bind9/bin
Matthijs Mekking 680aedb595 dnssec-ksr keygen -o to create KSKs
Add an option to dnssec-ksr keygen, -o, to create KSKs instead of ZSKs.
This way, we can create a set of KSKS for a given period too.

For KSKs we also need to set timing metadata, including "SyncPublish"
and "SyncDelete". This functionality already exists in keymgr.c so
let's make the function accessible.

Replace dnssec-keygen calls with dnssec-ksr keygen for KSK in the
ksr system test and check keys for created KSKs as well. This requires
a slight modification of the check_keys function to take into account
KSK timings and metadata.
2024-11-01 15:50:16 +01:00
..
check enforce '*._er' requirement for error-reporting zones 2024-10-23 21:29:32 +00:00
confgen use only c23 or c11 noreturn specifiers 2024-08-07 18:27:40 +03:00
delv Add isc_log_createandusechannel() function to simplify usage 2024-08-20 12:50:39 +00:00
dig add missing EDNS option mnemonics to dig 2024-10-29 20:05:27 +00:00
dnssec dnssec-ksr keygen -o to create KSKs 2024-11-01 15:50:16 +01:00
named suppress report-channel for zones above the agent-domain 2024-10-23 21:29:32 +00:00
nsupdate Add isc_log_createandusechannel() function to simplify usage 2024-08-20 12:50:39 +00:00
plugins Convert all categories and modules into static lists 2024-08-20 12:50:39 +00:00
rndc report client transport in 'rndc recursing' 2024-10-14 12:59:52 -07:00
tests dnssec-ksr keygen -o to create KSKs 2024-11-01 15:50:16 +01:00
tools Add isc_log_createandusechannel() function to simplify usage 2024-08-20 12:50:39 +00:00
Makefile.am Remove native PKCS#11 support 2021-09-09 15:35:39 +02:00