re2o/dns
5
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

Handle multiple KSK at the same time

Browse source
This commit is contained in:
Benjamin Graillot 2018-12-25 21:14:16 +01:00
parent 462a0bebc4
commit 9f9e950d5c
2 changed files with 19 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

31
dnssec_generate.py
View file

@ -16,19 +16,22 @@ except:
if __name__ == '__main__': if __name__ == '__main__':
ds_records = {} ds_records = {}
for zone in zones: for zone in zones:
cds = subprocess.check_output(['/usr/sbin/knotc', 'zone-read', zone, '@', 'CDS'])[:-1].decode('utf-8') cdss = subprocess.check_output(['/usr/sbin/knotc', 'zone-read', zone, '@', 'CDS'])[:-1].decode('utf-8').split('\n')
ds = {} for cds in cdss:
try: ds = {}
cds = cds.split(' ') try:
ds['subzone'] = cds[1] cds = cds.split(' ')
ds['id'] = cds[4] ds['subzone'] = cds[1]
ds['algo'] = cds[5] ds['id'] = cds[4]
ds['type'] = cds[6] ds['algo'] = cds[5]
ds['fp'] = cds[7] ds['type'] = cds[6]
except: ds['fp'] = cds[7]
print('Unable to find ksk for', zone) except:
continue print('Unable to find ksk for', zone)
ds['ttl'] = 172800 continue
ds_records[zone] = ds ds['ttl'] = 172800
if not zone in ds_records:
ds_records[zone] = []
ds_records[zone].append(ds)
with open('dnssec.json', 'w') as dnssec: with open('dnssec.json', 'w') as dnssec:
json.dump(ds_records, dnssec) json.dump(ds_records, dnssec)

3
main.py
View file

@ -218,7 +218,8 @@ def write_dns_file(zone):
zones_ds = json.load(ds) zones_ds = json.load(ds)
ds_records = "" ds_records = ""
for zone in zones_ds: for zone in zones_ds:
ds_records += template_ds.format(**zones_ds[zone]) + "\n" for ds in zones_ds[zone]:
ds_records += template_ds.format(**ds) + "\n"
else: else:
ds_records = "\n" ds_records = "\n"