Commit Graph
40 Commits
Author SHA1 Message Date
Ximon Eighteen fcf6a87727 Bump domain. 2024-12-13 09:59:44 +01:00
Ximon Eighteen cc0f95186f Update to latest domain to get origin detection while zone parsing, and use that to only ignore ZONEMD and NSEC3PARAM at the apex (otherwise the RFC 8976 A.2 Complex EXAMPLE Zone example test fails). 2024-12-12 16:50:22 +01:00
Ximon Eighteen ac39540caa When invoked as LDNS write RRSIG timestamps in RFC 4034 3.2 YYYYMMDDHHmmSS format instead of seconds since the epoch format. 2024-12-10 12:52:32 +01:00
Ximon Eighteen 5c9e65f110 Bump domain to latest. 2024-12-09 16:28:37 +01:00
Ximon Eighteen 4c69c3a31b Bump domain to latest and fix tests to match new tabbed LDNS compatible zonefile format. 2024-12-09 16:22:46 +01:00
Ximon Eighteen 8331b5cc4b Bump domain to latest. 2024-12-09 12:28:06 +01:00
Ximon Eighteen ba0d67afcb Re-order dev dependencies alphabetically and use the pretty_assertions crate to get more readable assert_eq() diff output. 2024-12-09 11:55:04 +01:00
Ximon Eighteen b52846f64a Update to match changes in SigningKeyUsageStrategy in latest domain. 2024-12-06 13:05:11 +01:00
Ximon Eighteen 3f655654a1 Update to latest domain to use new tabbed zonefile formatting to match LDNS. 2024-12-05 13:28:09 +01:00
Ximon Eighteen e403d24bee Use updated strategy fn naming. 2024-12-05 13:00:02 +01:00
Ximon Eighteen e2810b218d Add an integration test based on an existing LDNS test. 2024-12-05 10:59:56 +01:00
Ximon Eighteen 2c1dfeb523 Merge branch 'main' into add-ldns-like-sign-zone-support 2024-12-03 23:47:39 +01:00
Ximon Eighteen 489d762444 - Upgrade to latest domain changes.
- Add support for `-A`.
- Add support for `-U`.
- Fix failure to print additional RRSIGs when signing with more than one key.
2024-12-03 21:25:52 +01:00
9432f4897d Notify (#7)
* start work on notify

* continue on notify

* various fixes to notify

* notify: incorporate feedback from @mozzieongit

* notify: update outdated terminology

* notify: fix up comment

* update: fix up error message

Co-authored-by: Jannik <jannik@nlnetlabs.nl>

* notify: temporarily remove -I because it's not supported

* notify: imports compliant with domain's CONTRIBUTING.md

* notify: improve error message for TSIG parsing

* start testing notify!

* stelline tests for notify

* notify: implement ldns argument parsing

* fix CI

* cargo fmt

* update last occurrence of rust 1.78

* fix lazy_static to 1.0.2 for minimal-versions

* bring up to date with initial-nsec3-hash

* imports more in domain style

* notify (and other ldns utils): add support for printing version to env

* notify: simplify with Box<dyn SendRequest<_>>

* notify: improve help and error messages

---------

Co-authored-by: Jannik <jannik@nlnetlabs.nl>
2024-12-02 14:21:59 +01:00
617b623ba3 Add keygen command. (#9)
* Keygen skeleton.

* [keygen] Implement the basic features

* [keygen] synchronize files before exiting

* [keygen] Add help documentation

* [keygen] Generate '.ds' files for KSKs

* [keygen] Use 'display_as_bind()'

* [keygen] Add support for symlinks (Unix only)

* [keygen] Improve errors and support '.ds' symlinks

* Implement ldns-specific parsing for 'keygen'

* [keygen] Implement '-v' with version info

* [keygen] Add 'cfg(unix)' in ldns-parsing

* [keygen] Correctly handle duplicate options in ldns parsing

* Revert "[keygen] Implement '-v' with version info"

This reverts commit 643ab86bd4.

See: <https://github.com/NLnetLabs/dnst/pull/9#discussion_r1843460496>

* [keygen] Integrate the use of 'Env'

* [workflows/ci] Add OpenSSL installation steps

* [workflows/ci] Integrate OpenSSL for 'minimal_versions'

* [keygen] Improve the 'dnst' interface

* [keygen] Satisfy clippy

* [keygen] Simplify symlink CLI

* Add basic filesystem operations to 'Env'

* [keygen] Use symlink ops provided by 'Env'

* [keygen] Add basic tests for argument parsing

* [keygen] Add tests

* [keygen] Satisfy 'minimal-versions'

* [keygen] Satisfy clippy

* [keygen] Add Windows-specific missing branch

* [keygen] Document parsing for 'symlink'

* [keygen] Report error on '-r'

* [env] Refactor util fns into a 'util' module

* [keygen::symlink] Mark params as used, for Windows

* [keygen] Fix double error message

See: <https://github.com/NLnetLabs/dnst/pull/9#discussion_r1862213985>

* [keygen] Use 'Args::Report'

* [keygen] Allow invalid HTML in docs for Clap

* Use 'domain'-style imports

* [keygen] Use uppercase for expected clap values

* [keygen] use lowercase value names in Clap

---------

Co-authored-by: arya dradjica <arya@nlnetlabs.nl>
2024-12-02 11:20:21 +01:00
Ximon Eighteen 6064a19cde Build against temporary branch of domain that contains all latest changes. 2024-12-02 10:42:58 +01:00
Ximon Eighteen 544cdd218c Merge branch 'main' into add-ldns-like-sign-zone-support 2024-11-29 21:11:03 +01:00
Jannik Peters 5c248eda2e Use zonemd and multisign aggregated domain branch 2024-11-27 12:23:08 +01:00
Ximon Eighteen 844ca3cfdb Merge branch 'main' into add-ldns-like-sign-zone-support 2024-11-25 15:08:51 +01:00
9744d9e1ca Add nsec3-hash command. (#6)
Co-authored-by: Jannik <jannik@nlnetlabs.nl>
Co-authored-by: Terts Diepraam <terts.diepraam@gmail.com>
2024-11-22 13:48:10 +01:00
Ximon Eighteen 9eb17c2528 Rename variable diagnostic_comments to extra_comments because comments must always output (e.g. for DNSKEY).
Add sorting to match LDNS signzone zone file ordered output.

Moves per type comment output into impls of new trait `Commented`.
2024-11-22 11:43:20 +01:00
Jannik Peters 7828d4dc57 Update Cargo.lock for domain 2024-11-21 16:57:05 +01:00
Jannik Peters 9cdba55750 Merge branch 'main' into add-ldns-like-sign-zone-support 2024-11-20 12:39:23 +01:00
Terts DiepraamandGitHub 511c8f1f6a Implement Key2ds (#2) 2024-11-19 13:45:18 +01:00
Ximon Eighteen 01dba27868 Merge branch 'main' into add-ldns-like-sign-zone-support 2024-11-11 23:02:04 +01:00
bae3b00041 Separate ldns parsing from clap parsing (#19)
* Separate ldns parsing from clap parsing

Co-authored-by: Jannik Peters <jannik@nlnetlabs.nl>

* nsec3-hash: sort ldns argument parsing alphabetically

* abort ldns parsing early on malfored argv[0]

* add 'Error' prefix to ldns parsing errors

* use clap default exit code of 2 for dnst versions of commands

* remove args_overide_self from nsec3hash

* move parse_os and parse_os_with out of LdnsCommand

---------

Co-authored-by: Jannik Peters <jannik@nlnetlabs.nl>
2024-11-11 15:52:26 +01:00
Ximon Eighteen a82778af0b Use new domain key size support to output size = 256b or similar in DNSKEY RR comments to match ldns-signzone behaviour. 2024-11-08 13:25:06 +01:00
Ximon Eighteen b3e9b36aac Update domain. 2024-11-07 13:05:18 +01:00
Ximon Eighteen a433f4cc3c Update domain and align -b output more closely to that of ldns-signzone. 2024-11-06 23:47:17 +01:00
Ximon Eighteen c97a3aab99 Merge branch 'main' into add-ldns-like-sign-zone-support 2024-11-06 22:49:25 +01:00
Ximon EighteenandGitHub 24d22a9854 Add Cargo.lock to Git (because dnst is a binary and because we do that for other binaries such as Routinator). (#17) 2024-11-05 18:59:52 +01:00
Ximon Eighteen 05cbde000a Review feedback: Remove redundant dependency. 2024-11-05 15:23:54 +01:00
Ximon Eighteen 10a0e87a5a Follow changes in domain, and add arguments for hashing only and for outputing diagnostic comments. 2024-11-05 00:01:43 +01:00
Ximon Eighteen a55f0d1eca Make -p behave like ldns-sign-zone -p and add -A for the prior behaviour to match dnssec-signzone -A. 2024-10-30 19:01:18 +01:00
Ximon Eighteen bcc093fe41 Update to latest version of domain branch. 2024-10-29 14:43:14 +01:00
Ximon Eighteen 6908dbce76 Update to latest version of domain branch, which fixes default algorithm argument handling too. 2024-10-29 14:21:14 +01:00
Ximon Eighteen a796ba059e Update to latest version of domain branch. 2024-10-28 13:54:23 +01:00
Ximon Eighteen 10309ca858 Load signing keys from BIND keyfile sets. 2024-10-17 15:16:49 +02:00
Ximon Eighteen 728f14fd37 - Support multiple signing keys and more algorithms.
- Add the DNSKEY and NSEC3PARAM records before signing the zone.
- Use latest domain.
2024-10-12 02:36:09 +02:00
Ximon Eighteen 076df4d8aa Initial hacky WIP ldns-signzone like support using a modified version of domain that has WIP nsec3 support and a modified version of the PR #406 key management support. 2024-10-11 13:31:46 +02:00