X-Git-Url: https://git.svenne.dk/?p=public%2Fdnssec-swede-utility.git;a=blobdiff_plain;f=README;fp=README;h=ab5949354736734c8e9cb1fcb128f58709b06e6a;hp=f995775a33c5b2c128092fb668cee81ec2c6c3fb;hb=6accad05d1a1c9d7fe307208b67d274125d0bea5;hpb=65280a035279c7dfbba2f87ff41f81ea2456bf7f diff --git a/README b/README index f995775..ab59493 100644 --- a/README +++ b/README @@ -1,4 +1,4 @@ - SWEDE - tools to create and verify TLSA (DANE) records + SWEDE - a tool to create and verify TLSA (DANE) records ================================================================================ Swede aims to provide a one-stop solutions to create and test TLSA records. @@ -17,7 +17,7 @@ from squeeze-backports. FEATURES -------------------------------------------------------------------------------- -- Creation of all 18 permutations of TLSA records +- Creation of all 24 permutations of TLSA records - Output in draft and RFC format - Ability to load certificates from disk to create records from - Verify TLSA records 'in the field' with the certificates offered by the TLS @@ -39,7 +39,8 @@ swede verify -p 1516 dane.kiev.practicum.os3.nl swede verify ulthar.us TODO -------------------------------------------------------------------------------- -- Creation tool that checks the CN in the Subject of the certificate +- Create and verify should check the CN in the Subject of the certificate +- The verification for usage 2 is _VERY_ naive - IPv6 support (M2Crypto doesnt support it at the moment) - Creation tool that does an AXFR for a full zone, collects all hostnames, gets the certificates (or the CA certificate from the commandline) and creates all