7a7b56b
Removed unused import.
2025-10-01 14:24:51 +02:00
Philip Homburg
be7e53e0e8
Revert "[keyset] Don't fail on repeated 'init'"
...
This reverts commit 67b99a10a4
2025-10-01 13:54:20 +02:00
Ximon Eighteen and GitHub
2f7c2f51d2
Replace Keys(s) with key(s). ( #130 )
2025-10-01 09:40:03 +02:00
arya dradjica
67b99a10a4
[keyset] Don't fail on repeated 'init'
...
Cascade uses this because it can't easily tell whether the keyset state
is already initialized, in some cases.
2025-09-29 20:27:15 +02:00
Philip-NLnetLabs and GitHub
7d2cece9f2
Create parent directories for config and state files. ( #129 )
2025-09-23 15:31:56 +02:00
Philip-NLnetLabs and GitHub
3e6f79e602
Implement the set default-ttl command. ( #127 )
2025-09-16 15:49:14 +02:00
Philip-NLnetLabs and GitHub
dd78a25d0f
Add support for imported keys to Init. ( #126 )
2025-09-09 11:34:31 +02:00
Philip Homburg
96c94f15dd
Fallout from merging main: more map_err.
2025-09-08 10:24:37 +02:00
Philip Homburg
dc5a619b32
Merge branch 'main' into keyset
2025-09-08 09:46:50 +02:00
e7d9458a92
Remove From<io::Error> impl for Error. ( #97 )
...
Co-authored-by: Terts Diepraam <terts.diepraam@gmail.com >
2025-09-08 09:38:18 +02:00
Philip-NLnetLabs and GitHub
c2acca2800
Keyset status ( #124 )
...
* Verbose status output.
* Add TODO list.
* Get rid of .map_err::<Error, _>. Just .map_err is fine if the .into() is removed.
2025-09-08 09:00:44 +02:00
Philip Homburg
2c18fac8db
Merge branch 'main' into keyset
2025-09-05 12:17:08 +02:00
Philip-NLnetLabs and GitHub
c19673fedd
Keyset import ( #121 )
...
* Restructure roll commands.
* Import public keys.
* Import a public/private key pair from files.
* Add a default TTL to config. Use that for DNSKEY/CDS/CDNSKEY/DS RRsets.
* Cargo.lock.
* Support for importing KMIP keys.
* Import public/private keys in decoupled state
* Add --private-key option to importing a public/private key pair from files.
* Add remove-key command.
2025-09-05 11:38:52 +02:00
Ximon Eighteen and GitHub
4f11b90956
Permit KMIP servers to be added in an inactive state. ( #122 )
2025-09-03 16:01:18 +02:00
Jannik Peters and GitHub
6915b816a6
Reimplement dnst update with better UI ( #115 )
2025-09-03 12:20:51 +02:00
Ximon Eighteen
1d6b2f2269
Mark keyset as experimental.
2025-09-03 10:10:13 +02:00
Philip Homburg
df4864420a
Merge branch 'main' into keyset
2025-09-02 16:40:06 +02:00
Jannik Peters and GitHub
0e1ea6efa4
Disable help command until opening man pages is implemented ( #120 )
...
* Disable help command until opening man pages is implemented
* Bump minimal version because rayon dependency requires rustc 1.80
2025-09-01 13:37:21 +02:00
Philip-NLnetLabs and GitHub
6fad119685
Add support for automatic key rolls ( #108 )
2025-08-29 10:34:11 +02:00
Ximon Eighteen and GitHub
018527f95f
Add support for the KMIP cryptographic backend. ( #99 )
...
- Adds KMIP server based key generation, signing and destruction, equivalent to the existing Ring/OpenSSL functionality.
- Adds new kmip subcommands for managing KMIP server configurations.
- Adds support for referring to KMIP keys by a new KMIP URL scheme.
- Add a feature for the KMIP crypto backend just like the Ring and OpenSSL crypto backends.
- Adds support for storing sensitive credentials in files separate to the KMIP server configuration.
2025-08-25 19:01:52 +02:00
Ximon Eighteen and GitHub
5eba1d4ee8
Make the OUTPUT FORMATTING help heading have consistent case with the rest of the help headings. ( #112 )
2025-08-11 13:42:55 +02:00
Ximon Eighteen and GitHub
e4fcc04310
Make version argument handling more consistent. ( #86 )
2025-08-08 13:41:46 +02:00
f6ae5d744c
Add verbosity option ( #110 )
...
Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com >
2025-08-08 12:41:00 +02:00
Jannik Peters and GitHub
3f84c1b26c
Match ldns-signzone NSEC/NSEC3 RR ordering and NSEC3 formatting ( #109 )
2025-08-08 12:38:36 +02:00
Jannik Peters and GitHub
5a4c09763f
Output digest in lower case for ldns-key2ds ( #111 )
2025-08-07 14:16:10 +02:00
28fc39d401
Format keygen and key2ds subcommand output using tabs like ldns-keygen and ldns-key2ds. ( #48 )
...
Co-authored-by: Terts Diepraam <terts.diepraam@gmail.com >
Co-authored-by: Jannik Peters <jannik@nlnetlabs.nl >
2025-08-07 10:31:03 +02:00
Jannik Peters and GitHub
8592d87afd
Improve error message when failing to print to stdout ( #103 )
2025-08-07 10:23:58 +02:00
Jannik Peters and GitHub
79baa04389
Remove NSEC3 algorithm option for dnst ( #104 )
...
The NSEC3 algorithm option only had one possible value (SHA-1) and is
therefore unnecessary.
2025-08-07 10:20:25 +02:00
Jannik Peters and GitHub
0d0787169a
Remove digest algorithm fallback for dnst key2ds ( #105 )
2025-08-07 10:06:08 +02:00
Jannik Peters and GitHub
d242740e3e
Allow specifying algorithms by number in dnst keygen ( #106 )
2025-08-06 12:11:26 +02:00
Jannik Peters
58748f71d2
Fix missing newline in keygen
...
The missing newline broke key2ds, because the inplace zonefile parser
requires that every line ends with a newline character.
2025-08-04 18:21:16 +02:00
559f00e65c
Use clap to parse keyset subcommands ( #100 )
...
Co-authored-by: Terts Diepraam <terts.diepraam@gmail.com >
2025-07-11 14:38:21 +02:00
Philip-NLnetLabs and GitHub
cf84a305fd
Fix new warnings from Rust version 1.88. ( #101 )
2025-07-11 14:19:44 +02:00
Philip Homburg
75ce06f14e
Add support for cron_next.
2025-06-24 12:24:58 +02:00
Philip Homburg
7977bf7c93
More URL handling.
2025-06-19 16:32:28 +02:00
Philip Homburg
688aada740
More detailed error messages.
2025-06-18 17:27:52 +02:00
Philip Homburg
2129fc2b36
Store key references are file URLs.
2025-06-17 09:46:20 +02:00
Philip Homburg
5d946beaac
Remove unneeded format!.
2025-06-12 15:23:25 +02:00
Philip Homburg
932844569e
Fix up merge.
2025-06-12 15:08:01 +02:00
Philip Homburg
19c2ff1383
Merge branch 'main' into keyset
2025-06-12 13:58:25 +02:00
Philip Homburg
3583c32004
Support for algorithm rolls.
2025-06-12 13:51:38 +02:00
Ximon Eighteen and GitHub
4f12ded4e0
Package dnst as DEB & RPM packages, and Docker images. ( #22 )
...
Note:
- Man pages have to be generated via `make man` and committed to Git to be included in the generated packages.
- Docker images are built but not yet published to Docker Hub as the required automation credentials have not yet been provisioned.
2025-06-04 10:34:56 +02:00
Ximon Eighteen
d1246b6227
Compilation fix.
2025-06-03 09:57:54 +02:00
Ximon Eighteen and GitHub
7ec5de2bc6
Add signzone command. ( #8 )
...
Note: Lacks Bubble Babble and OpenSSL Engine support compared to the original `ldns-signzone`.
2025-06-02 14:32:55 +02:00
Ximon Eighteen and GitHub
0dcd6ee03c
Add support for -I to notify. ( #85 )
...
Duplicates `UdpConnect` from `domain` and extends it to support setting the source address.
2025-05-30 13:53:40 +02:00
Philip Homburg
97e218b6a3
Make sure key tags are unique.
2025-05-28 11:54:12 +02:00
Terts Diepraam and GitHub
9fb6e0b56e
Merge pull request #62 from NLnetLabs/log-warnings
...
Use `tracing_subscriber` to print warnings and errors
2025-05-23 12:21:43 +02:00
Philip Homburg
df5ef0ef30
Avoid starting a KSK keyroll before init.
2025-05-22 16:42:56 +02:00
Philip Homburg
54fd380963
Display *-generate-params as *-algorithm in show.
2025-05-06 10:56:32 +02:00
Jannik Peters