Malcolm Scott

lp://staging/~malcscott/+junk/sensiblednssec

Created by Malcolm Scott on 2013-09-23 and last modified on 2020-04-29

Only Malcolm Scott can upload to this branch. If you are Malcolm Scott please log in for upload directions.

44. By Malcolm Scott on 2020-04-29: Merge several things from elsewhere; drop the entropy check since the new upstream behaviour is to use a nonblocking CRNG
43. By Malcolm Scott on 2020-04-29: dnssec-keygen no longer lets us specify a random source (and forces urandom :-( )
42. By Malcolm Scott on 2020-01-12: Keep KSKs with g+rw permissions (noting that dnssec-settime likes to undo this)
41. By Malcolm Scott on 2017-04-29: Quash errors when chmodding keys; we might not own all of them, but in theory those we don't own have already been chmodded
40. By Malcolm Scott on 2016-12-27: Add comment to config explaining algorithm choice and rollover
39. By Malcolm Scott on 2016-12-24: Merge
38. By Malcolm Scott on 2016-12-24: Don't force TLS version. Nominet EPP now needs TLS v1.1+; Python <3.4 has no way to force this but will negotiate it if left unspecified.
37. By Malcolm Scott on 2016-10-30: umask hack doesn't work in more-recent make; work around by explicitly chmodding (hopefully) everything
36. By Malcolm Scott on 2016-10-29: Add SIGN_PARAMS setting (e.g. to pass NSEC3 params to dnssec-keygen); make things work better for non-owners by enforcing group-writability and not trying to touch old files; make ksk-rollover also roll ZSK as it's very likely the user wants this too
35. By Malcolm Scott on 2016-10-20: Support using a different random source; print dnssec-keygen invocations; don't override umask when making top-level directories

This branch contains Public information

Everyone can see this information.