Add keygen command.

.github/workflows/ci.yml

@@ -10,13 +10,30 @@ jobs:
       matrix:
         os: [ubuntu-latest, windows-latest, macOS-latest]
         rust: [1.78.0, stable, beta, nightly]
+    env:
+        RUSTFLAGS: "-D warnings"
+        # We use 'vcpkg' to install OpenSSL on Windows.
+        VCPKG_ROOT: "${{ github.workspace }}\\vcpkg"
+        VCPKGRS_TRIPLET: x64-windows-release
+        # Ensure that OpenSSL is dynamically linked.
+        VCPKGRS_DYNAMIC: 1
     steps:
     - name: Checkout repository
       uses: actions/checkout@v1
     - name: Install Rust
       uses: hecrj/setup-rust-action@v2
       with:
         rust-version: ${{ matrix.rust }}
+    - if: matrix.os == 'ubuntu-latest'
+      run: sudo apt-get install -y libssl-dev
+    - if: matrix.os == 'windows-latest'
+      id: vcpkg
+      uses: johnwason/vcpkg-action@v6
+      with:
+        pkgs: openssl
+        triplet: ${{ env.VCPKGRS_TRIPLET }}
+        token: ${{ github.token }}
+        github-binarycache: true
     - if: matrix.rust == 'stable'
       run: rustup component add clippy
     - if: matrix.rust == 'stable'
@@ -36,6 +53,8 @@ jobs:
       uses: hecrj/setup-rust-action@v2
       with:
         rust-version: "1.78.0"
+    - name: Install OpenSSL
+      run: sudo apt-get install -y libssl-dev
     - name: Install nightly Rust
       run: rustup install nightly
     - name: Check with minimal-versions

Cargo.toml

@@ -8,11 +8,25 @@ default-run = "dnst"
 name = "ldns"
 path = "src/bin/ldns.rs"
 
+[features]
+default = ["openssl", "ring"]
+
+# Cryptographic backends
+openssl = ["domain/openssl"]
+ring    = ["domain/ring"]
+
 [dependencies]
 clap = { version = "4.3.4", features = ["derive"] }
-domain = { version = "0.10.3", git = "https://github.com/NLnetLabs/domain.git", branch = "initial-nsec3-generation", features = ["unstable-validator", "zonefile"] }
+domain = { git = "https://github.com/NLnetLabs/domain.git", branch = "initial-nsec3-generation", features = [
+    "bytes",
+    "zonefile",
+    "unstable-sign",
+    "unstable-validate",
+    "unstable-validator",
+] }
 lexopt = "0.3.0"
 
 [dev-dependencies]
 test_bin = "0.4.0"
 tempfile = "3.14.0"
+regex = "1.11.1"