README

January 26, 2026 · View on GitHub

LICENSE: GPLv2+, see COPYING

This package contains various tools to generate special DNS records

sshfp Generate RFC-4255 SSHFP DNS records from known_hosts files or ssh-keyscan tlsa Generate RFC-6698 TLSA DNS records via TLS openpgpkey Generate RFC-7929 OPENPGPKEY DNS records using gpg ipseckey Generate RFC-4025 IPSECKEY DNS records on Libreswan IPsec servers

Authors:

Paul Wouters pwouters@redhat.com (sshfp, tlsa, openpgpkey, ipseckey) Pieter Lexis pieter.lexis@os3.nl (tlsa)

Contributors:

Chrisopher Olah James Brown Patrick Uiterwijk Gerald Turner Ondřej Surý Jan Vcelak Dirk Stöcker Frank Crawford Bastian Germann

REQUIREMENTS:

python-dns http://www.dnspython.org/ python-gnupg http://pythonhosted.org/python-gnupg/ cryptography https://cryptography.io/ unbound-python http://www.unbound.net/ ssh-keygen from openssh gpg from gnupg

NOTE: There is a another package called python-gnupg at https://github.com/isislovecruft/python-gnupg that is available on FreeBSD. This is NOT the same package and will not work.