Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(ns): automatically publish Bootstrapping Signaling records #46

Merged
merged 1 commit into from
Jul 24, 2022

Conversation

nils-wisiol
Copy link
Contributor

This PR adds support for DNSSEC Bootstrapping in the latest version.

Bootstrapping Records are automatically generated using lua, so online signing is required. The private key is supplied to ns via .env file and must be the same on all name servers using the same name server name.

Bootstrapping Records can be queried at _dsboot.domain-name._signal.name-server-name (CDS and CDNSKEY).

@nils-wisiol nils-wisiol force-pushed the 20220723_bootstrapping branch 4 times, most recently from 00b422d to 5d3c2f4 Compare July 23, 2022 22:31
Copy link
Member

@peterthomassen peterthomassen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

very cool!

Let's do a load test (concurrently query many signaling records), and if that doesn't break the auth, let's deploy!

README.md Outdated Show resolved Hide resolved
docker-compose.yml Outdated Show resolved Hide resolved
ns/signaling_domain_zone.sh Outdated Show resolved Hide resolved
@nils-wisiol
Copy link
Contributor Author

Addressed all comments.

@nils-wisiol nils-wisiol merged commit 4397391 into main Jul 24, 2022
@peterthomassen peterthomassen deleted the 20220723_bootstrapping branch March 22, 2023 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants