bind9/bin
Matthijs Mekking 934d17255e Better PKCS#11 label creation
When using the same PKCS#11 URI for a zone that uses different
DNSSEC policies, the PKCS#11 label could collide, i.e. the same
label could be used for different keys. Add the policy name to
the label to make it more unique.

Also, the zone name could contain characters that are interpreted
as special characters when parsing the PKCS#11 URI string. Mangle
the zone name through 'dns_name_tofilenametext()' to make it
PKCS#11 safe.

Move the creation to a separate function for clarity.

Furthermore, add a log message whenever a PKCS#11 object has been
successfully created.
2024-01-25 15:37:40 +01:00
..
check disable checks by default in named-compilezone 2023-12-20 16:57:19 -08:00
confgen Add object parameter to dst_key_generate() 2024-01-25 14:41:25 +01:00
delv fix consistency check for delv +ns and +qmin 2023-12-06 17:31:39 -08:00
dig Add minimal EDNS UL option support 2024-01-23 10:47:31 +11:00
dnssec Better PKCS#11 label creation 2024-01-25 15:37:40 +01:00
named Refactor findzonekeys 2024-01-25 14:48:07 +01:00
nsupdate Add support to set the UL EDNS option in nsupdate 2024-01-23 10:47:31 +11:00
plugins Remove 'inst != NULL' from cleanup check in plugin_register 2023-04-04 23:51:22 +00:00
rndc Defer control channel message invalidation 2024-01-10 15:48:25 +01:00
tests Test dnssec-policy/hsm with multiple views 2024-01-25 15:37:40 +01:00
tools remove some long-deprecated arguments from dig 2023-12-06 17:32:09 -08:00
Makefile.am Remove native PKCS#11 support 2021-09-09 15:35:39 +02:00