user/linus/catlfish.git/src, branch dnssec2

WIP

2016-07-16T15:26:54+00:00

NOTE: tests don't work -- SCT's don't validate

DNSSEC validation improvements.

2016-04-13T08:57:23+00:00

Use DS signature inception time as the DNSSEC validation time.
Validate input data a bit more.
Set TTL in DS to "Original TTL" of RRSIG (this time for real).

Make unit tests work again and move rrset files.

2016-04-11T14:00:20+00:00

Get submitting and storing working.

2016-04-08T15:33:08+00:00

Add README.dnssec.
Do start the dnssecport server.
Add config option 'trust_anchors_file'.
Pass correct data to validation server.
Change URL for submitting to match draft (add-rr-chain).
Make add-rr-chain take a base64-encoded string of RR's instead of JSON
list with one RR per entry.

TODO: Make the python tools know enough DNS to be able to verify SCT's
and such (i.e. 'make tests').

Add knot config dir for local root, for testing.

2016-04-07T14:23:00+00:00

Canonicalise DS RR and refactor dns a bit.

2016-04-07T14:06:12+00:00

Rename split_rrset/1 -> decode_rrset/1.
Add type rr() and use it.
Canonicalise DS RR.

Add unit test for validation, from dnssecport:handle_call().

2016-04-07T14:06:12+00:00

- The port now returns the RRset (DS, chain, trust root and all
RRSIG's). This in preparatino for when this data will be normalised.
- dnssecport decodes and encodes DNS data.
- v1 stores the DS RR in the leaf and the rest, including the DS
  RRSIG, in the chain.

WIP

2016-04-07T14:06:12+00:00

Allow larger HTTP requests.

2016-02-21T10:27:03+00:00

1MB -> 4MB.

Add config knob max_submit_size.

2016-02-01T10:40:25+00:00

If a blob is larger than this, in octets, after Base64 decoding, the
submission is rejected with 400.