[Dnsmasq-discuss] Feature request: allow to enable/disable --dnssec-check-unsigned per upstream server

Andre Heider a.heider at gmail.com
Fri Jan 15 10:48:37 GMT 2016


On Tue, Jan 12, 2016 at 11:16 AM, Andre Heider <a.heider at gmail.com> wrote:
> On Mon, Jan 11, 2016 at 10:27 PM, Simon Kelley <simon at thekelleys.org.uk> wrote:
>> dig @5.9.49.12 dnskey . | dnssec-dsfromkey -2 -f - .
> I knew it was just a hash, but I was too lazy to look up how to get it

random note: `drill -s` does that too:
 "-s When encountering a DNSKEY print the equivalent DS also."

drill -t -s free dnskey
...
;; ANSWER SECTION:
free.   86400   IN      DNSKEY  256 3 8
AwEAAbhd9S94l+8MmCBGgh5UvJ0MBmHFmQMln2kZ3+8ygMBJ/LCsGQuwJNeHKs1yTCeiaIdz/XpDc5dqXP/bWzjE2PpX6Jeds7Ub3j8xJ+VfKINwdHPYoyjsG2lCnVhtUKtRDfPOpFhEvOq8wzwJBXHFxK7Z5jPcSmAaUQlBIPTDI+As6C2dccB4I0mN+4XB7V1VfD3QwdgvCXdAW6yh3V9XZPDEkZeI3yu2CTzu2wT00wKZB7iPUhmqB/UCu0iOuEccYQpZ5Lp1FIf6wYQ4cfHYBhEv5S5cILXMnMtJ9L4PTHRcbQ3px32BtniEX1g4lQj/SNgSQNyG4F7NtFKfxqCXaAU=
;{id = 43806 (zsk), size = 2048b}

free.   86400   IN      DNSKEY  257 3 8
AwEAAcwvNG8OQAlDpQVo7yuspxG2QeKjtPJQynADPElT6t8HwnqgY8rHCzJ8asd3+OSn5WSsgRlIqpwXGZoOJD3ULQ5IabyHpreDqDU3hEAMwK/nUVb25wV1klKC6OdOU2B/XGtqJVFcPNnXvNVtL7xu7ss6D43mfXZYwgrqKMb5Rb/vOLo6m43IbIUIpni3QePhyX4vi4tgx7rUXbpIdrRQsBaqnylZeO5JpLkxW+VkL1XtV4/sc8DJh/QlXpsW8+G3WYZ3tBqI3ojLlK11/6ORnu0vhWqqUPorOsxIqGq6xso0fiwfOFUbWDICcUX2R42hHeIqlSw4F831cBlk6IE1Uot8e8fCovYSDNO+e06wBqEmsygv0iYL/qBs1ABbkf+QshggTN6M+XKUCweH1965PWISIEzfEd5lTIR0fOKcIq3t1aozOOHEakPiCYa3UWN3lkebmyHAjEUJa7/aAlEXR/uCzdyiShm5FYjmid5hEX1MtP/VOR9BcY5aYkAED6Xdi/YZWtJw+W27ufWH0jMWMq89ZBwWTWkB24E9O40ecImSG6x8hY7BYNx4Vyroh2S3LNaa/M6zpE543t3gr7jFGLbxGohuWhpIQW9LTOFlWUTxRc1CqQRwJi/ZGyFH5OU0KRpxQwKcCnzvPTosxy6EkdoyUlgPcwIO7XUYTa7yidCH
;{id = 43336 (ksk), size = 4096b}
...
; equivalent DS records for key 43806:
; sha1: free.   86400   IN      DS      43806 8 1
9ba8d3af79d783e7168d04b066b8348bcbbee7e9
; sha256: free. 86400   IN      DS      43806 8 2
72a7e6a65775d2c96b460af2429605bc402ecf0b4eaff99bdcb6ff570b4b0586
;
; equivalent DS records for key 43336:
; sha1: free.   86400   IN      DS      43336 8 1
8f568552cd5744047a241763d33ae0379de1ed72
; sha256: free. 86400   IN      DS      43336 8 2
9518ec9290f40e43e8cce6044ff9216bc5099b12620774d394666856e9106377

Regards,
Andre



More information about the Dnsmasq-discuss mailing list