Vladimír Čunát authored 8 years ago and Ondřej Surý committed 8 years ago

engine_cmd() doesn't print the error() exceptions thrown from lua;
it only leaves the message on lua stack.

(cherry picked from commit a316b9f7)

Ondřej Surý authored 8 years ago and Ondřej Surý committed 8 years ago

trust anchor fixes

Closes #151

See merge request !193

new trust anchors variables:
* trust_anchors.hold_down_time = 30 * day
* trust_anchors.refresh_time = nil
* trust_anchors.keep_removed = 0

these could be used to control how often should
root trust anchors be checked and how many removed
keys should be kept in log (0 by default)

kresd accepts DS records in root keys if provided,
it will eventually replace them with DNSKEY in
automatic mode

the utility supports most of the 'unbound-host'
functionality except PTR records

when boostrapping root TA, the DNSKEYs are updated
immediately after retrieving DS from the side channel

the quiet mode doesn't print neither intro messages nor prompt
in the interactive mode, which makes it useful for scripted usage

if the root key file doesn’t exist, it will be populated from root DNSKEY query, which will be validated against root trust anchors retrieved over HTTPS with IANA cert verification against built-in current IANA cert CA. it requires luasocket and luasec for it to work. trust anchors XML file signature is not checked, as there’s no facility for PKCS7 checking yet.

refs #16

todo: active refresh