mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-25 02:42:33 -05:00
f6096b958c
4349. [contrib] kasp2policy: A python script to create a DNSSEC
policy file from an OpenDNSSEC KASP XML file.
4348. [func] dnssec-keymgr: A new python-based DNSSEC key
management utility, which reads a policy definition
file and can create or update DNSSEC keys as needed
to ensure that a zone's keys match policy, roll over
correctly on schedule, etc. Thanks to Sebastian
Castro for assistance in development. [RT #39211]
11 lines
440 B
Text
11 lines
440 B
Text
This directory is for tools and scripts related to the OpenDNSSEC KASP
|
|
("key and signature policy") format. Currently it only contains
|
|
"kasp2policy.py", a python script for converting KASP key policy
|
|
to the "dnssec.policy" format that is used by dnssec-keymgr.
|
|
|
|
This depends on PLY (python lex/yacc) and on the "isc.dnskey" module in
|
|
bin/python/isc.
|
|
|
|
Basic test:
|
|
$ python kasp2policy.py kasp.xml > policy.out
|
|
$ diff policy.out policy.good
|