- Adds KMIP server based key generation, signing and destruction, equivalent to the existing Ring/OpenSSL functionality.
- Adds new kmip subcommands for managing KMIP server configurations.
- Adds support for referring to KMIP keys by a new KMIP URL scheme.
- Add a feature for the KMIP crypto backend just like the Ring and OpenSSL crypto backends.
- Adds support for storing sensitive credentials in files separate to the KMIP server configuration.
Note:
- Man pages have to be generated via `make man` and committed to Git to be included in the generated packages.
- Docker images are built but not yet published to Docker Hub as the required automation credentials have not yet been provisioned.
* nsec3-hash: set default number of iterations to 0
This reverts commit 645fd13e62.
* Update the ldns-nsec3-hash man page to reflect the changed default number of iterations.
---------
Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
* implement ldns-update and dnst update
* implement TSIG support for dnst update
* update: imports compliant with domain's CONTRIBUTING.md
* Use RequestMessage instead of RequestMessageMulti as we're expecting to receive multiple responses because we don't expect to send XFR requests.
* Clippy.
* update: fix parsing of optional IP addr
* WIP
* update: make it compile after rebase
* start testing update
* update: stelline test
* update: fix some comments and strings
* update: improve TSIG error message
* update: use lookup_host instead of manual A query
* notify & update: merge the separate TSigInfo instances
* update: look in both answer and authority sections
* fix duplicate clippy attribute
---------
Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
* start work on notify
* continue on notify
* various fixes to notify
* notify: incorporate feedback from @mozzieongit
* notify: update outdated terminology
* notify: fix up comment
* update: fix up error message
Co-authored-by: Jannik <jannik@nlnetlabs.nl>
* notify: temporarily remove -I because it's not supported
* notify: imports compliant with domain's CONTRIBUTING.md
* notify: improve error message for TSIG parsing
* start testing notify!
* stelline tests for notify
* notify: implement ldns argument parsing
* fix CI
* cargo fmt
* update last occurrence of rust 1.78
* fix lazy_static to 1.0.2 for minimal-versions
* bring up to date with initial-nsec3-hash
* imports more in domain style
* notify (and other ldns utils): add support for printing version to env
* notify: simplify with Box<dyn SendRequest<_>>
* notify: improve help and error messages
---------
Co-authored-by: Jannik <jannik@nlnetlabs.nl>
Philip Homburg