Tomas Krizek authored 6 years ago and Petr Špaček committed 5 years ago

Add a message to make extra requirements clear instead of throwing
a compilation error.

Closes #457

daemon/lua/trust_anchors: don't crash when dealing with unknown algorhitm

Closes #449

See merge request !788

User-friendly error message is intentionally at the end so users,
typically looking at the last line in logs, can see immediatelly what
happened.

Previous version would add the TA and then print error message, which is
not expected.

Tomas Krizek authored 6 years ago and Petr Špaček committed 5 years ago

It's impossible to add managed keysets unless ta_update is loaded,
in which case ta_update.start() is called by trust_anchors.add_file().

On ta_update unload, previously managed keys are flagged as unmanaged.

Tomas Krizek authored 6 years ago and Petr Špaček committed 5 years ago

Since DNSSEC is now enabled by default and always loads the
keyfile_default specified during compilation, these options are
obsolete.

Use trust_anchors.add_file() in config file if you require this
functionality.

It was unused since cleanup in trust_anchors and just cluttering the code.

Tomas Krizek authored 6 years ago and Petr Špaček committed 5 years ago

+ tests

Exracting RFC 5011 to separate module was a good opportunity for
cleanup.

Previously a typo in keyfile path triggered re-bootstrap even if root TA
was already installed.

This simple change makes it easier to follow what the code does.

pytests: omit verbose log for query flood test

See merge request !793