From e3c8c498af9d6701aa41c0382a82986cf47ffaa4 Mon Sep 17 00:00:00 2001 From: TheRedCyclops <76230780+TheRedCyclops@users.noreply.github.com> Date: Sun, 11 May 2025 10:38:08 +0000 Subject: [PATCH] Add external DNS disclaimer for DS records This is a rebased and reworded version of this PR: #1920 --- management/status_checks.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/management/status_checks.py b/management/status_checks.py index 68755cb7..a6db4a16 100755 --- a/management/status_checks.py +++ b/management/status_checks.py @@ -666,7 +666,7 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False): return output.print_error("""This domain's DNSSEC DS record is incorrect. The chain of trust is broken between the public DNS system and this machine's DNS server. It may take several hours for public DNS to update after a change. If you did not recently - make a change, you must resolve this immediately (see below).""") + make a change or are using external DNS, you must resolve this immediately (see below).""") output.print_line("""Follow the instructions provided by your domain name registrar to set a DS record. Registrars support different sorts of DS records. Use the first option that works:""") @@ -695,6 +695,7 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False): output.print_line(ds_suggestion['record'], monospace=True) if len(ds) > 0: output.print_line("") + output.print_line("If you are using external DNS you may ignore this") output.print_line("The DS record is currently set to:") for rr in sorted(ds): output.print_line("Key Tag: {}, Algorithm: {}, Digest Type: {}, Digest: {}".format(*rr))