unbound

Warning

This integration is currently not supported due to the end of life of oqs-openssl111. Feel free to vote this back into supported state by visiting the discussion on the topic.

Unbound(DNS-over-Tls)

This section is intended to implement the post quantum key exchange using openssl on a DNS server. Two Dockerfile were provided to test the key exchange between a client and the dns server over a tls connection.

A first Dockerfile with unbound configure with dns-over-tls and using the key exchange of openssl post quantum variant.

A second Dockerfile with getdns with openssl post quantum variant is used to query the DNS server to test the key exchange.

Installation

Assuming you have docker installed on your machine all command below will launch respective docker.

Run Unbound DNS container:

    docker network create unbound-test && \
    docker build -t unbound_docker -f Dockerfile-unbound . && \
    docker run --network unbound-test --interactive --publish=853:853 --tty --hostname unbound --name unbound unbound_docker

Documentation for using the server docker image is contained in the separate USAGE-server.md file.

Open another terminal in the folder to run the getdns container:

    docker build -t getdns_docker Dockerfile-getdns . && \
    docker run --network unbound-test --interactive --tty --hostname getdns --name getdns getdns_docker

Documentation for using the client docker image is contained in the separate USAGE-client.md file.

DISCLAIMER

Please check the limitations and security information