Template:DNSSEC-Tools Components
From DNSSEC-Tools Wiki
[edit] Zone Administration Tools | |||
| zonesigner | Manual Example CLI Help | Will generate keys and sign zones with one command. | |
| donuts | Manual Example CLI Help | Error check the contents of your zone. You can extend it by Writing your own rules donuts does general DNS error checking including DNSSEC-specific checks. | |
| mapper | Manual Example CLI Help | Graphically display the contents of your zone | |
|
[edit] Authoritative Domain Name Server Tools | ||
| zonesigner | Manual Example CLI Help | Will generate keys and sign zones with one command. |
| rollerd | Manual Example CLI Help | Automatic key rollover. A daemon which automatically (or manually) steps through updating Zone Signing and Key Signing Keys for a set of zones. It can be controlled while running with rollctl. |
| rollctl | Manual Example CLI Help | Send commands to daemon rollerd without restarting rollerd. |
| donuts | Manual Example CLI Help | Error check the contents of your zone. You can extend it by Writing your own rules donuts does general DNS error checking including DNSSEC-specific checks. |
| donutsd | Manual Example CLI Help | Daemon that regularly checks the contents of a set of zonees. |
| mapper | Manual Example CLI Help | Graphically display the contents of your zone |
| dnspktflow | Manual Example CLI Help | Visually trace DNS packets being sent on the network. |
| logwatch | Example | Included in current versions of logwatch A logwatch plugin for DNSSEC parsing of the BIND server's system logging messages. |
|
[edit] Recursive Domain Name Server Tools | ||
| trustman | Manual CLI Help | Detects key changes in trust anchors (TAs), it can update TAs and it can run as a daemon. |
| dnspktflow | Manual Example CLI Help | Visually trace DNS packets being sent on the network. |
| logwatch | Example | Included in current versions of logwatch A logwatch plugin for DNSSEC parsing of the BIND server's system logging messages. |
|
[edit] Application/Script Writers | ||
| libval libsres | Manual Manual | C libraries that implement DNSSEC aware DNS resolution APIs. |
| libval_shim | Manual | Preload shim library - maps DNS calls in legacy apps to equivalent DNSSEC functions. |
| DNS Error Checking Tools | ||
| Perl Modules: | ||
| Net::DNS::ZoneFile::Fast | Manual | Quickly read and parse a zone file into Net::DNS object records. |
| Net::DNS::SEC::Validator | Manual | Perl bindings to the libval and libsres libraries. |
| Net::addrinfo | Manual | interface to POSIX getaddrinfo and related constants, structures and functions |
|
[edit] End Users (DNSSEC Native Applications) | ||
| Firefox | README | Patch to add DNSSEC support to Firefox |
| Sendmail | HowTo | Patch to add DNSSEC support to Sendmail |
| Postfix | 2.3.x HowTo 2.2.x HowTo Example | Patch to add DNSSEC support to Postfix |
| LibSPF | HowTo | Patch to add DNSSEC support to Libspf2 |
| Thunderbird | README | Patch to add DNSSEC support to Thunderbird |
| ssh | README | Patch to add DNSSEC support to ssh |
| lftp | HowTo | Patch to add DNSSEC support to lftp |
| wget | HowTo | Patch to add DNSSEC support to wget |
| ncftp | HowTo | Patch to add DNSSEC support to ncftp |
| proftpd | HowTo | Patch to add DNSSEC support to proftpd |
| jabberd | Patch to add DNSSEC support to jabberd | |
|
[edit] DNS Error Checking Tools | ||
| dnspktflow | Manual Example CLI Help | Visually trace DNS packets being sent on the network. |
| validate | Manual CLI Help | command line DNS validation checking (similar to dig). This is part of the libval and libsres package. |
| mapper | Manual Example CLI Help | Graphically display the contents of your zone |
| trustman | Manual CLI Help | Detects key changes in trust anchors (TAs), it can update TAs and it can run as a daemon. |
| donuts | Manual Example CLI Help | Error check the contents of your zone. You can extend it by Writing your own rules donuts does general DNS error checking including DNSSEC-specific checks. |
| logwatch | Example | Included in current versions of logwatch A logwatch plugin for DNSSEC parsing of the BIND server's system logging messages. |
