1
0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2025-05-30 17:30:53 +00:00

Add external DNS disclaimer for DS records

This is a rebased and reworded version of this PR: #1920
This commit is contained in:
TheRedCyclops 2025-05-11 10:38:08 +00:00 committed by GitHub
parent 3efd4257b5
commit e3c8c498af
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -666,7 +666,7 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False):
return
output.print_error("""This domain's DNSSEC DS record is incorrect. The chain of trust is broken between the public DNS system
and this machine's DNS server. It may take several hours for public DNS to update after a change. If you did not recently
make a change, you must resolve this immediately (see below).""")
make a change or are using external DNS, you must resolve this immediately (see below).""")
output.print_line("""Follow the instructions provided by your domain name registrar to set a DS record.
Registrars support different sorts of DS records. Use the first option that works:""")
@ -695,6 +695,7 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False):
output.print_line(ds_suggestion['record'], monospace=True)
if len(ds) > 0:
output.print_line("")
output.print_line("If you are using external DNS you may ignore this")
output.print_line("The DS record is currently set to:")
for rr in sorted(ds):
output.print_line("Key Tag: {}, Algorithm: {}, Digest Type: {}, Digest: {}".format(*rr))