1
0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2025-04-21 03:02:09 +00:00
This commit is contained in:
baltoche 2017-05-09 08:58:41 +00:00 committed by GitHub
commit b0c9f02575

View File

@ -535,6 +535,13 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False):
# Query public DNS for the DS record at the registrar. # Query public DNS for the DS record at the registrar.
ds = query_dns(domain, "DS", nxdomain=None) ds = query_dns(domain, "DS", nxdomain=None)
# Some registars return multiple DS records using different digest function
# we are only interested in digest function 2
multi_ds = ds.split("; ")
for single_ds in multi_ds:
if len(single_ds.split(" ")) == 4 and single_ds.split(" ")[2] == "2":
ds = single_ds
ds_looks_valid = ds and len(ds.split(" ")) == 4 ds_looks_valid = ds and len(ds.split(" ")) == 4
if ds_looks_valid: ds = ds.split(" ") if ds_looks_valid: ds = ds.split(" ")
if ds_looks_valid and ds[0] == ds_keytag and ds[1] == ds_alg and ds[3] == digests.get(ds[2]): if ds_looks_valid and ds[0] == ds_keytag and ds[1] == ds_alg and ds[3] == digests.get(ds[2]):