Add CAA record support in DNS plugin

Descriptive title for this enhancement

some certificate autorities like digicert need a specific record to be inserted into dns to allow certificate distribution

Actual behavior

We don't manage this record

Expected behavior

be able to add CAA record with fusiondirectory when needed

Documentation for this new behavior

• Digicert docs https://docs.digicert.com/manage-certificates/dns-caa-resource-record-check/
• Tool to help create record, maybe good for test https://sslmate.com/caa/

Benefits

allow all domain users of digicert to use this mandatory functionality

Possible Drawbacks

• Need to check the dns.schema if there is a new version or add it to our dns-fd.schema
• Check if argonaut need an update to generate the zone correctly

Applicable Issues

plugin-dns

changed due date to May 12, 2020

changed milestone to %FusionDirectory 1.3.1

added PJ1903-0264 label

changed the description

added 15m of time spent at 2020-05-08

Wikipedia page: https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization

RFC: https://tools.ietf.org/html/rfc8659

It does appear in powerdns schema but it seems they just added attributes without asking upstream: https://doc.powerdns.com/authoritative/backends/ldap.html

Who is upstream exactly? It seems the base OID belongs to «UNINETT (the academic network of Norway)» (http://oid-info.com/get/1.3.6.1.4.1.2428)

It seems our schema comes from http://bind9-ldap.bayour.com/ Which was not updated recently (github repo last commit is 2015).

The perl library we use (in argonaut-ldap2zone) do not support CAA records and has not been updated since 2010: https://metacpan.org/pod/DNS::ZoneParse

https://metacpan.org/pod/Net::DNS::ZoneParse peut être testé, il dépend de Net::DNS::RR qui semble maintenu mais j’ai pas trouvé la liste des types supportés.

It does appear in powerdns schema but it seems they just added attributes without asking upstream: https://doc.powerdns.com/authoritative/backends/ldap.html

Who is upstream exactly? It seems the base OID belongs to «UNINETT (the academic network of Norway)» (http://oid-info.com/get/1.3.6.1.4.1.2428)

its the equivalent of RENATER in France, education and research network, the guy who made the schema was working there

It seems our schema comes from http://bind9-ldap.bayour.com/ Which was not updated recently (github repo last commit is 2015).

yes we should use the one updated by powerdns guys https://github.com/PowerDNS/pdns/blob/master/modules/ldapbackend/dnsdomain2.schema

added 15m of time spent at 2020-05-13

mentioned in issue argonaut/argonaut#5760

changed title from add the CCA record on ou dns plugins to add the CAA record on ou dns plugins

changed the description

added 1h of time spent at 2020-05-13

added plugin-dns label

added inalco label

changed title from add the CAA record on ou dns plugins to Add CAA record support in DNS plugin

mentioned in commit 34133dff