Ximon Eighteen
4ed0ed58b2
Revert the bidirectional hash map based checking for orphaned NSEC3 hashed owner names, as it's slow AND original ldns-signzone doesn't check correctly for hashes that are not orphans due to correspoding to an ENT (as it discovers ENTs _after_ rejecting orphaned hashed owner names) AND the conclusion is that original ldns-signzone should strip NSEC(3)s on load, as we previously, and again now do.
2024-12-27 10:23:54 +01:00
Ximon Eighteen
045deb6bab
Update to latest domain.
2024-12-20 09:06:10 +01:00
Ximon Eighteen
b8a8d93438
Update to latest domain.
2024-12-19 09:32:53 +01:00
Ximon Eighteen
3c92d3bb49
Cargo fmt.
2024-12-19 09:19:11 +01:00
Ximon Eighteen and GitHub
6ce07e68c9
Use new domain support for parallelized sorting to sign zones faster. ( #34 )
2024-12-19 09:17:14 +01:00
Jannik Peters
a9ef10cf3b
Add empty test to not create output file before input file existence check
2024-12-18 17:48:49 +01:00
Ximon Eighteen
3e0952636e
Update to latest domain.
2024-12-16 12:36:14 +01:00
Ximon Eighteen
98fba67c52
Minor improvements in compatibility of generated zonefile comment format with the original ldns-signzone.
2024-12-16 09:35:09 +01:00
Ximon Eighteen
cbc7f72083
Fix HINFO RRSIGs to match when HINFO is parsed and output correctly (i.e. for when domain #468 is fixed).
2024-12-15 22:11:48 +01:00
Jannik Peters
ca9e1ed69c
Speed up ZONEMD RR insertion into SortedRecords
2024-12-13 15:41:47 +01:00
Jannik Peters
d2dac347eb
Clarify comments on ZONEMD records and placeholders
2024-12-13 13:38:57 +01:00
Ximon Eighteen
064b78b817
More ZONEMD tests from RFC 8976.
2024-12-13 13:00:19 +01:00
Ximon Eighteen
10756ecc30
Cargo fmt.
2024-12-13 12:59:19 +01:00
Ximon Eighteen
6c8955a7e9
FIX: -M should permit the wrong key for the zone to be used.
2024-12-13 12:58:50 +01:00
Ximon Eighteen
023392fadb
Another comment.
2024-12-13 11:53:57 +01:00
Ximon Eighteen
b6b90d5d58
Add a note about some output differences and why they are okay.
2024-12-13 11:26:42 +01:00
Ximon Eighteen
08894f4353
Match original ldns-signzone existing NSEC3PARAM RR handling.
2024-12-13 10:58:48 +01:00
Ximon Eighteen
bc9828e53b
Adjust the NSEC handling behaviour to more closely match ldns-signzone.
2024-12-13 10:31:06 +01:00
Ximon Eighteen
0cc4bf5053
Remove outdated comments.
2024-12-13 10:02:58 +01:00
Ximon Eighteen
5c3f95b7a1
Update man page to reflect current behaviour.
2024-12-13 10:00:35 +01:00
Ximon Eighteen
fcf6a87727
Bump domain.
2024-12-13 09:59:44 +01:00
Ximon Eighteen
f10ae4f70f
Do emulate LDNS regarding NSEC handling of already hashed input zones, i.e. don't hash if already hashed.
2024-12-13 09:59:35 +01:00
Ximon Eighteen
ec8f503e64
Fix default argument values for new formatting options.
2024-12-13 09:55:56 +01:00
Ximon Eighteen
cc0f95186f
Update to latest domain to get origin detection while zone parsing, and use that to only ignore ZONEMD and NSEC3PARAM at the apex (otherwise the RFC 8976 A.2 Complex EXAMPLE Zone example test fails).
2024-12-12 16:50:22 +01:00
Ximon Eighteen
ad3aa1316a
Add other RFC 8976 test files.
2024-12-12 16:06:46 +01:00
Ximon Eighteen
41ba840107
Add failing test of RFC 8976 Complex EXAMPLE Zone.
2024-12-12 16:06:34 +01:00
Ximon Eighteen
95c1d952db
Add passing test of RFC 8976 A.1 Simple EXAMPLE Zone.
2024-12-12 16:06:23 +01:00
Ximon Eighteen
a60a4c1350
Remove left behind debug.
2024-12-12 15:33:49 +01:00
Ximon Eighteen
7e0f29f407
Remove unnecessary tmp dir support in rfc4035 asnd rfc5155 tests.
2024-12-12 15:24:33 +01:00
Ximon Eighteen
1ecac19940
Add comment about cause of test failure.
2024-12-12 15:09:20 +01:00
Ximon Eighteen
5634f15096
Fix incomplete earlier edits to rfc4035 signed zone test.
2024-12-12 15:08:27 +01:00
Ximon Eighteen
8589670360
More comment improvements and corrections for the RFC 5155 test.
2024-12-12 10:50:33 +01:00
Ximon Eighteen
51c8ad4215
Remove outdated comment.
2024-12-12 10:45:26 +01:00
Ximon Eighteen
9d29177512
Remove almost duplicate comment.
2024-12-12 10:45:09 +01:00
Ximon Eighteen
10de2cdadc
Simplify the RFC 5155 test and update some comments.
2024-12-12 10:44:34 +01:00
Ximon Eighteen
7b811dea07
Split formatting dnst args into their own -h group, and fix missing descriptions of -A and -U.
2024-12-12 00:08:14 +01:00
Ximon Eighteen
0173ae553f
Fix RFC 5155 NSEC3 test by using -P instead of -p, i.e. ACTUALLY apply opt-out.
...
Split out some of the ldns-signzone `-b` behaviours into their own flags for `dnst signzone`.
Add a new `-L` flag which dumps a list of owner name to hash mappings as comments before the zone output proper (similar to the mappings shown in the RFC 4035 and RFC 5155 signed zone examples).
Use the new flags to produce much closer output to that of the example signed zone in RFC 5155 making it easier to see if we match its behaviour or not (we do).
2024-12-12 00:04:15 +01:00
Ximon Eighteen
5f90ee9178
WIP: NSEC3 test to compare our behaviour to the RFC 5155 AppendIx A Example Zone. The NSEC3 chain doesn't appear to match that of the RFC (35mth chains to b4um in the RFC but to 4g6 in my code).
2024-12-11 14:24:10 +01:00
Ximon Eighteen
c18128c07e
WIP: NSEC3 test to compare our behaviour to the RFC 5155 AppendIx A Example Zone (the erratum 4993 version). The NSEC3 chain doesn't appear to match that of the erratum.
2024-12-11 13:18:36 +01:00
Ximon Eighteen
53d34cb34b
Update test to follow change to RRSIG timestamp format output.
2024-12-11 10:50:22 +01:00
Ximon Eighteen
509e2f2fc4
Use actual disk files instead of creating input files on the fly, as this makes it easier to run commands on the same data outside the test and simplifies the test fn definition.
2024-12-11 10:35:09 +01:00
Ximon Eighteen
0ca4502a5c
Use a dedicated flag also available to dnst to select output of YYYYMMDDHHmmSS RRSIG timestamps.
2024-12-11 10:33:11 +01:00
Ximon Eighteen
b724fd7467
Use error context to indicate which path could not be loaded.
2024-12-11 10:32:05 +01:00
Ximon Eighteen
e1eef5c5c7
Add a placeholder for a test of the RFC 5155 NSEC3 zone signing example.
2024-12-10 16:44:12 +01:00
Ximon Eighteen
42abba1b3b
Added a test showing that the RFC 1035 appendix A zone signing example works, with the exception of newly found issue https://github.com/NLnetLabs/domain/issues/468 .
2024-12-10 16:42:28 +01:00
Ximon Eighteen
db477c7e51
Move test helper functions to the end.
2024-12-10 14:37:06 +01:00
Ximon Eighteen
211a182a1c
Add placeholder tests for known issues.
2024-12-10 14:26:04 +01:00
Ximon Eighteen
06af01c466
Print ";\n" lines in -b mode only after each "family". ( fixes #44 )
2024-12-10 13:56:36 +01:00
Ximon Eighteen
fa8b7ec637
Clippy.
2024-12-10 12:55:48 +01:00
Ximon Eighteen
ac39540caa
When invoked as LDNS write RRSIG timestamps in RFC 4034 3.2 YYYYMMDDHHmmSS format instead of seconds since the epoch format.
2024-12-10 12:52:32 +01:00
Ximon Eighteen