* Introduce a 'WorkSpace' object to keep the current working state of keyset.
* Fallout from merging.
* Switch to the crypto-and-keyset-fixes branch in domain for the time being.
Disable kmip because the branch does not support that.
* Update lock file.
* Bump Rust version to 1.85 because domain is at 1.85.0.
* Switch to domain-kmip. (#142)
* Switch to domain-kmip.
* Use https URL for domain-kmip.
* Update for domain-kmip change.
* Switch to main branch of domain-kmip.
* Clippy.
* Bump Rust version to 1.88 for kmip-protocol.
To avoid Cascade installing dnst and uninstalling ldns-utils that Cascade users may want to use such as ldns-verify-zone, which dnst doesn't provide yet. Also because this branch of dnst depends on an as yet unreleased version of the domain crate.
Update Cargo.lock bcause cargo-deb complains that it needs updating.
Co-authored-by: Jannik Peters <jannik@nlnetlabs.nl>
* Restructure roll commands.
* Import public keys.
* Import a public/private key pair from files.
* Add a default TTL to config. Use that for DNSKEY/CDS/CDNSKEY/DS RRsets.
* Cargo.lock.
* Support for importing KMIP keys.
* Import public/private keys in decoupled state
* Add --private-key option to importing a public/private key pair from files.
* Add remove-key command.
- Adds KMIP server based key generation, signing and destruction, equivalent to the existing Ring/OpenSSL functionality.
- Adds new kmip subcommands for managing KMIP server configurations.
- Adds support for referring to KMIP keys by a new KMIP URL scheme.
- Add a feature for the KMIP crypto backend just like the Ring and OpenSSL crypto backends.
- Adds support for storing sensitive credentials in files separate to the KMIP server configuration.
Note:
- Man pages have to be generated via `make man` and committed to Git to be included in the generated packages.
- Docker images are built but not yet published to Docker Hub as the required automation credentials have not yet been provisioned.
Philip Homburg