Uploaded image for project: 'OpenDNSSEC'
  1. OpenDNSSEC
  2. OPENDNSSEC-726

Support for disconnected KSK

    XMLWordPrintable

    Details

    • Type: Story
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.0.0
    • Component/s: None
    • Labels:
      None

      Attachments

        Issue Links

        relates to

        Story - Created by Jira Software - do not edit or delete. Issue type for a user story. OPENDNSSEC-251 Support for offline KSK

        • Minor - Minor loss of function, or other problem where easy workaround is present.
        • Open
        testing discovered

        Improvement - An improvement or enhancement to an existing feature or task. OPENDNSSEC-740 After a shutdown command, the daemon is still running for a small period.

        • Minor - Minor loss of function, or other problem where easy workaround is present.
        • Resolved
        1.
        		 Start enforcer at simulated time Technical task Resolved Berry van Halderen
        2.
        		 Start signer at simulated time Technical task Resolved Berry van Halderen
        3.
        		 Fixate time when time leap is set Technical task Resolved Unassigned
        4.
        		 Verify no other live time used in signer and enforcer Technical task Resolved Berry van Halderen
        5.
        		 allow for signconf to include signed keyset and KSK public key Technical task Resolved Berry van Halderen
        6.
        		 Use already signed keyset when included in signconf Technical task Resolved Berry van Halderen
        7.
        		 Import public key from signconf to create KSK DNSKEY entry Technical task Resolved Berry van Halderen
        8.
        		 Method for integrating signed keyset and KSK into signconf in bunker Technical task Resolved Berry van Halderen
        9.
        		 Tool to bundle signed keyset and public key of KSK into signconf Technical task Resolved Berry van Halderen
        10.
        		 Unit test to verify exporting signed keyset and KSK in signconf, and able to sign zone without KSK reference usign this. Technical task Resolved Berry van Halderen
        11.
        		 Verify ability to run with multiple HSMs. Technical task Resolved Berry van Halderen
        12.
        		 Allow for the validity time of the dnskey signatures to be different from the normal and denial signatures. Technical task Resolved Berry van Halderen
        13.
        		 Evaluate the limitation that keys must be uniquely referenced by keytag. Technical task Closed Unassigned
        14.
        		 Extraction and import of keys to verify stability of key usage in transporting keys Technical task Resolved Hoda Rohani
        15.
        		 Tool to create a series of snapshots Technical task Resolved Unassigned
        16.
        		 Tool to replay a sequence of snapshots Technical task Resolved Berry van Halderen

          Activity

            People

            Assignee:
            berry Berry van Halderen
            Reporter:
            berry Berry van Halderen
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: