Code

NSEC3 generation support.#416

Code

Draft

ximon18 wants to merge 208 commits intomainNLnetLabs/domain:mainfrom initial-nsec3-generationNLnetLabs/domain:initial-nsec3-generationCopy head branch name to clipboard

+750-123

Commits

Commits on Oct 2, 2024

• [sign] Define 'KeyPair' and impl key export

  Show description for 4022c81
  bal-e

  committed
  4022c81

• [sign] Define trait 'Sign'

  Show description for 7b51569
  bal-e

  committed
  7b51569

• [sign] Implement parsing from the DNS format

  Show description for cb97321
  bal-e

  committed
  cb97321

• [sign] Provide some error information

  Show description for db51ae6
  bal-e

  committed
  db51ae6

Commits on Oct 4, 2024

• [sign] Move 'KeyPair' to 'generic::SecretKey'

  Show description for a505415
  bal-e

  committed
  a505415

Commits on Oct 7, 2024

• [sign/generic] Add 'PublicKey'

  bal-e

  committed
  ea80694

• [sign] Rewrite the 'ring' module to use the 'Sign' trait

  Show description for 7c94006
  bal-e

  committed
  7c94006

Commits on Oct 9, 2024

• Implement DNSSEC signing with OpenSSL

  Show description for f9564c1
  bal-e

  committed
  f9564c1

• [sign/openssl] Implement key generation

  bal-e

  committed
  c705428

• [sign/openssl] Test key generation and import/export

  bal-e

  committed
  68476e7

• [sign/openssl] Add support for ECDSA

  bal-e

  committed
  b68b639

• [sign/openssl] satisfy clippy

  bal-e

  committed
  79b2a08

• [sign/openssl] Implement the 'Sign' trait

  bal-e

  committed
  1aeeede

• Install OpenSSL in CI builds

  bal-e

  committed
  90af63d

• Ensure 'openssl' dep supports 3.x.x

  bal-e

  committed
  6370035

• [workflows/ci] Use 'vcpkg' instead of vendoring OpenSSL

  bal-e

  committed
  d53f85a

• Ensure 'openssl' dep exposes necessary interfaces

  bal-e

  committed
  5148bd3

• [workflows/ci] Record location of 'vcpkg'

  bal-e

  committed
  13bebd7

• [workflows/ci] Use a YAML def for 'VCPKG_ROOT'

  bal-e

  committed
  c86f234

• [workflows/ci] Fix a vcpkg triplet to use

  bal-e

  committed
  8939603

• Upgrade openssl to 0.10.57 for bitflags 2.x

  bal-e

  committed
  9ed1f44

• [workflows/ci] Use dynamic linking for vcpkg openssl

  bal-e

  committed
  24b443c

• [workflows/ci] Correctly annotate 'vcpkg'

  bal-e

  committed
  d3a071d

• [sign/openssl] Implement exporting public keys

  bal-e

  committed
  669da93

• [sign/ring] Implement exporting public keys

  bal-e

  committed
  8a0c59a

• [sign/generic] Test (de)serialization for generic secret keys

  Show description for 7c6cde1
  bal-e

  committed
  7c6cde1

• [sign] Thoroughly test import/export in both backends

  Show description for d6a5313
  bal-e

  committed
  d6a5313

• [sign] Remove debugging code and satisfy clippy

  bal-e

  committed
  8321bbf

• [sign] Account for CR LF in tests

  bal-e

  committed
  db6820e

Commits on Oct 11, 2024

• [sign/openssl] Fix bugs in the signing procedure

  Show description for e7f9709
  bal-e

  committed
  e7f9709

Commits on Oct 15, 2024

• Initial NSEC3 generation support. Lacks collision detection and tests.

  ximon18

  committed
  2663093

• Clippy.

  ximon18

  committed
  bd31ebb

• TOOD -> TODO ;-)

  ximon18

  committed
  bbf110f

• Fix doctest failure.

  ximon18

  committed
  fbfbdea

• Refactor the 'sign' module

  Show description for dba5a8a
  bal-e

  committed
  dba5a8a

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  b494f3c

• [sign] Define 'KeyPair' and impl key export

  Show description for 25402ed
  

  bal-e

  authored and

  ximon18

  committed
  25402ed

• [sign] Define trait 'Sign'

  Show description for a62139a
  

  bal-e

  authored and

  ximon18

  committed
  a62139a

• [sign] Implement parsing from the DNS format

  Show description for a4f2056
  

  bal-e

  authored and

  ximon18

  committed
  a4f2056

• [sign] Provide some error information

  Show description for f00a9ac
  

  bal-e

  authored and

  ximon18

  committed
  f00a9ac

• [sign] Move 'KeyPair' to 'generic::SecretKey'

  Show description for 6535747
  

  bal-e

  authored and

  ximon18

  committed
  6535747

• [sign/generic] Add 'PublicKey'

  

  bal-e

  authored and

  ximon18

  committed
  69e5066

• [sign] Rewrite the 'ring' module to use the 'Sign' trait

  Show description for 3c80b2f
  

  bal-e

  authored and

  ximon18

  committed
  3c80b2f

• Implement DNSSEC signing with OpenSSL

  Show description for eace7b6
  

  bal-e

  authored and

  ximon18

  committed
  eace7b6

• [sign/openssl] Implement key generation

  

  bal-e

  authored and

  ximon18

  committed
  c698403

• [sign/openssl] Test key generation and import/export

  

  bal-e

  authored and

  ximon18

  committed
  89dfdfc

• [sign/openssl] Add support for ECDSA

  

  bal-e

  authored and

  ximon18

  committed
  4d912fb

• [sign/openssl] satisfy clippy

  

  bal-e

  authored and

  ximon18

  committed
  24f6043

• [sign/openssl] Implement the 'Sign' trait

  

  bal-e

  authored and

  ximon18

  committed
  1b5d640

• Install OpenSSL in CI builds

  

  bal-e

  authored and

  ximon18

  committed
  fbafbf0

• Ensure 'openssl' dep supports 3.x.x

  

  bal-e

  authored and

  ximon18

  committed
  3358747

• [workflows/ci] Use 'vcpkg' instead of vendoring OpenSSL

  

  bal-e

  authored and

  ximon18

  committed
  e26b68d

• Ensure 'openssl' dep exposes necessary interfaces

  

  bal-e

  authored and

  ximon18

  committed
  c1f3178

• [workflows/ci] Record location of 'vcpkg'

  

  bal-e

  authored and

  ximon18

  committed
  9c4f7b4

• [workflows/ci] Use a YAML def for 'VCPKG_ROOT'

  

  bal-e

  authored and

  ximon18

  committed
  2cae3cc

• [workflows/ci] Fix a vcpkg triplet to use

  

  bal-e

  authored and

  ximon18

  committed
  9ed98ed

• Upgrade openssl to 0.10.57 for bitflags 2.x

  

  bal-e

  authored and

  ximon18

  committed
  a1a5a0b

• [workflows/ci] Use dynamic linking for vcpkg openssl

  

  bal-e

  authored and

  ximon18

  committed
  0b85a4f

• [workflows/ci] Correctly annotate 'vcpkg'

  

  bal-e

  authored and

  ximon18

  committed
  e6bf6d9

• [sign/openssl] Implement exporting public keys

  

  bal-e

  authored and

  ximon18

  committed
  2ab7178

• [sign/ring] Implement exporting public keys

  

  bal-e

  authored and

  ximon18

  committed
  d8c9b5f

• [sign/generic] Test (de)serialization for generic secret keys

  Show description for 90ed936
  

  bal-e

  authored and

  ximon18

  committed
  90ed936

• [sign] Thoroughly test import/export in both backends

  Show description for fff9595
  

  bal-e

  authored and

  ximon18

  committed
  fff9595

• [sign] Remove debugging code and satisfy clippy

  

  bal-e

  authored and

  ximon18

  committed
  4c6aa4d

• [sign] Account for CR LF in tests

  

  bal-e

  authored and

  ximon18

  committed
  fe29593

• [sign/openssl] Fix bugs in the signing procedure

  Show description for 8536c4c
  

  bal-e

  authored and

  ximon18

  committed
  8536c4c

• Refactor the 'sign' module

  Show description for 07b52ce
  

  bal-e

  authored and

  ximon18

  committed
  07b52ce

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  c419297

Commits on Oct 16, 2024

• [sign] Define 'KeyPair' and impl key export

  Show description for 48c006c
  bal-e

  committed
  48c006c

• [sign] Define trait 'Sign'

  Show description for 66c8f4a
  bal-e

  committed
  66c8f4a

• [sign] Implement parsing from the DNS format

  Show description for b613705
  bal-e

  committed
  b613705

• [sign] Provide some error information

  Show description for 5e86496
  bal-e

  committed
  5e86496

• [sign] Move 'KeyPair' to 'generic::SecretKey'

  Show description for c33f6f6
  bal-e

  committed
  c33f6f6

• [sign/generic] Add 'PublicKey'

  bal-e

  committed
  d2d0646

• [sign] Rewrite the 'ring' module to use the 'Sign' trait

  Show description for 6dae3a1
  bal-e

  committed
  6dae3a1

• Implement DNSSEC signing with OpenSSL

  Show description for 4fccf7f
  bal-e

  committed
  4fccf7f

• [sign/openssl] Implement key generation

  bal-e

  committed
  0ae002f

• [sign/openssl] Test key generation and import/export

  bal-e

  committed
  157a3b9

• [sign/openssl] Add support for ECDSA

  bal-e

  committed
  0a6e992

• [sign/openssl] satisfy clippy

  bal-e

  committed
  3a5d55b

• [sign/openssl] Implement the 'Sign' trait

  bal-e

  committed
  a2d64b4

• Install OpenSSL in CI builds

  bal-e

  committed
  ad69e1f

• Ensure 'openssl' dep supports 3.x.x

  bal-e

  committed
  46f3f7f

• [workflows/ci] Use 'vcpkg' instead of vendoring OpenSSL

  bal-e

  committed
  23ea439

• Ensure 'openssl' dep exposes necessary interfaces

  bal-e

  committed
  b9fe3cb

• [workflows/ci] Record location of 'vcpkg'

  bal-e

  committed
  2469a78

• [workflows/ci] Use a YAML def for 'VCPKG_ROOT'

  bal-e

  committed
  30951e8

• [workflows/ci] Fix a vcpkg triplet to use

  bal-e

  committed
  174f0f4

• Upgrade openssl to 0.10.57 for bitflags 2.x

  bal-e

  committed
  6add5c7

• [workflows/ci] Use dynamic linking for vcpkg openssl

  bal-e

  committed
  9395e44

• [workflows/ci] Correctly annotate 'vcpkg'

  bal-e

  committed
  67987c8

• [sign/openssl] Implement exporting public keys

  bal-e

  committed
  d4c6bdf

• [sign/ring] Implement exporting public keys

  bal-e

  committed
  18d9a7d

• [sign/generic] Test (de)serialization for generic secret keys

  Show description for 792cb9f
  bal-e

  committed
  792cb9f

• [sign] Thoroughly test import/export in both backends

  Show description for 306429b
  bal-e

  committed
  306429b

• [sign] Remove debugging code and satisfy clippy

  bal-e

  committed
  0c3fb8b

• [sign] Account for CR LF in tests

  bal-e

  committed
  e2bb31d

• [sign/openssl] Fix bugs in the signing procedure

  Show description for 9820be2
  bal-e

  committed
  9820be2

• Refactor the 'sign' module

  Show description for 94541da
  bal-e

  committed
  94541da

• Move 'sign' and 'validate' to unstable feature gates

  bal-e

  committed
  c56b3fe

• [workflows/ci] Document the vcpkg env vars

  bal-e

  committed
  b2f0bbb

• Rename public/secret key interfaces to '*Raw*'

  Show description for bbc3fb1
  bal-e

  committed
  bbc3fb1

• [sign/ring] Store the RNG in an 'Arc'

  bal-e

  committed
  1fc5309

• [validate] Enhance 'Signature' API

  bal-e

  committed
  2556e2a

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  b3b3f01

• [validate] Add high-level 'Key' type

  bal-e

  committed
  8086b45

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  ba774bb

• [sign/openssl] Pad ECDSA keys when exporting

  Show description for 6388387
  bal-e

  committed
  6388387

• [validate] Implement 'Key::key_tag()'

  Show description for b2cfa7b
  bal-e

  committed
  b2cfa7b

• [validate] Correct bit offsets for flags

  bal-e

  committed
  e0344a6

• [validate] Implement support for digests

  Show description for f65c5cc
  bal-e

  committed
  f65c5cc

Commits on Oct 17, 2024

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  a0c2e4f

Commits on Oct 24, 2024

• [sign] Define 'KeyPair' and impl key export

  Show description for 5ba8940
  bal-e

  committed
  5ba8940

• [sign] Define trait 'Sign'

  Show description for 4c10381
  bal-e

  committed
  4c10381

• [sign] Implement parsing from the DNS format

  Show description for f33f775
  bal-e

  committed
  f33f775

• [sign] Provide some error information

  Show description for 1d97597
  bal-e

  committed
  1d97597

• [sign] Move 'KeyPair' to 'generic::SecretKey'

  Show description for fa306e9
  bal-e

  committed
  fa306e9

• [sign/generic] Add 'PublicKey'

  bal-e

  committed
  56dec85

• [sign] Rewrite the 'ring' module to use the 'Sign' trait

  Show description for 5f8e28f
  bal-e

  committed
  5f8e28f

• Implement DNSSEC signing with OpenSSL

  Show description for 46b67e9
  bal-e

  committed
  46b67e9

• [sign/openssl] Implement key generation

  bal-e

  committed
  2451e1b

• [sign/openssl] Test key generation and import/export

  bal-e

  committed
  159a94a

• [sign/openssl] Add support for ECDSA

  bal-e

  committed
  4fb6084

• [sign/openssl] satisfy clippy

  bal-e

  committed
  6bc9bce

• [sign/openssl] Implement the 'Sign' trait

  bal-e

  committed
  be3e169

• Install OpenSSL in CI builds

  bal-e

  committed
  836812a

• Ensure 'openssl' dep supports 3.x.x

  bal-e

  committed
  66290a5

• [workflows/ci] Use 'vcpkg' instead of vendoring OpenSSL

  bal-e

  committed
  2a1489f

• Ensure 'openssl' dep exposes necessary interfaces

  bal-e

  committed
  e8d208f

• [workflows/ci] Record location of 'vcpkg'

  bal-e

  committed
  045d52b

• [workflows/ci] Use a YAML def for 'VCPKG_ROOT'

  bal-e

  committed
  460679b

• [workflows/ci] Fix a vcpkg triplet to use

  bal-e

  committed
  21ba8d3

• Upgrade openssl to 0.10.57 for bitflags 2.x

  bal-e

  committed
  4195dd4

• [workflows/ci] Use dynamic linking for vcpkg openssl

  bal-e

  committed
  4f4f6ff

• [workflows/ci] Correctly annotate 'vcpkg'

  bal-e

  committed
  608cbea

• [sign/openssl] Implement exporting public keys

  bal-e

  committed
  632c1b0

• [sign/ring] Implement exporting public keys

  bal-e

  committed
  4350d8b

• [sign/generic] Test (de)serialization for generic secret keys

  Show description for 4c46552
  bal-e

  committed
  4c46552

• [sign] Thoroughly test import/export in both backends

  Show description for fc95523
  bal-e

  committed
  fc95523

• [sign] Remove debugging code and satisfy clippy

  bal-e

  committed
  22e00a6

• [sign] Account for CR LF in tests

  bal-e

  committed
  94b3e47

• [sign/openssl] Fix bugs in the signing procedure

  Show description for 68a5656
  bal-e

  committed
  68a5656

• Refactor the 'sign' module

  Show description for a71c339
  bal-e

  committed
  a71c339

• Move 'sign' and 'validate' to unstable feature gates

  bal-e

  committed
  824c8e3

• [workflows/ci] Document the vcpkg env vars

  bal-e

  committed
  6d8c29e

• Rename public/secret key interfaces to '*Raw*'

  Show description for 82a05aa
  bal-e

  committed
  82a05aa

• [sign/ring] Store the RNG in an 'Arc'

  bal-e

  committed
  980fe5a

• [validate] Enhance 'Signature' API

  bal-e

  committed
  35ff06c

• [validate] Add high-level 'Key' type

  bal-e

  committed
  95cc462

• [sign/openssl] Pad ECDSA keys when exporting

  Show description for 3cec8cb
  bal-e

  committed
  3cec8cb

• [validate] Implement 'Key::key_tag()'

  Show description for 8682b6d
  bal-e

  committed
  8682b6d

• [validate] Correct bit offsets for flags

  bal-e

  committed
  57d20d9

• [validate] Implement support for digests

  Show description for f37c862
  bal-e

  committed
  f37c862

• [validate] Enhance BIND format conversion for 'Key'

  Show description for 7f01a5f
  bal-e

  committed
  7f01a5f

• [sign] Introduce 'SigningKey'

  bal-e

  committed
  b4103a3

• [sign] Handle errors more responsibly

  Show description for 81720c3
  bal-e

  committed
  81720c3

• [sign] correct doc link

  bal-e

  committed
  1e00479

• [sign/openssl] Replace panics with results

  bal-e

  committed
  d26a433

• remove 'sign/key'

  bal-e

  committed
  6968cb9

• [sign] Introduce 'common' for abstracting backends

  Show description for 99cb9ef
  bal-e

  committed
  99cb9ef

• [sign/generic] add top-level doc comment

  bal-e

  committed
  8321d50

• [validate] debug bind format errors

  bal-e

  committed
  a25be56

• [validate] more debug statements

  bal-e

  committed
  59650a4

• [validate] format DNSKEYs using 'ZonefileFmt'

  Show description for 0f54a8d
  bal-e

  committed
  0f54a8d

Commits on Oct 25, 2024

• Reorganize crate features in 'Cargo.toml'

  bal-e

  committed
  5a3de59

• [sign] Add key generation support for Ring

  Show description for 12a70af
  bal-e

  committed
  12a70af

• [sign] Make OpenSSL support optional

  Show description for 2f2fb58
  bal-e

  committed
  2f2fb58

Commits on Oct 28, 2024

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  735712c

Commits on Oct 29, 2024

• [sign] Rename 'generic::SecretKey' to 'KeyBytes'

  bal-e

  committed
  a4316b5

• [sign] Rename 'SecretKey' to 'KeyPair' in all impls

  bal-e

  committed
  e0a4fc0

• Merge branch 'main' into dnssec-key

  bal-e

  committed
  31462cc

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  4447cc6

• [sign] Rename 'KeyBytes' to 'SecretKeyBytes'

  Show description for 48e178a
  bal-e

  committed
  48e178a

• [validate] Rename 'RawPublicKey' to 'PublicKeyBytes'

  bal-e

  committed
  daa96d8

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  d84e2c0

• [sign/ring] Remove redundant imports

  bal-e

  committed
  221f163

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  02c625b

Commits on Oct 30, 2024

• [sign,validate] Add 'display_as_bind()' to key bytes types

  bal-e

  committed
  61bc3aa

• [sign,validate] remove unused imports

  bal-e

  committed
  55716a4

• Move nsec3_hash() back into the validator module per review feedback.

  ximon18

  committed
  8bf2c9f

• Move nsec3_hash() to the validate (not validator!) module per review feedback.

  ximon18

  committed
  beb8e52

Commits on Oct 31, 2024

• [sign] Document everything

  bal-e

  committed
  7831260

• Extend test file with records useful for manual testing of NSEC3.

  ximon18

  committed
  a04c917

• Revert "Extend test file with records useful for manual testing of NSEC3."

  Show description for abaab27
  ximon18

  committed
  abaab27

• Review feedback.

  ximon18

  committed
  3c53e9e

• Review feedback.

  ximon18

  committed
  50433f0

• Review feedback inspired change (though not actually what was suggested).

  ximon18

  committed
  70e998a

Commits on Nov 4, 2024

• [lib] Rewrite feature flag documentation

  bal-e

  committed
  7c9ee4c

• [workflows/ci] Use 'apt-get' instead of 'apt'

  bal-e

  committed
  cea9ae3

• [sign] Clarify documentation as per @ximon18

  bal-e

  committed
  354bf0a

• [sign] Use 'secrecy' to protect private keys

  bal-e

  committed
  ca10361

• Display NSEC3 without trailing space if the bitmap is empty.

  ximon18

  committed
  9268dd3

• Backport NSEC3 improvements and upstream dnssec-key branch compatibility fixes from the downstream multiple-signing-key branch.

  ximon18

  committed
  fb7e9ef

• [sign,validate] Add 'display_as_bind()' to key bytes types

  

  bal-e

  authored and

  ximon18

  committed
  414ea6c

• [sign,validate] remove unused imports

  

  bal-e

  authored and

  ximon18

  committed
  2bde7aa

• [sign] Document everything

  

  bal-e

  authored and

  ximon18

  committed
  98db88b

• Update to work with changes in the upstream dnssec-key branch using a partial backport of changes from the downstream multiple-signing-key branch.

  ximon18

  committed
  8877c22

• Minor tweaks.

  ximon18

  committed
  40d65ac

• Merge branch 'dnssec-key' into initial-nsec3-generation

  ximon18

  committed
  c0fc11b

Commits on Nov 6, 2024

• Add some Arbitrary impls to support cargo-fuzz based fuzz testing.

  ximon18

  committed
  bdeddde

• Impl Display for Nsec3HashError.

  ximon18

  committed
  f2cabc3

• Cargo fmt.

  ximon18

  committed
  109370d

Commits on Nov 8, 2024

• Merge branch 'main' into initial-nsec3-generation

  ximon18

  committed
  e1c1db8

Commits on Nov 22, 2024

• Merge branch 'main' into initial-nsec3-generation

  tertsdiepraam

  committed
  250b52e

Commits on Nov 29, 2024

• Merge branch 'main' into initial-nsec3-generation

  ximon18

  committed
  fef3fd5

• Merge branch 'main' into initial-nsec3-generation

  ximon18

  committed
  f1f5417

Commits on Dec 5, 2024

• Merge branch 'main' into initial-nsec3-generation

  ximon18

  committed
  ad795a9

Commits on Dec 6, 2024

• Merge branch 'main' into initial-nsec3-generation

  ximon18

  committed
  7503455