In python 3.12, "in" for enums tests values as well, so something like "12345 in dns.rdatatype.RdataType" will now return True. This broke some logic guarding against registering a known-but-unimplmemented type code point with a class that didn't have the right name. We now just give up on this test as it will never be a real problem. We change a few related tests to be more sensible.
The NSEC3 next name field is defined as base32 with no padding, but the code was doing base32 decoding with padding. This wouldn't have any effect in the normal case, since the only defined NSEC3 hashing algorithm is SHA1, and that generates a 160 bit hash that doesn't require padding when encoded in base32. This change removes generated padding after encode, rejects padded input on decode, and adds necessary padding for decode.
* Add basic DDR support.
* Improve get_rrset/find_rrset API. This allows most of the parameters to be specified as strings, matching the interface for dns.message.make_query(). * Remove unneeded "the_section". There's no need to use a separate internal variable for the section; mypy doesn't complain about reuse.
* first cut at NSEC support * use transactions, fix delegations * rename to add_nsec_to_zone * optimize NSEC generation * split out function to get all secure names (could be useful for NSEC3 later) * add `Bitmap.from_rdtypes()` and add missing typing * more typing * add missing import * add more typing * fix tok type * remove _get_secure_names, optimize * better zone testing (compare as text) add test example with delegation below other delegation * include NSEC itself in the bitmap * lint * Add names iteration to transactions via iterate_names(). Also make rdataset iteration more obvious by adding an explicit iterate_rdatasets() API. * use iterate_names() * typo * black * use single iteration * better type fix * add optional transaction to add_nsec_to_zone * idea for zone signer * do not sign RRSIGs * fix signer * correctly sign DS * simplify * simplify by passing rrset to signer * fix typing * nit * add DS * add more test * rewrite zone signer * compact * simplify * make easier to read * bring back rrset_signer * move default RRset signer * more * more * prettier context handling (mypy issue pending) * make NSEC zone signer less complex * update * fix txn, sign as defined by SEP * docs * add back missing dnskey_include * rename dnskey_include to add_dnskey * check KSK/ZSK key tags in signed zone --------- Co-authored-by: Bob Halley <halley@dnspython.org>
This change: Allows resolution hostnames in URLs using dnspython's resolver or via a bootstrap address, without rewriting URLs. Adds full support for source addresses and ports to httpx, except for asyncio I/O where only the source address can be specified. Removes support for requests.
Also make rdataset iteration more obvious by adding an explicit iterate_rdatasets() API.