DelphinusDNS Blog

(the latest about delphinusdnsd)

Canonical sorting still problematic

August 9th, 2020

With in-depth debugging with another person who uses delphinusdnsd, we were able to make out that the canonical sorting in DNSSEC (dddctl sign) is still not right. I'm going to change this in dddctl on all functions. I will do this next week. I have a plan. Hopefully it will be a once and for all result. Many thanks goes to nlnetlabs in the netherlands who created the program ldns-verify-zone. Without you guys I'd have problems. I'm standing on the shoulders of giants.

comment from Peter J. Philipp at Tue, 11 Aug 2020 17:57:48 +0000(1597168668)

I did some fixing for this except I think the sign_dnskey() function, I'll have to be careful wiht that one..the old algorithm seems to still work for that at least it passes ldns-verify-zone...

comment from Peter J. Philipp at Tue, 11 Aug 2020 17:58:30 +0000(1597168710)

tomorrows snapshot should have the changes in place.

comment from Peter J. Philipp at Mon, 24 Aug 2020 06:31:44 +0000(1598250704)

I just did the sign_dnskey() function so they should all be moved over to the new code now.

captcha below...dark background are capitals, the 1 looks a little weird, concatenate with the math result


RSS Feed

Click here for RSS

On this day in

Other links

Have feedback?

By clicking on the header of an article you will be served a cookie. If you do not agree to this do not click on the header. Thanks!

Using a text-based webbrowser?

... such as lynx? Welcome back it's working again for the time being.

Older Blog Entries

Powered by BCHS