summaryrefslogtreecommitdiff
path: root/src/dnssecport.erl
Commit message (Collapse)AuthorAgeFilesLines
* DNSSEC validation improvements.Linus Nordberg2016-04-131-35/+57
| | | | | | Use DS signature inception time as the DNSSEC validation time. Validate input data a bit more. Set TTL in DS to "Original TTL" of RRSIG (this time for real).
* Make unit tests work again and move rrset files.Linus Nordberg2016-04-111-4/+4
|
* Get submitting and storing working.Linus Nordberg2016-04-081-3/+12
| | | | | | | | | | | | | Add README.dnssec. Do start the dnssecport server. Add config option 'trust_anchors_file'. Pass correct data to validation server. Change URL for submitting to match draft (add-rr-chain). Make add-rr-chain take a base64-encoded string of RR's instead of JSON list with one RR per entry. TODO: Make the python tools know enough DNS to be able to verify SCT's and such (i.e. 'make tests').
* Add knot config dir for local root, for testing.Linus Nordberg2016-04-071-1/+1
|
* Canonicalise DS RR and refactor dns a bit.Linus Nordberg2016-04-071-10/+17
| | | | | | Rename split_rrset/1 -> decode_rrset/1. Add type rr() and use it. Canonicalise DS RR.
* Add unit test for validation, from dnssecport:handle_call().Linus Nordberg2016-04-071-38/+75
| | | | | | | | - The port now returns the RRset (DS, chain, trust root and all RRSIG's). This in preparatino for when this data will be normalised. - dnssecport decodes and encodes DNS data. - v1 stores the DS RR in the leaf and the rest, including the DS RRSIG, in the chain.
* WIPLinus Nordberg2016-04-071-0/+130
generated by cgit v1.1 at 2025-01-05 21:02:20 +0000