Renew signatures only if it is needed (there are new RRs or they are about to expire)

niclabs / dns-tools

DNS tools for zone signature (file, pkcs11-hsm) and validation, and zone digest (ZONEMD)

MIT License

16 stars 4 forks source link

Closed eriverosr closed 4 years ago

eriverosr commented 4 years ago

Parse and check already signed zone to verify if it needs to be signed again:
- It is going to be signed with a different key than the previous one
- If original zone modification date is greater than signed zone modification date
- If any signature is about to expire

eriverosr commented 4 years ago

Done in latest version