X-Git-Url: https://git.svenne.dk/?p=public%2Fdnssec-swede-utility.git;a=blobdiff_plain;f=README;h=7fdf172a869888c7ca5be16f4291683dda7b7789;hp=d64c82927839a74368fad3392c08e134d2cd1fce;hb=HEAD;hpb=7e40b632ea8d59b87359774fe5bcbbb5c453150e diff --git a/README b/README index d64c829..7fdf172 100644 --- a/README +++ b/README @@ -1,11 +1,11 @@ - SWEDE - tools to create and verify TLSA (DANE) records + SWEDE - a tool to create and verify TLSA (DANE) records ================================================================================ Swede aims to provide a one-stop solutions to create and test TLSA records. LICENSE -------------------------------------------------------------------------------- -swede is copyright Pieter Lexis and is licensed under the terms -of the GNU General Public Licence version 2 or higher. +swede is copyright Pieter Lexis and is licensed under the +terms of the GNU General Public Licence version 2 or higher. DEPENDENCIES -------------------------------------------------------------------------------- @@ -17,8 +17,8 @@ from squeeze-backports. FEATURES -------------------------------------------------------------------------------- -- Creation of all 18 permutations of TLSA records -- Output in draft and RFC format +- Creation of all 24 permutations of TLSA records +- Output in generic and RFC format - Ability to load certificates from disk to create records from - Verify TLSA records 'in the field' with the certificates offered by the TLS service running on the server @@ -39,8 +39,8 @@ swede verify -p 1516 dane.kiev.practicum.os3.nl swede verify ulthar.us TODO -------------------------------------------------------------------------------- -- Creation tool that checks the CN in the Subject of the certificate -- IPv6 support (M2Crypto doesnt support it at the moment) +- Create and verify should check the CN in the Subject of the certificate +- The verification for usage 2 is _VERY_ naive - Creation tool that does an AXFR for a full zone, collects all hostnames, gets the certificates (or the CA certificate from the commandline) and creates all TLSA records.