import net/walker in the right dir...

This is a proof-of-concept of a utility to download DNS zone contents
even when AXFR is disabled on the server, assuming DNSSEC is used.
Optionally it can also verify all digital signature RRs within a
zone against the zone key. If you do not know what DNSSEC is, please
refer to: RFC 2535, RFC 4033, RFC 4034, RFC 4035, "dnssec.net" (lots
of DNSSEC information).

The tool supports both the old DNSSEC according to RFC 2535 (i.e.,
KEY/SIG) and the latest DNSSEC version according to RFC 4033 (i.e.,
DNSKEY/RRSIG).
This commit is contained in:
sthen 2009-09-27 23:55:58 +00:00
parent 3d990f698c
commit d4789a7282
4 changed files with 49 additions and 0 deletions

31
net/walker/Makefile Normal file
View File

@ -0,0 +1,31 @@
# $OpenBSD: Makefile,v 1.1.1.1 2009/09/27 23:55:58 sthen Exp $
COMMENT= retrieve DNS zone via DNSSEC NXT/NSEC traversal
DISTNAME= walker-3.8
CATEGORIES= net
HOMEPAGE= http://josefsson.org/walker/
# GPLv2+
PERMIT_PACKAGE_CDROM= Yes
PERMIT_PACKAGE_FTP= Yes
PERMIT_DISTFILES_CDROM= Yes
PERMIT_DISTFILES_FTP= Yes
MASTER_SITES= ${HOMEPAGE}releases/
RUN_DEPENDS= ::net/p5-Net-DNS \
::net/p5-Net-DNS-SEC
NO_BUILD= Yes
NO_REGRESS= Yes
PKG_ARCH= *
do-install:
${INSTALL_SCRIPT} ${WRKSRC}/walker ${PREFIX}/bin/
${INSTALL_MAN} ${WRKSRC}/walker.1 ${PREFIX}/man/man1/
.include <bsd.port.mk>

5
net/walker/distinfo Normal file
View File

@ -0,0 +1,5 @@
MD5 (walker-3.8.tar.gz) = fLGYilrWXxMvQ5KO2digbQ==
RMD160 (walker-3.8.tar.gz) = Cy4fsZJPNrPFIk9WpXUmy51uUgA=
SHA1 (walker-3.8.tar.gz) = rLSv0WBcuzCNS6h4A5T5f9t9PB0=
SHA256 (walker-3.8.tar.gz) = JcZs5zVNAyh4JUUq9rxlCl5WWivNI0eFLAi9LV+un70=
SIZE (walker-3.8.tar.gz) = 18478

10
net/walker/pkg/DESCR Normal file
View File

@ -0,0 +1,10 @@
This is a proof-of-concept of a utility to download DNS zone contents
even when AXFR is disabled on the server, assuming DNSSEC is used.
Optionally it can also verify all digital signature RRs within a
zone against the zone key. If you do not know what DNSSEC is, please
refer to: RFC 2535, RFC 4033, RFC 4034, RFC 4035, "dnssec.net" (lots
of DNSSEC information).
The tool supports both the old DNSSEC according to RFC 2535 (i.e.,
KEY/SIG) and the latest DNSSEC version according to RFC 4033 (i.e.,
DNSKEY/RRSIG).

3
net/walker/pkg/PLIST Normal file
View File

@ -0,0 +1,3 @@
@comment $OpenBSD: PLIST,v 1.1.1.1 2009/09/27 23:55:58 sthen Exp $
bin/walker
@man man/man1/walker.1