[GH-ISSUE #782] AXFR / TSIG example? #292

New issue

Closed

opened 2026-03-07 23:18:09 +03:00 by kerem · 3 comments

kerem commented

2026-03-07 23:18:09 +03:00

Owner

Originally created by @dsvensson on GitHub (May 27, 2019).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/782

What is the question?
Is there any example of initiating an AXFR from a client with a base64 TSIG key, similar to dig:

dig @::1 +tcp -y hmac-sha256:foo.key:QQ== foo.bar. axfr

Can't figure out how to create the signer. Using featureset:

trust-dns = { version = "0.16.0", default-features = false, features = ["dns-over-rustls"] }

Originally created by @dsvensson on GitHub (May 27, 2019). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/782 What is the question? Is there any example of initiating an AXFR from a client with a base64 TSIG key, similar to dig: dig @::1 +tcp -y hmac-sha256:foo.key:QQ== foo.bar. axfr Can't figure out how to create the signer. Using featureset: trust-dns = { version = "0.16.0", default-features = false, features = ["dns-over-rustls"] }

kerem closed this issue

2026-03-07 23:18:14 +03:00

kerem commented

2026-03-07 23:18:20 +03:00

Author

Owner

@dsvensson commented on GitHub (May 27, 2019):

Missing due to #14?

@dsvensson commented on GitHub (May 27, 2019): Missing due to #14?

kerem commented

2026-03-07 23:18:25 +03:00

Author

Owner

@bluejekyll commented on GitHub (May 27, 2019):

Yeah, TSIG is not yet implemented. I currently don’t have a need for it, but if someone wanted to go through the ( shakily I think is significant) effort of supporting it, I’d be happy to accept a PR.

@bluejekyll commented on GitHub (May 27, 2019): Yeah, TSIG is not yet implemented. I currently don’t have a need for it, but if someone wanted to go through the ( shakily I think is significant) effort of supporting it, I’d be happy to accept a PR.

kerem commented

2026-03-07 23:18:30 +03:00

Author

Owner

@darnuria commented on GitHub (Oct 28, 2022):

Hello, would try to work on axfr with TSIG for the auth, if it's not already done. Checked there is some groundwork in dnssec client (like constant time check) already there. :)

Can do an other feature meta-ticket to follow steps.

@darnuria commented on GitHub (Oct 28, 2022): Hello, would try to work on axfr with TSIG for the auth, if it's not already done. Checked there is some groundwork in dnssec client (like constant time check) already there. :) Can do an other feature meta-ticket to follow steps.

kerem referenced this issue

2026-03-16 02:01:36 +03:00

[PR #292] [MERGED] Properly include u16::max in rand Id generation #1346