davidb/jdnssec-tools
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity
96 Commits 2 Branches 12 Tags 13 MiB
41c96feffd
Commit Graph

50 Commits

Author SHA1 Message Date
David Blacka
41c96feffd Refactor the zone verification tool to fully check zones for correctness. Not quite complete, as more testing needs to be done and the output needs to be standardized 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@219 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-12-06 05:59:42 +00:00
David Blacka
3c9e33baf7 fix a number of jdnssec-signzone signing bugs: do not incorrectly set the RRSIG bit on NSEC3 RRs corresponding to insecure delegations, ignore junk below a DNAME, ignore delegations below other delegations 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@218 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-12-06 00:25:04 +00:00
David Blacka
14ea619299 add verbose signing mode to signzone; some comment fixes, some unused vars and imports removed 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@217 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-12-05 23:08:13 +00:00
David Blacka
beca0e4872 Add jdnssec-signrrset tool which will sign any single rrset with any key. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@208 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2010-07-21 17:09:56 +00:00
David Blacka
34e6f91ef2 restore NSEC3 original ownername comments. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@185 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-11-03 02:24:04 +00:00
David Blacka
64f5de7b38 fix our base32 context 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@184 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-11-03 02:24:02 +00:00
David Blacka
1fe3b49c17 Switch to dnsjava-2.0.7: the NSEC3 comments won't work, and I had to rescue the nsec3 hash calculation function from the original NSEC3Record implementation. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@183 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-11-03 02:23:59 +00:00
David Blacka
2bd2bef727 Use the RFC 5702 algorithm identifiers 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@182 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-11-03 02:23:57 +00:00
David Blacka
ca9bee9d49 allow for multiple -k options (for signing with multiple KSKs) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@176 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-09-03 04:16:49 +00:00
David Blacka
8b1203c243 Merge changes from experimental branch 2255:2273. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@172 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-08-23 19:13:42 +00:00
David Blacka
e6cf5e27a0 Use constants now defined in dnsjava (local copy, for now). Add BIND 9.6 mnemonics to the NSEC3 key aliases. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@142 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-08 17:36:18 +00:00
David Blacka
b90877444d Make the keyinfo tool slightly more useful: handle multiple keys at a time, print out DSA key information, etc. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@141 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-08 17:35:20 +00:00
David Blacka
f09eeaffaa Make using the RSA large exponent the default (like BIND); print the name of the keyfile base at the end (unless the user dictated the filename) (also like BIND) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@140 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-08 17:34:05 +00:00
David Blacka
971d13d81f Make the comments accurate. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@139 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-08 17:32:58 +00:00
David Blacka
865fcf09bf update to dnsjava 2.0.6-vrsn-2; remove obsoleted workaround in DnsKeyConverter 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@138 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-07 21:01:28 +00:00
David Blacka
b35bab0bdd Add ability to define the TTL of the NSEC3PARAM record. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@133 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-07 20:37:29 +00:00
David Blacka
b0fac2fd43 Use the SOA minimum value for the generated NSEC records' TTL 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@131 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-07 16:16:44 +00:00
David Blacka
531dc115aa Use ObjectBuilder statically (this was generating warnings for me) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@123 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-05 05:05:32 +00:00
David Blacka
8b61f84308 Add ability for jdnssec-signzone to find the necessary keys by either looking in the zone to find DNSKEY RRs, or by looking on disk for key files matching the zonename. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@122 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-05 05:04:30 +00:00
David Blacka
49dfddb432 Add (provisional) entries for RSASHA256 and RSASHA512. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@121 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-05 05:02:29 +00:00
David Blacka
32b0f15b70 Use the JCE implementation of SHA-256 instead of the contributed one (which doesn't actually work correctly). 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@120 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-05 05:01:03 +00:00
David Blacka
ccb1ffb7e5 Formatting (from a new Eclipse, for better or worse) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@116 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 05:01:03 +00:00
David Blacka
3f1787695d Fix issue where the DS digest algorithm would be ignored when converting in-zone DNSKEY RRs to DS records; formatting 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@115 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 05:00:28 +00:00
David Blacka
09d21a1d67 use "OptOut" instead of "OptIn" to match RFC 5155 terminology; formatting. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@114 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 04:58:18 +00:00
David Blacka
4073e6a576 Add aliases defined in RFC 5155 (NSEC3); formatting. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@113 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 04:51:15 +00:00
David Blacka
e5270de8ee Move all signZone() method variants into JCEDnsSecSigner, make the SignZone class use them. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@112 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-02 04:45:49 +00:00
David Blacka
5170a087c9 close the private key file after reading it. patch by Wolfgang Nagele 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@111 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2009-02-01 18:24:30 +00:00
David Blacka
1b778f279d updates for nsec3-08 (wire format changes) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@108 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-12-15 15:00:10 +00:00
David Blacka
ddd612231a fix RRSIG order issue when dealing with mulitple RRSIGs with a given owner, class, and type 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@104 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-09-19 19:17:52 +00:00
David Blacka
9777a223db make sure the names are lowercased 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@99 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-09-19 14:47:45 +00:00
David Blacka
4fa0a90fe8 make the keyinfotool handle algorithm aliases 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@90 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-09-12 12:00:44 +00:00
David Blacka
66f9e9b76c add KeyInfoTool 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@88 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-09-10 17:05:18 +00:00
David Blacka
3bd38f9fbc add large exponent option to the key generation code 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@87 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-09-10 16:48:21 +00:00
David Blacka
08b2c4bc32 NSEC3PARAM support 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@85 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-09-01 02:23:40 +00:00
David Blacka
dff0e250f6 Add support for the SHA256 DS digest algorithm. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@76 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-05-24 22:19:31 +00:00
David Blacka
c95e1296ca add some error checking for NSEC3 parameters 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@72 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-05-24 19:48:48 +00:00
David Blacka
435acff6d0 add support for algorithm aliases, fix SignZone so you can specify more than one KSK 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@64 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-05-23 21:24:00 +00:00
David Blacka
5ba24d35b1 add prelim implementation of the dstool dstool is a simple command line tool that takes a DNSKEY record and converts it into a DS record (or DLV). Right now, it requires that the key is stored in a file ending with '.key'. Update the version number. 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@60 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-05-03 16:34:32 +00:00
David Blacka
da83c56fa8 type map changes for NSEC3 (changed in nsec3-05pre) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@59 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-03-15 16:11:33 +00:00
David Blacka
e2977c41f8 bug fixes: RecordComparator needs to also compare RDATA so the removeDuplicates step actually works reliably -- this was masked by the duplicate suppression in RRset; only allow one command line specified KSK, since commons-cli doesn't seem to handle multi-arg options correctly; do not croak on the lack of command-line keys for now;; Also: new dnsjava lib that contains NSEC3 changes for the -04pre draft 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@55 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2006-02-16 20:23:56 +00:00
David Blacka
e349476def make VerifyZone work with just the zone (which is self-signed anyway) 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@50 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-11-14 22:45:09 +00:00
David Blacka
13fae1fc81 add original ownername comments to the NSEC3 generation 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@49 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-11-09 22:21:02 +00:00
David Blacka
0b8c4c747d new zoneformatter, bug fixes 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@42 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-11-08 19:08:13 +00:00
David Blacka
528bc6193a new dnsjava w/bugfix; fix ordering problem with ProtoNSEC3s 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@41 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-11-07 05:20:00 +00:00
David Blacka
fbe70583ba actually use the iterations command-lline option 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@39 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-11-06 22:05:54 +00:00
David Blacka
1f08b8abb8 up the version; fix minor issues 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@36 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-10-27 22:42:57 +00:00
David Blacka
04ab26f434 NSEC3 support, remove plain opt-in support until private algs work 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@35 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-10-27 21:50:54 +00:00
David Blacka
ab479a3e7b move signzone function into the command line tool; clean up some; add local _jdnssec-* shell wrappers 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@17 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-08-14 17:05:50 +00:00
David Blacka
4b84bbf4db update to dnsjava-2.0.0; refactor command line parseing a bit; switch to java.util.logging 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@16 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-08-14 02:08:48 +00:00
David Blacka
eb93599f0b initial import 
git-svn-id: https://svn.verisignlabs.com/jdnssec/tools/trunk@13 4cbd57fe-54e5-0310-bd9a-f30fe5ea5e6e
 2005-08-13 23:18:03 +00:00