bind9/contrib/kasp
Evan Hunt f6096b958c [master] dnssec-keymgr
4349.   [contrib]       kasp2policy: A python script to create a DNSSEC
                        policy file from an OpenDNSSEC KASP XML file.

4348.	[func]		dnssec-keymgr: A new python-based DNSSEC key
			management utility, which reads a policy definition
			file and can create or update DNSSEC keys as needed
			to ensure that a zone's keys match policy, roll over
			correctly on schedule, etc.  Thanks to Sebastian
			Castro for assistance in development. [RT #39211]
2016-04-28 00:16:01 -07:00
..
kasp.xml [master] dnssec-keymgr 2016-04-28 00:16:01 -07:00
kasp2policy.py [master] dnssec-keymgr 2016-04-28 00:16:01 -07:00
policy.good [master] dnssec-keymgr 2016-04-28 00:16:01 -07:00
README [master] dnssec-keymgr 2016-04-28 00:16:01 -07:00

This directory is for tools and scripts related to the OpenDNSSEC KASP
("key and signature policy") format. Currently it only contains
"kasp2policy.py", a python script for converting KASP key policy
to the "dnssec.policy" format that is used by dnssec-keymgr.

This depends on PLY (python lex/yacc) and on the "isc.dnskey" module in
bin/python/isc.

Basic test:
$ python kasp2policy.py kasp.xml > policy.out
$ diff policy.out policy.good