Patch: Configurable DNSSEC Support

Adam_Fisk · February 5, 2012, 2:18am

I’ve included a patch for dnssec support using the new DNSSEC4J library at:

The patch adds a dnsSecEnabled field to SmackConfiguration with the default being false. If it is enabled, the patch modifies ProxyInfo to wrap SocketFactories in a VerifiedSocketFactory class that resolves and verifies the signatures of host names before passing them on to the underlying SocketFactory implementation.

Thank you for your consideration, and feel free to contact me at any time with questions or changes. DNSSEC4J was built with the generous support of the NLnet foundation at http://nlnet.nl/.

-Adam Fisk

President

Brave New Software Project, Inc.
dnssec_patch.tgz (10953 Bytes)

Flow · February 5, 2012, 12:57pm

That’s great, I have applied the patch (Note that this is not an offical smack repo) and will test the patch in the next few weeks. I was looking also into DNSSEC for aSmack and you just came here with this little, nice and clean patch. Hopefully it will find his way into smack.

Flow

Adam_Fisk · February 18, 2012, 1:54am

Hey belated thanks for such a quick response on integrating the patch! Great to know about aSmack too – the port to GitHub alone is extremely useful, but it also will come in handy on the Android side for our own work for sure.

Thanks again.

-Adam

Flow · February 19, 2012, 1:42pm

This has been filled as SMACK-366.