~malcscott/+junk/sensiblednssec : changes

~malcscott/+junk/sensiblednssec » Changes from revision 44

From Revision 44 to 25

Rev	Summary	Authors	Date
44	Merge several things from elsewhere; drop the entropy check ... Merge several things from elsewhere; drop the entropy check since the new upstream behaviour is to use a nonblocking CRNG	Malcolm Scott	3 years ago
43	dnssec-keygen no longer lets us specify a random source (and... dnssec-keygen no longer lets us specify a random source (and forces urandom :-( )	Malcolm Scott	3 years ago
42	Keep KSKs with g+rw permissions (noting that dnssec-settime ... Keep KSKs with g+rw permissions (noting that dnssec-settime likes to undo this)	Malcolm Scott	3 years ago
41	Quash errors when chmodding keys; we might not own all of th... Quash errors when chmodding keys; we might not own all of them, but in theory those we don't own have already been chmodded	debianpkg at org	6 years ago
40	Add comment to config explaining algorithm choice and rollov... Add comment to config explaining algorithm choice and rollover	Malcolm Scott	6 years ago
39	Merge Merge	debianpkg at org	6 years ago
38	Don't force TLS version. Nominet EPP now needs TLS v1.1+; P... Don't force TLS version. Nominet EPP now needs TLS v1.1+; Python <3.4 has no way to force this but will negotiate it if left unspecified.	debianpkg at org	6 years ago
37	umask hack doesn't work in more-recent make; work around by ... umask hack doesn't work in more-recent make; work around by explicitly chmodding (hopefully) everything	Malcolm Scott	7 years ago
36	Add SIGN_PARAMS setting (e.g. to pass NSEC3 params to dnssec... Add SIGN_PARAMS setting (e.g. to pass NSEC3 params to dnssec-keygen); make things work better for non-owners by enforcing group-writability and not trying to touch old files; make ksk-rollover also roll ZSK as it's very likely the user wants this too	Malcolm Scott	7 years ago
35	Support using a different random source; print dnssec-keygen Support using a different random source; print dnssec-keygen invocations; don't override umask when making top-level directories	Malcolm Scott	7 years ago
34	Quieter ds-check Quieter ds-check	debianpkg at org	7 years ago
33	Don't include formerly signed zones in ds-push Don't include formerly signed zones in ds-push	debianpkg at org	7 years ago
32	New ds-check target New ds-check target	debianpkg at org	7 years ago
31	Allow DS push for specific zone Allow DS push for specific zone	debianpkg at org	7 years ago
30	Add a new target to check that all signed zones still have a... Add a new target to check that all signed zones still have a valid source (previously they were silently skipped)	debianpkg at org	7 years ago
29	Ignore .stamp Ignore .stamp	debianpkg at org	7 years ago
28	EPP client: don't break when processing multiple domains EPP client: don't break when processing multiple domains	debianpkg at org	7 years ago
27	Attempt to recover from failed ZSK rollover by generating a ... Attempt to recover from failed ZSK rollover by generating a fresh key that's valid immediately and is not an explicit successor. (The particular failure mode I just fixed is: rollover breaks for long enough that the current key has expired and dnssec-keygen refuses to generate a key using a predecessor which is no longer in the zone.)	debianpkg at org	8 years ago
26	If dnssec-keygen fails, don't leave an empty zsk-rollover.ne... If dnssec-keygen fails, don't leave an empty zsk-rollover.new to be incorrectly installed	debianpkg at org	8 years ago
25	Elaborate on the best way to invoke 'make cron' from cron Elaborate on the best way to invoke 'make cron' from cron	debianpkg at org	8 years ago

Older »