Incremental signing for signer

Cargo.toml

@@ -64,6 +64,7 @@ jiff = { version = "0.2", default-features = false, features = ["alloc", "std"]
 _unused_lazy_static = { package = "lazy_static", version = "1.0.2" }
 serde_json = "1.0.137"
 serde = "1.0.217"
+smallvec = "1.13.2"
 tracing = "0.1.41"
 tracing-subscriber = "0.3.19"
 url = "2.5.4"

src/commands/keyset/cmd.rs

@@ -166,7 +166,7 @@ type OptDuration = Option<Duration>;
 
 /// Type for an optional UnixTime. A separate type is needed because CLAP
 /// treats Option<T> special.
-type OptUnixTime = Option<UnixTime>;
+pub type OptUnixTime = Option<UnixTime>;
 
 /// The subcommands of the keyset utility.
 #[allow(clippy::large_enum_variant)]
@@ -416,7 +416,7 @@ enum SetCommands {
     /// Set the amount inception times of signatures over the DNSKEY RRset
     /// are backdated.
     ///
-    /// Note that positive values are subtract from the current time.
+    /// Note that positive values are subtracted from the current time.
     DnskeyInceptionOffset {
         /// The offset.
         #[arg(value_parser = parse_duration)]
@@ -4235,7 +4235,7 @@ fn parse_unixtime(value: &str) -> Result<UnixTime, Error> {
 
 /// Parse an optional UnixTime from a string but also allow 'off' to signal
 /// no UnixTime.
-fn parse_opt_unixtime(value: &str) -> Result<Option<UnixTime>, Error> {
+pub fn parse_opt_unixtime(value: &str) -> Result<Option<UnixTime>, Error> {
     if value == "off" {
         return Ok(None);
     }

src/commands/mod.rs

@@ -5,6 +5,7 @@ pub mod keygen;
 pub mod keyset;
 pub mod notify;
 pub mod nsec3hash;
+pub mod signer;
 pub mod signzone;
 pub mod update;
 
@@ -63,6 +64,10 @@ pub enum Command {
     #[command(name = "nsec3-hash")]
     Nsec3Hash(self::nsec3hash::Nsec3Hash),
 
+    /// Sign the zone using a key manager (keyset)
+    #[command(name = "signer")]
+    Signer(self::signer::Signer),
+
     /// Sign the zone with the given key(s)
     #[command(name = "signzone")]
     SignZone(self::signzone::SignZone),
@@ -102,6 +107,7 @@ impl Command {
             Self::Keyset(keyset) => keyset.execute(env),
             Self::Nsec3Hash(nsec3hash) => nsec3hash.execute(env),
             Self::Notify(notify) => notify.execute(env),
+            Self::Signer(signer) => signer.execute(env),
             Self::SignZone(signzone) => signzone.execute(env),
             Self::Update(update) => update.execute(env),
             // Self::Help(help) => help.execute(env),