WEBDIENSTE/NLnetLabs-dnst
1
0
Fork 0
mirror of https://github.com/NLnetLabs/dnst.git synced 2026-09-25 19:25:00 +02:00
Code Issues Packages Projects Releases Wiki Activity
181 Commits 42 Branches 6 Tags
f81d10447df11dd0fbd36aef371cdf1a8aaf3be4
Commit Graph
181 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ximon Eighteen f81d10447d - FIX: Default LDNS KSK selection strategy is NOT to honour the key purpose but instead to fallback to using ZSKs as KSKs if there are no KSKs. 
- FIX: Don't output ENT comments if `-b` is not in use.
- ENH: Only order RRSIGs after covered RRSETs if `-b` is in use.
- ENH: In DNST mode, don't output any RR comments unless `-b` is in use, unlike LDNS which still outputs DNSKEY key tag comments when `-b` is not in use.
 2024-12-05 10:56:50 +01:00
Ximon Eighteen f041882c65 Minor man page tweak. 2024-12-05 09:39:45 +01:00
Ximon Eighteen 1db62afc16 Make it clear that in the LDNS emulation case the stripping of NSEC(3) and RRSIG RRs is a deviation from the original ldns-signzone behaviour. 2024-12-05 09:39:06 +01:00
Ximon Eighteen c76928709a Update man pages to match NSEC(3) and RRSIG stripping behaviour. 2024-12-05 09:31:42 +01:00
Ximon Eighteen f0d77d653a Strip NSEC(3) and RRSIG RRs from the loaded zone so that we always only sign an unsigned zone, as it's unclear what the actual / intended original ldns-signzone behaviour when processing an already signed zone is supposed to be. 2024-12-05 09:30:04 +01:00
Ximon Eighteen c5450e228f Update the ldns-signzone manual page to more closely reflect the implemented behaviour. 2024-12-05 09:17:46 +01:00
Jannik Peters 76e255a20c Simplify line filter functions 2024-12-04 13:25:33 +01:00
Jannik Peters 5a57b66723 Fix extra newline in line filter 2024-12-04 12:37:41 +01:00
Ximon Eighteen ff32c80c53 Remove commented line. 2024-12-03 23:55:00 +01:00
Ximon Eighteen 924f32a497 Remove wrongly committed files. 2024-12-03 23:53:57 +01:00
Ximon Eighteen 5c97fc4e5b Revert tabbed output changes in preparation to use the PR #446 approach instead. 2024-12-03 23:49:02 +01:00
Ximon Eighteen 2c1dfeb523 Merge branch 'main' into add-ldns-like-sign-zone-support 2024-12-03 23:47:39 +01:00
Ximon Eighteen 4ed6478798 Clippy. 2024-12-03 23:19:19 +01:00
Ximon Eighteen 489d762444 - Upgrade to latest domain changes. 
- Add support for `-A`.
- Add support for `-U`.
- Fix failure to print additional RRSIGs when signing with more than one key.
 2024-12-03 21:25:52 +01:00
Jannik Peters dafbd86938 Add more tests 2024-12-03 17:56:17 +01:00
Jannik Peters a246d557ec Use LdnsCommand::report_version 2024-12-03 17:56:17 +01:00
Jannik Peters 7b2e67afc2 Add more dnst argument parsing tests 2024-12-03 17:56:17 +01:00
Jannik Peters 91531c4f0e Clarify test keys names 2024-12-03 17:56:17 +01:00
Jannik Peters b634acd15b Add test helper functions to filter lines for multiple patterns 2024-12-03 17:56:17 +01:00
Jannik Peters 0c8a95643d Update zonemd and sign expected output 2024-12-02 17:48:01 +01:00
Jannik Peters c23b78f9e6 Extract test file creation boilerplate into function 2024-12-02 17:36:32 +01:00
Jannik Peters 66fce99b18 Add NSEC3 optout behaviour test 2024-12-02 15:11:03 +01:00
Terts DiepraamGitHubXimon Eighteen
 		6f0e27d3e1 Implement ldns-update and dnst update (#10) 
* implement ldns-update and dnst update

* implement TSIG support for dnst update

* update: imports compliant with domain's CONTRIBUTING.md

* Use RequestMessage instead of RequestMessageMulti as we're expecting to receive multiple responses because we don't expect to send XFR requests.

* Clippy.

* update: fix parsing of optional IP addr

* WIP

* update: make it compile after rebase

* start testing update

* update: stelline test

* update: fix some comments and strings

* update: improve TSIG error message

* update: use lookup_host instead of manual A query

* notify & update: merge the separate TSigInfo instances

* update: look in both answer and authority sections

* fix duplicate clippy attribute

---------

Co-authored-by: Ximon Eighteen <3304436+ximon18@users.noreply.github.com>
 2024-12-02 14:33:03 +01:00
Terts DiepraamGitHubJannik
 		9432f4897d Notify (#7) 
* start work on notify

* continue on notify

* various fixes to notify

* notify: incorporate feedback from @mozzieongit

* notify: update outdated terminology

* notify: fix up comment

* update: fix up error message

Co-authored-by: Jannik <jannik@nlnetlabs.nl>

* notify: temporarily remove -I because it's not supported

* notify: imports compliant with domain's CONTRIBUTING.md

* notify: improve error message for TSIG parsing

* start testing notify!

* stelline tests for notify

* notify: implement ldns argument parsing

* fix CI

* cargo fmt

* update last occurrence of rust 1.78

* fix lazy_static to 1.0.2 for minimal-versions

* bring up to date with initial-nsec3-hash

* imports more in domain style

* notify (and other ldns utils): add support for printing version to env

* notify: simplify with Box<dyn SendRequest<_>>

* notify: improve help and error messages

---------

Co-authored-by: Jannik <jannik@nlnetlabs.nl>
 2024-12-02 14:21:59 +01:00
Ximon Eighteen 295727db2c Remove testing code left behind accidentally. 2024-12-02 11:58:21 +01:00
Ximon Eighteen 81bbffe9f6 FIX: ZONEMD scheme and algorithm name matching should not be case sensitive (as they are not case sensitive in the original LDNS code). 2024-12-02 11:45:46 +01:00
Ximon Eighteen 9b3e7e2d63 Update ZONEMD argument parsing based on the update to use iana macro based parsing in domain. 2024-12-02 11:44:17 +01:00
Ximon EighteenGitHubarya dradjica
 		617b623ba3 Add keygen command. (#9) 
* Keygen skeleton.

* [keygen] Implement the basic features

* [keygen] synchronize files before exiting

* [keygen] Add help documentation

* [keygen] Generate '.ds' files for KSKs

* [keygen] Use 'display_as_bind()'

* [keygen] Add support for symlinks (Unix only)

* [keygen] Improve errors and support '.ds' symlinks

* Implement ldns-specific parsing for 'keygen'

* [keygen] Implement '-v' with version info

* [keygen] Add 'cfg(unix)' in ldns-parsing

* [keygen] Correctly handle duplicate options in ldns parsing

* Revert "[keygen] Implement '-v' with version info"

This reverts commit 643ab86bd4.

See: <https://github.com/NLnetLabs/dnst/pull/9#discussion_r1843460496>

* [keygen] Integrate the use of 'Env'

* [workflows/ci] Add OpenSSL installation steps

* [workflows/ci] Integrate OpenSSL for 'minimal_versions'

* [keygen] Improve the 'dnst' interface

* [keygen] Satisfy clippy

* [keygen] Simplify symlink CLI

* Add basic filesystem operations to 'Env'

* [keygen] Use symlink ops provided by 'Env'

* [keygen] Add basic tests for argument parsing

* [keygen] Add tests

* [keygen] Satisfy 'minimal-versions'

* [keygen] Satisfy clippy

* [keygen] Add Windows-specific missing branch

* [keygen] Document parsing for 'symlink'

* [keygen] Report error on '-r'

* [env] Refactor util fns into a 'util' module

* [keygen::symlink] Mark params as used, for Windows

* [keygen] Fix double error message

See: <https://github.com/NLnetLabs/dnst/pull/9#discussion_r1862213985>

* [keygen] Use 'Args::Report'

* [keygen] Allow invalid HTML in docs for Clap

* Use 'domain'-style imports

* [keygen] Use uppercase for expected clap values

* [keygen] use lowercase value names in Clap

---------

Co-authored-by: arya dradjica <arya@nlnetlabs.nl>
 2024-12-02 11:20:21 +01:00
Ximon Eighteen 0ad6505e36 Cargo fmt. 2024-12-02 10:51:36 +01:00
Ximon Eighteen 6064a19cde Build against temporary branch of domain that contains all latest changes. 2024-12-02 10:42:58 +01:00
Ximon Eighteen 9f127b7d45 FIX: In LDNS Mode ignore case of ZoneMD scheme name and algorithm mnemonic arguments to match LDNS behaviour. 2024-12-02 10:39:47 +01:00
Ximon Eighteen fd2f485c86 FIX: In LDNS mode treat 0 dates as not-set like LDNS. (fixes #45) 2024-12-02 10:19:31 +01:00
Ximon Eighteen 544cdd218c Merge branch 'main' into add-ldns-like-sign-zone-support 2024-11-29 21:11:03 +01:00
Ximon Eighteen e3d197ff89 Remove files wrongly commited to git. 2024-11-28 23:00:15 +01:00
Jannik Peters da4f0889ac Fix test to reflect NSEC3 optout default 2024-11-28 17:55:25 +01:00
Jannik Peters 788af68bf9 Fix NSEC3 optout flags-only mixup 2024-11-28 17:51:12 +01:00
Terts DiepraamandGitHub 7e2b9a6cb7 Merge pull request #39 from NLnetLabs/report-command 
All: add version printing mechanism via `Report` command
 2024-11-28 16:50:13 +01:00
Terts Diepraam 40c5eb1d3f all: add version printing mechanism 2024-11-28 16:43:23 +01:00
Terts DiepraamandGitHub 09d7631810 Merge pull request #38 from NLnetLabs/remove-command-into 
all: remove Command::from implementations
 2024-11-28 16:04:18 +01:00
Terts Diepraam 2f2c17c9f2 all: remove Command::from implementations 2024-11-28 15:02:05 +01:00
Jannik Peters c7ac2174ca Fix test failing when running past a time second change 2024-11-28 12:19:02 +01:00
Jannik Peters e1599cf59e Update signzone manuals 2024-11-28 12:12:13 +01:00
Ximon Eighteen d1c39e2762 Link to what Bubble Babble is. 2024-11-28 12:08:33 +01:00
Ximon Eighteen 5f22e5f9c6 Minor adjustments to comment output. 2024-11-28 12:00:57 +01:00
Jannik Peters c8c80436e6 Add a zonemd with signing test 2024-11-27 17:42:24 +01:00
Jannik Peters 0c1742ba29 Use env.in_cwd when reading key files 2024-11-27 17:40:00 +01:00
Jannik Peters 7613599f0d Clippy 2024-11-27 16:43:26 +01:00
Jannik Peters 20d24be766 Add some parsing and zonemd execution tests 2024-11-27 16:38:06 +01:00
Jannik Peters d63561e3a8 Make missing key argument a clap parsing error 2024-11-27 16:35:04 +01:00
Jannik Peters 9e656d7dc0 Implement ldns compatible ZONEMD option parsing 2024-11-27 14:30:34 +01:00