dnssec resolver

[Miek Gieben <miekg@atoom.net>]

Hello,

I've made some improvements in the code. The most important change is that there
is a resolvsec.conf. This file lists all the secure entry points together with
their nameserver(s). I've made the decision to use DS record in this file in
stead of key records. The first reason is that I think DS records are somewhat
easier to handle than key records. The second, related, reason is that this
makes the parsing of the file a lot simpler.

The resolving parts haven't changes much.

There is a little util: key2ds.pl <key filename> , which generates a DS record
from a KEY record. This DS can then be used in resolvsec.conf.

Short term todo list:
- handling NXT records
- finishing the resolving 
- code cleanup

I'm still very interested in feedback,

grtz  Miek


--
:wq!

rel.tgz