WEBDIENSTE/NLnetLabs-dnst
1
0
Fork 0
mirror of https://github.com/NLnetLabs/dnst.git synced 2026-09-23 02:04:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
120 Commits 42 Branches 6 Tags
913ff60d23a950c07b62cd418d2e8d8208c8a133
Commit Graph
70 Commits
Author SHA1 Message Date
Philip Homburg 2c18fac8db Merge branch 'main' into keyset 2025-09-05 12:17:08 +02:00
Philip-NLnetLabsandGitHub c19673fedd Keyset import (#121) 
* Restructure roll commands.

* Import public keys.

* Import a public/private key pair from files.

* Add a default TTL to config. Use that for DNSKEY/CDS/CDNSKEY/DS RRsets.

* Cargo.lock.

* Support for importing KMIP keys.

* Import public/private keys in decoupled state

* Add --private-key option to importing a public/private key pair from files.

* Add remove-key command.
 2025-09-05 11:38:52 +02:00
Ximon EighteenandGitHub 4f11b90956 Permit KMIP servers to be added in an inactive state. (#122) 2025-09-03 16:01:18 +02:00
Jannik PetersandGitHub 6915b816a6 Reimplement dnst update with better UI (#115) 2025-09-03 12:20:51 +02:00
Ximon Eighteen 1d6b2f2269 Mark keyset as experimental. 2025-09-03 10:10:13 +02:00
Philip Homburg df4864420a Merge branch 'main' into keyset 2025-09-02 16:40:06 +02:00
Jannik PetersandGitHub 0e1ea6efa4 Disable help command until opening man pages is implemented (#120) 
* Disable help command until opening man pages is implemented
* Bump minimal version because rayon dependency requires rustc 1.80
 2025-09-01 13:37:21 +02:00
Philip-NLnetLabsandGitHub 6fad119685 Add support for automatic key rolls (#108) 2025-08-29 10:34:11 +02:00
Ximon EighteenandGitHub 018527f95f Add support for the KMIP cryptographic backend. (#99) 
- Adds KMIP server based key generation, signing and destruction, equivalent to the existing Ring/OpenSSL functionality.
- Adds new kmip subcommands for managing KMIP server configurations.
- Adds support for referring to KMIP keys by a new KMIP URL scheme. 
- Add a feature for the KMIP crypto backend just like the Ring and OpenSSL crypto backends.
- Adds support for storing sensitive credentials in files separate to the KMIP server configuration.
 2025-08-25 19:01:52 +02:00
Ximon EighteenandGitHub 5eba1d4ee8 Make the OUTPUT FORMATTING help heading have consistent case with the rest of the help headings. (#112) 2025-08-11 13:42:55 +02:00
Ximon EighteenandGitHub e4fcc04310 Make version argument handling more consistent. (#86) 2025-08-08 13:41:46 +02:00
Jannik PetersGitHubXimon Eighteen
 		f6ae5d744c Add verbosity option (#110) 
Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2025-08-08 12:41:00 +02:00
Jannik PetersandGitHub 3f84c1b26c Match ldns-signzone NSEC/NSEC3 RR ordering and NSEC3 formatting (#109) 2025-08-08 12:38:36 +02:00
Jannik PetersandGitHub 5a4c09763f Output digest in lower case for ldns-key2ds (#111) 2025-08-07 14:16:10 +02:00
Ximon EighteenGitHubTerts DiepraamJannik Peters
 		28fc39d401 Format keygen and key2ds subcommand output using tabs like ldns-keygen and ldns-key2ds. (#48) 
Co-authored-by: Terts Diepraam <terts.diepraam@gmail.com>
Co-authored-by: Jannik Peters <jannik@nlnetlabs.nl>
 2025-08-07 10:31:03 +02:00
Jannik PetersandGitHub 8592d87afd Improve error message when failing to print to stdout (#103) 2025-08-07 10:23:58 +02:00
Jannik PetersandGitHub 79baa04389 Remove NSEC3 algorithm option for dnst (#104) 
The NSEC3 algorithm option only had one possible value (SHA-1) and is
therefore unnecessary.
 2025-08-07 10:20:25 +02:00
Jannik PetersandGitHub 0d0787169a Remove digest algorithm fallback for dnst key2ds (#105) 2025-08-07 10:06:08 +02:00
Jannik PetersandGitHub d242740e3e Allow specifying algorithms by number in dnst keygen (#106) 2025-08-06 12:11:26 +02:00
Jannik Peters 58748f71d2 Fix missing newline in keygen 
The missing newline broke key2ds, because the inplace zonefile parser
requires that every line ends with a newline character.
 2025-08-04 18:21:16 +02:00
Philip-NLnetLabsGitHubTerts Diepraam
 		559f00e65c Use clap to parse keyset subcommands (#100) 
Co-authored-by: Terts Diepraam <terts.diepraam@gmail.com>
 2025-07-11 14:38:21 +02:00
Philip-NLnetLabsandGitHub cf84a305fd Fix new warnings from Rust version 1.88. (#101) 2025-07-11 14:19:44 +02:00
Philip Homburg 75ce06f14e Add support for cron_next. 2025-06-24 12:24:58 +02:00
Philip Homburg 7977bf7c93 More URL handling. 2025-06-19 16:32:28 +02:00
Philip Homburg 688aada740 More detailed error messages. 2025-06-18 17:27:52 +02:00
Philip Homburg 2129fc2b36 Store key references are file URLs. 2025-06-17 09:46:20 +02:00
Philip Homburg 5d946beaac Remove unneeded format!. 2025-06-12 15:23:25 +02:00
Philip Homburg 932844569e Fix up merge. 2025-06-12 15:08:01 +02:00
Philip Homburg 19c2ff1383 Merge branch 'main' into keyset 2025-06-12 13:58:25 +02:00
Philip Homburg 3583c32004 Support for algorithm rolls. 2025-06-12 13:51:38 +02:00
Ximon EighteenandGitHub 4f12ded4e0 Package dnst as DEB & RPM packages, and Docker images. (#22) 
Note:
- Man pages have to be generated via `make man` and committed to Git to be included in the generated packages.
- Docker images are built but not yet published to Docker Hub as the required automation credentials have not yet been provisioned.
 2025-06-04 10:34:56 +02:00
Ximon Eighteen d1246b6227 Compilation fix. 2025-06-03 09:57:54 +02:00
Ximon EighteenandGitHub 7ec5de2bc6 Add signzone command. (#8) 
Note: Lacks Bubble Babble and OpenSSL Engine support compared to the original `ldns-signzone`.
 2025-06-02 14:32:55 +02:00
Ximon EighteenandGitHub 0dcd6ee03c Add support for -I to notify. (#85) 
Duplicates `UdpConnect` from `domain` and extends it to support setting the source address.
 2025-05-30 13:53:40 +02:00
Philip Homburg 97e218b6a3 Make sure key tags are unique. 2025-05-28 11:54:12 +02:00
Terts DiepraamandGitHub 9fb6e0b56e Merge pull request #62 from NLnetLabs/log-warnings 
Use `tracing_subscriber` to print warnings and errors
 2025-05-23 12:21:43 +02:00
Philip Homburg df5ef0ef30 Avoid starting a KSK keyroll before init. 2025-05-22 16:42:56 +02:00
Philip Homburg 54fd380963 Display *-generate-params as *-algorithm in show. 2025-05-06 10:56:32 +02:00
Terts Diepraam 244112c26e print error context with tracing as well 2025-04-23 12:58:40 +02:00
Terts Diepraam 93fcbaec50 fix clippy lints 2025-04-23 11:40:59 +02:00
Terts Diepraam bb54843b1e logging: use tracing instead of custom logging code 2025-04-23 11:37:00 +02:00
Philip Homburg 2ee55286fc The CDS/CDNSKEY RRsets also need to be signed. Cron command. 2025-04-23 11:22:06 +02:00
Terts DiepraamGitHubXimon Eighteen
 		d28f507df5 nsec3-hash: set default number of iterations to 0 (#64) 
* nsec3-hash: set default number of iterations to 0

This reverts commit 645fd13e62.

* Update the ldns-nsec3-hash man page to reflect the changed default number of iterations.

---------

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2025-04-23 09:32:18 +02:00
Terts Diepraam fa974de9b2 add log module and warning/error printing macros 2025-04-22 16:53:08 +02:00
Philip Homburg 3621409542 Now with keyset.rs. 2025-04-17 15:44:51 +02:00
Philip Homburg f8c1453bdb Initial version of keyset. 2025-04-17 13:37:25 +02:00
Terts Diepraam 0c2125f0bb Fix up newlines in error printing 2025-04-16 12:13:06 +02:00
Terts DiepraamandGitHub 1d5c32d1ef Merge pull request #57 from NLnetLabs/dont-send-opt-with-notify 
Don't send EDNS(0) OPT record with NOTIFY.
 2025-04-15 14:48:14 +02:00
Ximon EighteenandGitHub f859a2ed10 Re-order dnst commands alphabetically. (#54) 
* Re-order dnst commands alphabetically.

* Also re-order the match block alphabetically.
 2025-04-15 12:14:58 +02:00
Terts Diepraam a50a3eff47 sync with domain dnssec restructure 2025-04-15 10:02:28 +02:00