Changes for version 0.12

  • FEAT: Added utility function key_difference() to Net::DNS::SEC. See perlpod for details. I needed this in other software and figured they are generic enough to make them available through this module.
  • FEAT: Modified some functions to use DNSKEY and RRSIG instead off KEY and SIG.
    • Net::DNS::Keyset now uses DNSKEY and RRSIG.
    • the demo function getkeyset.pl now uses DNSKEY too.
  • FEAT: Added the possibility to create a keyset out of two arrays of dnskey and rrsig object.
  • FEAT: Added some helperfunctions to Net::DNS::SEC::Private to read X509 formated private keys and dump them into bind format. This functionality has not been tested well.
  • BUG : When reading a RRSIG from a packet the signame would not have a trailing dot.

Changes for version 0.11_4

  • BUG: - Fixed MANIFEST.
  • FEAT: Removed critical dependency on bubblebabble. It is available to DS if installed but not critically dependend.

Changes for version 0.11_3

  • BUG: - Fixed minor in signing unknown RR types.

Changes for version 0.11_2

  • FEAT: - Prelimanary support for draf-ietf-dnssec-nsec-rdata-02. This depends on support for unknown RR types (Net::DNS version 0.44)

Changes for version 0.11_1

  • FEAT: - To be able to deal with argument supplied as either mnemonics or by value the Net::DNS::SEC::argument method was created. It can be used as a class method but it is also inherited by Net::DNS::RR::RRSIG and Net::DNS::RR::DNSKEY.

Documentation

DS extraction demo
Utility to convert a DNSSEC KEY to a DS record
create a self-signed keyset

Modules

DNSSEC Keyset object class
DNS DNSKEY resource record
DNS DS resource record
DNS KEY resource record
DNS NSEC resource record
DNS NXT resource record
DNS RRSIG resource record
DNS SIG resource record
DNS SIG Private key object
DNSSEC extensions to Net::DNS
DNS SIG Private key object