sync/NeoNetwork
1
0
Fork 0
mirror of https://github.com/NeoCloud/NeoNetwork synced 2024-11-25 18:40:40 +08:00
Code Issues Releases Wiki Activity

write named trusted anchor file

Browse source
This commit is contained in:
JerryXiao 2022-12-05 16:34:56 +08:00
parent b9afe3d437
commit 902821b02f
Signed by: Jerry
GPG key ID: 22618F758B5BE2E5
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
scripts/dns-generator.py
View file

@ -13,6 +13,7 @@ ZONE_FILE_MAP = {
'7.2.1.0.0.1.d.f.ip6.arpa.': Path("dns", "db.fd10.127") '7.2.1.0.0.1.d.f.ip6.arpa.': Path("dns", "db.fd10.127")
} }
RFC2317_FILE = Path("dns", "rfc2317.toml") RFC2317_FILE = Path("dns", "rfc2317.toml")
NAMED_TURST_ANCHORS_FILE = Path("dns", "named_trust_anchors.conf")
def iter_rfc2317_entry(): def iter_rfc2317_entry():
@ -23,6 +24,17 @@ def iter_rfc2317_entry():
ttl = attributes.get("TTL", -1) ttl = attributes.get("TTL", -1)
yield (route, ns, ds, ttl) yield (route, ns, ds, ttl)
def write_named_trust_anchors():
header = 'trust-anchors {\n'
footer = '\n}\n'
contents = []
dnskeys_exported = export_dnssec_dnskey(include_zsk=False)
maxzonelen = max(len(entry['zone']) for entry in dnskeys_exported)
for entry in dnskeys_exported:
zone, records = entry['zone'], [r['dnskey'] for r in entry['records']]
for record in records:
contents.append(f" {zone:>{maxzonelen}s} static-key \"{record}\";")
NAMED_TURST_ANCHORS_FILE.write_text(header + '\n'.join(contents) + footer)
def main(): def main():
DNSKEYS = {entry['zone']: entry['records'] for entry in export_dnssec_dnskey(include_zsk=True)} DNSKEYS = {entry['zone']: entry['records'] for entry in export_dnssec_dnskey(include_zsk=True)}
@ -43,3 +55,4 @@ def main():
if __name__ == "__main__": if __name__ == "__main__":
main() main()
write_named_trust_anchors()