| Pri
| Piece
| Creator
| Possible Change
|
| 1 | zonesigner | Morrison | Multiple zones in a keyrec file have problems with signing sets. (see mail from Suresh)
|
| 1 | zonesigner | Morrison | The initial zone line for each zone keyrec may not always be added. (see mail from Suresh)
|
| 1 | zonesigner | Morrison | zonesigner should generate a warning if two different key tags collide during key generation. (request from 10/07 SNIP workshop)
|
| 1 | zonesigner | Morrison | Offline operation for zonesigner/rollerd -- don't want keys online. (request from 10/07 SNIP workshop)
|
| 3 | zonesigner | Morrison | Abstract the keygen and zonesign operations so non-BIND packages can be used.
|
| 3 | zonesigner | Morrison | Make sure the GUI interface is up-to-date.
|
| 3 | zonesigner | Morrison | It'd be nice to allow for multiple zones in a single keyrec file. (request from 10/07 SNIP workshop)
|
| 1 | rollerd | Morrison | There appear to be problems with the "roll all ZSKs" user command.
|
| 1 | rollerd | Morrison | Must allow for automated removal from KSK phase 6.
|
| 1 | rollerd | Morrison | KSK rollover isn't quite right. (see mail from Suresh from around 10/16/08)
|
| 3 | rollerd | Morrison | There should be a "roll all KSKs" command.
|
| 3 | rollerd/rollctl | Morrison | Add -rollonce. (requested by Wes Hardaker) (already implemented?)
|
| 3 | rollerd | Morrison | Tests and demos start KSK rollover immediately, even when this shouldn't necessarily be done.
|
| 3 | rollctl | Morrison | "rollctl -zsargs" needs an all-zone wildcard.
|
| 3 | rollrec.pm | Morrison | It might be useful to modify rollrec files to allow zone groups. In addition to this module, this change would probably require changes most of the roll tools. Depending on how it's implemented, rollerd may not need mods.
|
| 3 | roll tools | Morrison | It'd be nice to administratively separate the role-bassed stuff. (requested by Wes Hardaker)
|
| 3 | blinkenlights | Morrison | Add a "Roll KSK" command.
|
| 3 | blinkenlights | Morrison | Going to "show no keys" seems to require a two-stage window update. It'd be nice if this was a single operation.
|
| 3 | blinkenlights | Morrison | Sometimes clicking on domain or status gives an error:
"Tk::Error: Can't call method "PathName" on an undefined value at /usr/bin/blinkenlights line 2116. <Button> (command bound to event)". Looks like it's related to "Hide All Keysets" command.
|
| 3 | dtconf-editor | Morrison | It'd be nice to have a GUI for creating and editing DNSSEC-Tools configuration files.
|
| 3 | dtinitconf | Morrison | This tool should help with finding the location of the BIND tools.
|
| 1 | rollrec-editor | Morrison | Choosing the "Exit" command causes a segmentation fault. This is not a good thing.
|
| 3 | rollrec-editor | Morrison | An "Undo" command would be very nice.
|
| 3 | open issue | Morrison | Should rollerd allow simultaneous KSK and ZSK rollovers for a particular zone.
|