Soften DNSSEC error message for external DNS users

This commit is contained in:
Scott Sievert 2021-02-08 08:54:04 -06:00 committed by GitHub
parent af62e7a99b
commit be9c892e43
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions

View File

@ -592,9 +592,9 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False):
return return
output.print_error("""This domain's DNSSEC DS record is incorrect. The chain of trust is broken between the public DNS system output.print_error("""This domain's DNSSEC DS record is incorrect. The chain of trust is broken between the public DNS system
and this machine's DNS server. It may take several hours for public DNS to update after a change. If you did not recently and this machine's DNS server. It may take several hours for public DNS to update after a change. If you did not recently
make a change, you must resolve this immediately by following the instructions provided by your domain name registrar and make a change (and are not using external/custom DNS), you must resolve this immediately by following the instructions
provide to them this information:""") provided by your domain name registrar and provide to them this information:""")
output.print_line("") output.print_line("")
output.print_line("Key Tag: " + ds_keytag + ("" if not ds_looks_valid or ds[0] == ds_keytag else " (Got '%s')" % ds[0])) output.print_line("Key Tag: " + ds_keytag + ("" if not ds_looks_valid or ds[0] == ds_keytag else " (Got '%s')" % ds[0]))
output.print_line("Key Flags: KSK") output.print_line("Key Flags: KSK")
output.print_line( output.print_line(
@ -612,6 +612,7 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False):
output.print_line("Bulk/Record Format:") output.print_line("Bulk/Record Format:")
output.print_line("" + ds_correct[0]) output.print_line("" + ds_correct[0])
output.print_line("") output.print_line("")
output.print_line("This DS record is not relevant when using external/custom DNS.")
def check_mail_domain(domain, env, output): def check_mail_domain(domain, env, output):
# Check the MX record. # Check the MX record.