X-Git-Url: https://git.svenne.dk/?p=public%2Fdnssec-swede-utility.git;a=blobdiff_plain;f=README;h=7fdf172a869888c7ca5be16f4291683dda7b7789;hp=f995775a33c5b2c128092fb668cee81ec2c6c3fb;hb=HEAD;hpb=93fb20db0cbd1946b6a5036841d14ddbbb60c0df diff --git a/README b/README index f995775..7fdf172 100644 --- a/README +++ b/README @@ -1,4 +1,4 @@ - SWEDE - tools to create and verify TLSA (DANE) records + SWEDE - a tool to create and verify TLSA (DANE) records ================================================================================ Swede aims to provide a one-stop solutions to create and test TLSA records. @@ -17,8 +17,8 @@ from squeeze-backports. FEATURES -------------------------------------------------------------------------------- -- Creation of all 18 permutations of TLSA records -- Output in draft and RFC format +- Creation of all 24 permutations of TLSA records +- Output in generic and RFC format - Ability to load certificates from disk to create records from - Verify TLSA records 'in the field' with the certificates offered by the TLS service running on the server @@ -39,8 +39,8 @@ swede verify -p 1516 dane.kiev.practicum.os3.nl swede verify ulthar.us TODO -------------------------------------------------------------------------------- -- Creation tool that checks the CN in the Subject of the certificate -- IPv6 support (M2Crypto doesnt support it at the moment) +- Create and verify should check the CN in the Subject of the certificate +- The verification for usage 2 is _VERY_ naive - Creation tool that does an AXFR for a full zone, collects all hostnames, gets the certificates (or the CA certificate from the commandline) and creates all TLSA records.