davidb/jdnssec-tools
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity
132 Commits 2 Branches 12 Tags 13 MiB
15cb5e2ab7
Commit Graph

74 Commits

Author SHA1 Message Date
David Blacka
15cb5e2ab7 Fix issue in jdnssec-verifyzone (and ZoneVerifier) where junk in the zone wouldn't be handled correctly (that is, ignored.) 2014-04-22 16:39:00 -04:00
David Blacka
9fad4941a6 Make jdnssec-zoneformat -N also compute NSEC3 original owner names for ENTs 2014-04-22 16:37:58 -04:00
David Blacka
a45f5d1df7 use the perfectly OK (now) TypeMap.toString() method. 2012-07-16 14:16:42 -04:00
David Blacka
3da308c4b9 Fix TypeMap.fromBytes() and add a TypeMap.fromString() method. 2012-07-16 14:16:13 -04:00
David Blacka
d3e8c4c913 Add duplicate RR detection to jdnssec-verifyzone, and a command line option to disable it. 2012-05-26 23:14:12 -04:00
David Blacka
69d965cc0f Wrap the new exceptions to mimic prior behavior. 2012-05-26 16:40:50 -04:00
David Blacka
ca7f10bd07 Instead of using DNSSEC.Secure, DNSSEC.Failed, etc, just use boolean results. 
This means we lose the idea of Insecure, but that wasn't effectively being used anyway.
Further, remove any use of the DNSJava Cache class -- that also wasn't being used.
 2012-05-26 16:40:50 -04:00
David Blacka
25cc81d46a Replace use of old KEYConverter with new DNSKEYRecord constructor. 2012-05-26 16:40:50 -04:00
David Blacka
2a90a6ccd9 byte -> int for NSEC3 digest type. 2012-05-26 16:40:49 -04:00
David Blacka
b18a96cbfc Change dnsjava algorithm references from DNSSEC.<alg> to DNSSEC.Algorithm.<alg> 2012-05-26 16:40:49 -04:00
David Blacka
fb75a5419f Use generic types when possible. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@246 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-12 21:25:42 +00:00
David Blacka
91207aeed2 Refactor the command line classes with a new base class and upgrade 
commons-cli to version 1.2.

git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@245 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-12 21:25:26 +00:00
David Blacka
645b8a1a60 fix my logger normalization -- it was still defaulting to INFO. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@244 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-10 00:25:10 +00:00
David Blacka
453bf283ba eclipse reformatting. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@242 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-09 23:58:56 +00:00
David Blacka
faae654a23 make reading and writing to stdin/stdout work for most of the tools 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@241 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-09 23:58:54 +00:00
David Blacka
73d930a850 for jdnssec-signzone and jdnssec-signrrset, make 'multiline' output NOT the default, and add a command line switch to enable it. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@240 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-09 23:58:51 +00:00
David Blacka
8347e5ffc3 fix usage statement printing. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@239 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-09 23:58:49 +00:00
David Blacka
c459de830f update jdnssec-keygen to use a default algorithm of 8 instead of 5. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@238 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-03 20:29:54 +00:00
David Blacka
e770f01958 Clean up logging: recognize all levels for -v, normalize the code that forces java.util.logging to set the correct log level, normalize on the use of our very simple log formatter. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@237 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-03 20:24:33 +00:00
David Blacka
03737a1efd Handle the new bind 9.7 private key files (hopefully). 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@227 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-02 19:36:40 +00:00
David Blacka
1616d07fe6 Add -N option for calculating original ownernames for NSEC3 RRs 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@226 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-02 19:36:14 +00:00
David Blacka
04d751ae56 Add -m option to jdnssec-zoneformat 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@225 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2011-02-02 18:59:06 +00:00
David Blacka
86072cbcc8 Add options for fudging or ignoring times in verifyzone. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@224 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-12-14 18:01:12 +00:00
David Blacka
3d6b21b0fc output changes for VerifyZone, some code cleanup and bug fixes for ZoneVerifier 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@220 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-12-07 05:31:58 +00:00
David Blacka
41c96feffd Refactor the zone verification tool to fully check zones for correctness. Not quite complete, as more testing needs to be done and the output needs to be standardized 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@219 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-12-06 05:59:42 +00:00
David Blacka
3c9e33baf7 fix a number of jdnssec-signzone signing bugs: do not incorrectly set the RRSIG bit on NSEC3 RRs corresponding to insecure delegations, ignore junk below a DNAME, ignore delegations below other delegations 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@218 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-12-06 00:25:04 +00:00
David Blacka
14ea619299 add verbose signing mode to signzone; some comment fixes, some unused vars and imports removed 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@217 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-12-05 23:08:13 +00:00
David Blacka
beca0e4872 Add jdnssec-signrrset tool which will sign any single rrset with any key. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@208 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-07-21 17:09:56 +00:00
David Blacka
34e6f91ef2 restore NSEC3 original ownername comments. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@185 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-11-03 02:24:04 +00:00
David Blacka
64f5de7b38 fix our base32 context 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@184 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-11-03 02:24:02 +00:00
David Blacka
1fe3b49c17 Switch to dnsjava-2.0.7: the NSEC3 comments won't work, and I had to rescue the nsec3 hash calculation function from the original NSEC3Record implementation. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@183 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-11-03 02:23:59 +00:00
David Blacka
2bd2bef727 Use the RFC 5702 algorithm identifiers 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@182 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-11-03 02:23:57 +00:00
David Blacka
ca9bee9d49 allow for multiple -k options (for signing with multiple KSKs) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@176 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-09-03 04:16:49 +00:00
David Blacka
8b1203c243 Merge changes from experimental branch 2255:2273. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@172 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-08-23 19:13:42 +00:00
David Blacka
e6cf5e27a0 Use constants now defined in dnsjava (local copy, for now). Add BIND 9.6 mnemonics to the NSEC3 key aliases. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@142 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-08 17:36:18 +00:00
David Blacka
b90877444d Make the keyinfo tool slightly more useful: handle multiple keys at a time, print out DSA key information, etc. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@141 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-08 17:35:20 +00:00
David Blacka
f09eeaffaa Make using the RSA large exponent the default (like BIND); print the name of the keyfile base at the end (unless the user dictated the filename) (also like BIND) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@140 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-08 17:34:05 +00:00
David Blacka
971d13d81f Make the comments accurate. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@139 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-08 17:32:58 +00:00
David Blacka
865fcf09bf update to dnsjava 2.0.6-vrsn-2; remove obsoleted workaround in DnsKeyConverter 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@138 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-07 21:01:28 +00:00
David Blacka
b35bab0bdd Add ability to define the TTL of the NSEC3PARAM record. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@133 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-07 20:37:29 +00:00
David Blacka
b0fac2fd43 Use the SOA minimum value for the generated NSEC records' TTL 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@131 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-07 16:16:44 +00:00
David Blacka
531dc115aa Use ObjectBuilder statically (this was generating warnings for me) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@123 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-05 05:05:32 +00:00
David Blacka
8b61f84308 Add ability for jdnssec-signzone to find the necessary keys by either looking in the zone to find DNSKEY RRs, or by looking on disk for key files matching the zonename. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@122 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-05 05:04:30 +00:00
David Blacka
49dfddb432 Add (provisional) entries for RSASHA256 and RSASHA512. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@121 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-05 05:02:29 +00:00
David Blacka
32b0f15b70 Use the JCE implementation of SHA-256 instead of the contributed one (which doesn't actually work correctly). 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@120 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-05 05:01:03 +00:00
David Blacka
ccb1ffb7e5 Formatting (from a new Eclipse, for better or worse) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@116 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 05:01:03 +00:00
David Blacka
3f1787695d Fix issue where the DS digest algorithm would be ignored when converting in-zone DNSKEY RRs to DS records; formatting 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@115 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 05:00:28 +00:00
David Blacka
09d21a1d67 use "OptOut" instead of "OptIn" to match RFC 5155 terminology; formatting. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@114 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 04:58:18 +00:00
David Blacka
4073e6a576 Add aliases defined in RFC 5155 (NSEC3); formatting. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@113 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 04:51:15 +00:00
David Blacka
e5270de8ee Move all signZone() method variants into JCEDnsSecSigner, make the SignZone class use them. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@112 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 04:45:49 +00:00