Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature/2024 into Production #1

Merged
merged 238 commits into from
Oct 10, 2024
Merged

Feature/2024 into Production #1

merged 238 commits into from
Oct 10, 2024

Conversation

andrespavez
Copy link
Contributor

This version, named as dnssec-keytools-2024-20240920-20e5dd9, has been audited and is part of COEN 2.0.0

fredrikt and others added 28 commits June 11, 2024 13:34
…oked_keys

bugfix: Signatures over revocations should not be checked as per KSR-POLICY-SAFETY.
…oked_keys

bugfix wrong key tag on revoked keys
Specifically, ensure that the signature refers to the revoked instance
of EC2, rather than the non-revoked. Validates the change in commit
c4f30e1.
This makes signing less coupled to PKCS#11, allowing tests signing
things in software.
NOTE: There is currently NO PKCS#11 support for generating a key or
using a private key stored in an HSM.
…oked_keys

Bugfix/wrong key tag on revoked keys
@andrespavez andrespavez merged commit 9e3a26c into master Oct 10, 2024
6 checks passed
@andrespavez andrespavez deleted the feature/2024 branch October 10, 2024 19:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants