mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-24 10:21:10 -05:00
4349. [contrib] kasp2policy: A python script to create a DNSSEC
policy file from an OpenDNSSEC KASP XML file.
4348. [func] dnssec-keymgr: A new python-based DNSSEC key
management utility, which reads a policy definition
file and can create or update DNSSEC keys as needed
to ensure that a zone's keys match policy, roll over
correctly on schedule, etc. Thanks to Sebastian
Castro for assistance in development. [RT #39211]
|
||
|---|---|---|
| .. | ||
| kasp.xml | ||
| kasp2policy.py | ||
| policy.good | ||
| README | ||
This directory is for tools and scripts related to the OpenDNSSEC KASP
("key and signature policy") format. Currently it only contains
"kasp2policy.py", a python script for converting KASP key policy
to the "dnssec.policy" format that is used by dnssec-keymgr.
This depends on PLY (python lex/yacc) and on the "isc.dnskey" module in
bin/python/isc.
Basic test:
$ python kasp2policy.py kasp.xml > policy.out
$ diff policy.out policy.good