Installation of the tinydnssec patch
Requirements
This patch is not against stock djbdns. Here's the minimal set of patches to install before the tinydnssec patch applies:
- http://www.fefe.de/dns/djbdns-1.05-test28.diff.xz
Unfortunately, fefe refuses to name a license for this patch, which means that I cannot redistribute it. - My own fixes to the Makefile (IPv6-related): djbdns-ipv6-make.patch
Build
- Download and unpack the original djbdns sources.
- Download and apply the patches listed above.
- Download and unpack tinydnssec in the top-level source directory.
- Apply djbdns-1.05-dnssec.patch.
- Compile as per usual instructions.
- Optional: run tests (see below).
- Install djbdns as per original instructions, or whatever your preferred method is.
- Install
tinydns-sign.pl
in your preferred location for system executables, like e. g./usr/sbin
. - Optional: create a manpage for tinydns-sign using e. g.
pod2man -s 8 -c '' "tinydns-sign.pl" >tinydns-sign.8
then install it in your preferred location for system manpages.
Test
For example:
run-tests.sh
will signtest/data
using keys fromtest/example*
, then issue some queries using tinydns-get, i. e. without any networking involved.- As root, start tinydns / axfrdns on a local address (127.0.0.3) with
ROOT pointing to the
test
directory, then execute
SERVER=127.0.0.3 run-tests.sh -t -u
to test the same queries via tcp and udp.