Matthijs Mekking a92fb659d3 dnssec-ksr keygen -o to create KSKs ...

Add an option to dnssec-ksr keygen, -o, to create KSKs instead of ZSKs.
This way, we can create a set of KSKS for a given period too.

For KSKs we also need to set timing metadata, including "SyncPublish"
and "SyncDelete". This functionality already exists in keymgr.c so
let's make the function accessible.

Replace dnssec-keygen calls with dnssec-ksr keygen for KSK in the
ksr system test and check keys for created KSKs as well. This requires
a slight modification of the check_keys function to take into account
KSK timings and metadata.

(cherry picked from commit 680aedb595)

2024-11-04 01:10:34 +00:00

..

include

dnssec-ksr keygen -o to create KSKs

2024-11-04 01:10:34 +00:00

rdata

Add the new record type WALLET (262)

2024-09-25 12:07:52 +00:00

.gitignore

…

acl.c

Fix RCU API usage in acl.c

2024-09-10 10:34:32 +00:00

adb.c

Store static-stub addresses seperately in the adb

2024-10-01 01:27:55 +00:00

badcache.c

…

byaddr.c

…

cache.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

callbacks.c

add setup/commit functions to rdatacallbacks

2024-03-08 15:36:56 -08:00

catz.c

Reconfigure catz member zones during named reconfiguration

2024-08-13 16:57:50 +02:00

client.c

make "max_restarts" a configurable value

2024-08-07 21:12:34 +00:00

clientinfo.c

…

compress.c

corrected code style errors

2024-10-18 19:31:56 +00:00

db_p.h

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

db.c

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

dbiterator.c

…

diff.c

add setup/commit functions to rdatacallbacks

2024-03-08 15:36:56 -08:00

dispatch.c

Fix TCP dispatches and transport

2024-10-24 01:21:37 +00:00

dlz.c

…

dns64.c

…

dnsrps.c

improve node reference counting

2024-03-08 15:36:56 -08:00

dnssec.c

Don't read private key files for offline KSKs

2024-08-22 10:17:08 +00:00

dnstap.c

Emit and read correct DoT and DoH dnstap entries

2024-04-26 16:12:29 +03:00

dnstap.proto

Update the dnstap protobuf definition

2024-04-26 16:08:46 +03:00

ds.c

…

dst_api.c

Merge tag 'v9.19.21'

2024-02-14 13:24:56 +01:00

dst_internal.h

Create keys with PKCS#11 URI instead of object

2024-01-25 14:48:07 +01:00

dst_openssl.h

…

dst_parse.c

…

dst_parse.h

…

dyndb.c

…

ecs.c

…

fixedname.c

…

forward.c

reduce memory consumption of the remaining QP databases

2024-03-14 10:25:07 -07:00

gen.c

Use EXIT_SUCCESS and EXIT_FAILURE

2024-02-08 08:01:58 +01:00

geoip2.c

…

gssapi_link.c

…

gssapictx.c

…

hmac_link.c

…

ipkeylist.c

…

iptable.c

…

journal.c

…

kasp.c

corrected code style errors

2024-10-18 19:31:56 +00:00

key.c

Use dst_key's directory when writing key files

2024-01-25 14:47:43 +01:00

keydata.c

…

keymgr.c

dnssec-ksr keygen -o to create KSKs

2024-11-04 01:10:34 +00:00

keystore.c

corrected code style errors

2024-10-18 19:31:56 +00:00

keytable.c

reduce memory consumption of the remaining QP databases

2024-03-14 10:25:07 -07:00

log.c

…

Makefile.am

Add code to store SKR

2024-08-22 10:17:08 +00:00

master.c

Remove infinite loop on ISC_R_NOFILE

2024-05-07 10:01:12 +10:00

masterdump.c

Fix yaml output

2024-08-01 03:48:08 +00:00

message.c

Move offloaded DNSSEC operations to different helper threads

2024-09-12 16:41:02 +02:00

name.c

corrected code style errors

2024-10-18 19:31:56 +00:00

nametree.c

get foundname from the node

2024-04-30 12:50:01 -07:00

ncache.c

Use atomic operations to access the trust byte in ncache data

2024-04-17 17:14:34 +02:00

nsec3.c

…

nsec.c

…

nta.c

complete removal of isc_loop_current()

2024-04-02 10:35:56 +02:00

openssl_link.c

Use EXIT_SUCCESS and EXIT_FAILURE

2024-02-08 08:01:58 +01:00

openssl_shim.c

…

openssl_shim.h

corrected code style errors

2024-10-18 19:31:56 +00:00

opensslecdsa_link.c

Specify key usage to be digital signature

2024-01-25 14:48:07 +01:00

openssleddsa_link.c

corrected code style errors

2024-10-18 19:31:56 +00:00

opensslrsa_link.c

Specify key usage to be digital signature

2024-01-25 14:48:07 +01:00

order.c

…

peer.c

…

private.c

…

probes.d

…

qp_p.h

…

qp.c

Rewrite qp fix_iterator()

2024-05-16 09:49:41 +00:00

qpcache_p.h

rename qpdb to qpcache

2024-03-08 15:36:56 -08:00

qpcache.c

rename 'rbtiterator' and similar names in qpcache

2024-09-19 15:02:23 -07:00

qpzone_p.h

stub dns_qpmulti-based zone database implementation

2024-03-06 20:57:31 -08:00

qpzone.c

Revert "fix: chg: Improve performance when looking for the closest encloser when returning NSEC3 proofs"

2024-10-10 09:29:52 +00:00

rbt-cachedb.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

rbt-zonedb.c

Revert "fix: chg: Improve performance when looking for the closest encloser when returning NSEC3 proofs"

2024-10-10 09:29:52 +00:00

rbt.c

Reduce lock contention during RBTDB tree pruning

2024-02-29 11:23:03 +01:00

rbtdb_p.h

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

rbtdb.c

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

rcode.c

Update code formatting

2024-09-11 09:33:13 +00:00

rdata.c

Properly reject zero length ALPN in commatxt_fromtext

2024-08-01 01:10:48 +00:00

rdatalist.c

…

rdataset.c

…

rdatasetiter.c

…

rdataslab.c

Use clang-format-19 to update formatting

2024-08-22 08:16:03 +00:00

remote.c

…

request.c

Fix TCP dispatches and transport

2024-10-24 01:21:37 +00:00

resconf.c

Address CID 486326: Memory - corruptions (OVERRUN)

2024-02-13 09:21:49 +11:00

resolver.c

Fix TCP dispatches and transport

2024-10-24 01:21:37 +00:00

result.c

…

rootns.c

add a compile-time option to select default zone and cache DB

2024-03-06 10:49:02 +01:00

rpz.c

use a thread-local variable to get the current running loop

2024-04-02 10:35:56 +02:00

rriterator.c

…

rrl.c

Update sources to Clang 18 formatting

2024-04-23 13:11:52 +02:00

sdlz.c

dns_name_dupwithoffsets() cannot fail

2024-04-10 22:51:07 -04:00

skr.c

Implement SKR import

2024-08-22 10:17:08 +00:00

soa.c

…

ssu_external.c

…

ssu.c

Add missing period to generated IPv4 6to4 name

2024-08-01 06:41:47 +00:00

stats.c

…

tests

…

time.c

…

tkey.c

…

transport.c

corrected code style errors

2024-10-18 19:31:56 +00:00

tsig_p.h

…

tsig.c

…

ttl.c

…

update.c

Disable some behavior in offline-ksk mode

2024-08-22 10:17:08 +00:00

validator.c

Merge tag 'v9.20.2' into bind-9.20

2024-09-18 18:06:27 +02:00

view.c

Store static-stub addresses seperately in the adb

2024-10-01 01:27:55 +00:00

xfrin.c

Fix TCP dispatches and transport

2024-10-24 01:21:37 +00:00

zone_p.h

Refactor findzonekeys

2024-01-25 14:48:07 +01:00

zone.c

Use TLS for notifies if configured to do so

2024-10-24 03:11:50 +00:00

zonekey.c

…

zoneverify.c

Properly build the NSEC/NSEC3 type bit map

2024-05-16 10:27:49 +10:00

zt.c

use dns_qp_getname() where possible

2024-04-30 12:50:01 -07:00