[IDM.TRAIN.00024] Zone Manager - KNOT DNS Configuration through REST

Description:

This functionality MUST allow publishing the Trust Framework and the DID in the DNS Zone file for the KNOT DNS server. It integrates with the TSPA Manager using the Zone Manager Handler.

Constraints

• Trust Frameworks MUST be published as PTR records in KNOT
• DIDs corresponding to Trust Frameworks MUST be published as URI records in KNOT
• Zone Manager MUST provide DNSSEC configurations for KNOT
• Zone File MUST be re-signed on every new update

Interfaces

• Zone Manager Handler
• Trust Framework and Trust List Pointers Storage (Postgresql)
• TSPA Manager (Maybe?)
• DNS Servers (KNOT)

Input

1. Trust Framework
2. DID Enrollment corresponding to Trust Framework

Output

1. Update of Trust Framework and DID in the DNS Zone file of the KNOT server

Acceptance Criteria

The following acceptance criteria MUST be met:

1. A request update has been successfully reflected in the Zone file of KNOT (200)
2. A wrong context or missing data leads to an exception (400)
3. An audit entry is created
4. An error, if record is in progress by the operator
5. MUST integrate with the TSPA Manager using the Zone Manager Handler
6. MUST be tested with KNOT DNS Server

Depends on:

#2 (closed)