[bind] Seul le selecteur 0 est supporté pour l'enregistrement TLSA

On rend aussi accessible le condensa du certificat
This commit is contained in:
Valentin Samir 2015-10-25 19:15:36 +01:00
parent d58b92b957
commit f4e5ce3104

View file

@ -73,6 +73,9 @@ class TLSA(ResourceRecord):
if not r_format in ['pem', 'der']:
raise ValueError("format should be pem or der")
if selector != 0:
raise NotImplementedError("selector different form 0 not implemented")
if cert is None and proto == 'tcp' and name[-1] == '.':
try:
cert = ssl.get_server_certificate((name[:-1], port), ca_certs='/etc/ssl/certs/ca-certificates.crt')
@ -90,6 +93,7 @@ class TLSA(ResourceRecord):
raise ValueError("Impossible de convertir le certificat au format DER %s %s %s\n%s" % (name, port, proto, cert))
certhex = TLSA.hashCert(reftype, str(dercert))
self.certhex = certhex
if compat:
super(TLSA, self).__init__(
'TYPE52',