[PR #2757] [MERGED] Add method to `dns` cli to fetch KSKs and update keys #3293

New issue

Closed

opened 2026-03-16 11:35:46 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 11:35:46 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/2757
Author: @bluejekyll
Created: 2/9/2025
Status: ✅ Merged
Merged: 2/15/2025
Merged by: @bluejekyll

Base: main ← Head: add-method-to-dns-cmd-for-ksks

📝 Commits (8)

9be2547 add fetch-keys to dns cli to fetch root ksks
268edf9 add 2024 trust anchor and remove original unused key
d4a21d7 cleanup use statements in dns cli
52ff627 fix the trust_anchor unit test
d6fb230 remove cfg_if usage
9aadeba change output_path to output_dir for clarity
1ff9f33 Merge branch 'main' into add-method-to-dns-cmd-for-ksks
ad183e7 fix public key bytes to new method usage

📊 Changes

6 files changed (+142 additions, -16 deletions)

View changed files

➖ crates/proto/src/dnssec/roots/19036.rsa (+0 -0)
➕ crates/proto/src/dnssec/roots/38696.rsa (+0 -0)
📝 crates/proto/src/dnssec/roots/README.md (+27 -9)
📝 crates/proto/src/dnssec/trust_anchor.rs (+5 -5)
📝 util/Cargo.toml (+1 -1)
📝 util/src/bin/dns.rs (+109 -1)

📄 Description

Closes: #2717

This adds back a utility for fetching the root KSKs.

I'm also updating the 2024 key.

Verified against, https://data.iana.org/root-anchors/root-anchors.xml

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/2757 **Author:** [@bluejekyll](https://github.com/bluejekyll) **Created:** 2/9/2025 **Status:** ✅ Merged **Merged:** 2/15/2025 **Merged by:** [@bluejekyll](https://github.com/bluejekyll) **Base:** `main` ← **Head:** `add-method-to-dns-cmd-for-ksks` --- ### 📝 Commits (8) - [`9be2547`](https://github.com/hickory-dns/hickory-dns/commit/9be2547bc3f585bd525a906bbef80448eef87c1f) add fetch-keys to dns cli to fetch root ksks - [`268edf9`](https://github.com/hickory-dns/hickory-dns/commit/268edf9c60ae9b87e7049eb53a04f3497e16de65) add 2024 trust anchor and remove original unused key - [`d4a21d7`](https://github.com/hickory-dns/hickory-dns/commit/d4a21d7f0ecee18799f898d11ff63cfeb967d312) cleanup use statements in dns cli - [`52ff627`](https://github.com/hickory-dns/hickory-dns/commit/52ff627b0bc0de6b3a79c2be016f20e4ab190d6e) fix the trust_anchor unit test - [`d6fb230`](https://github.com/hickory-dns/hickory-dns/commit/d6fb230921ff30c90c875456dc4de4341d2f7889) remove cfg_if usage - [`9aadeba`](https://github.com/hickory-dns/hickory-dns/commit/9aadeba0492536e89ea425f7a23de6fd9c7bd4eb) change output_path to output_dir for clarity - [`1ff9f33`](https://github.com/hickory-dns/hickory-dns/commit/1ff9f336d33d7ebc8019e118ccf54eac9244f23d) Merge branch 'main' into add-method-to-dns-cmd-for-ksks - [`ad183e7`](https://github.com/hickory-dns/hickory-dns/commit/ad183e78f0728d53b8f64e385be9bd08b20bb907) fix public key bytes to new method usage ### 📊 Changes **6 files changed** (+142 additions, -16 deletions) <details> <summary>View changed files</summary> ➖ `crates/proto/src/dnssec/roots/19036.rsa` (+0 -0) ➕ `crates/proto/src/dnssec/roots/38696.rsa` (+0 -0) 📝 `crates/proto/src/dnssec/roots/README.md` (+27 -9) 📝 `crates/proto/src/dnssec/trust_anchor.rs` (+5 -5) 📝 `util/Cargo.toml` (+1 -1) 📝 `util/src/bin/dns.rs` (+109 -1) </details> ### 📄 Description Closes: #2717 This adds back a utility for fetching the root KSKs. I'm also updating the 2024 key. Verified against, https://data.iana.org/root-anchors/root-anchors.xml --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>