Hi,
The code in branch 'dnssec2' of my catlfish repository [0] can be used
for starting a log which accepts DS records with a chain ending in one
of the configured trust anchors. See README.dnssec.md [1] for a
specification, i.e. where we don't follow
draft-zhang-trans-ct-dnssec-03.
[0] git clone
https://git.nordu.net/user/linus/catlfish.git
[1]
https://git.nordu.net/?p=user/linus/catlfish.git;a=blob_plain;f=README-dnss…
A major thing that does not work yet is 'make tests'. All the
integration tests are written in Python. We need to do things like read
an RRset in wire format and chop it up in RR's. Is it easiest to just
write the code for doing that, rather than figuring out how to make
dnspython or dnslib do it?
As soon as 'make tests' is happy, I'm setting up a single-frontend,
single-mergenode log on a NORDUnet server.
Then on to a submitting client. What do people envision here? A
standalone program "crawling" the zones at hand and submitting
every DS it sees? Something running as part of a resolver, submitting DS
records passing by? Something else?