FRED v. 2.1 (dnssec)

Hello, site fred.nic.cz si again up and running and what's more it contains new version of fred. Main feature of this version is DNSSEC support. For Fred it means adding new primary object called Keyset which contains public keys from subdomain holders which already signed their domains and want to have a secure delegation from us. We add these public keys into the our zone in the form of new DS records. Of course, even our zone must be signed. This is not part of Fred, you can use any tools on the market to sign zone generated from Fred (i.e. dnssec-signezone, ldns-signzone..etc) Keyset is similar to nsset but where nsset generates NS records into zone, keyset generates DS records. Holders can put DS records data directly into keytest, but it's not recommended because it prevents keyset from sharing among different domains. This is because that DS records contains hash of domain name (this was in Fred 2.0). Better approach (in Fred 2.1) allows inserting public keys int keyset and DS records are generated automatically. Such keyset can be attached to unlimited number of domains and so it support better key manipulation. Next highlight of this version is updated web administration interface that can show historical changes on all main objects (domain, contact, nsset, keyset). For example, if domain is updated multiple times, detail of this domain shows what data were valid in what time. You can also search in history and both of these features are driven by history checkbox which is on each page of administration interface. I updated source files, RPM files and DEB files on archive. All is accessible on http://fred.nic.cz/wiki/download . Next version 2.2 is going to contain: - users in administration interface - access rights to different parts of administration interface for different users - user profile containing prepared object filters - auditing of actions which enter registry - through EPP (this is already there but will be refactored) - through unix whois and web whois (to support some form of DOS protection) - through web administration interface Regards, Jaromir Jaromír Talíř píše v St 05. 11. 2008 v 15:44 +0100: