3
7&j& @ sh d dl Z d dlZd dlZd dlmZmZ d dlmZmZ dZ G dd dZ
d
ddZ d d
Z d d Z
dS ) N)PopenPIPE)prefixversionzdnssec-checkdsc @ sP e Zd ZdddddZdZdZdZdZdZdZ d Z
dd
d Z d d
Z dd Z
dS )SECRRzSHA-1zSHA-256ZGOSTzSHA-384) INNr c C s |st t|tk r$|jdj }n|j }t|dk rW t | dk rt
d dS d} xv| D ]n} | |krt
d| j| jjd| j| jt j| j f d} n,t
d| j| jjd| j| jt j| j f qW | s"t
d|rdnd | S )Nz+noallz+answerz-tr, Zdsz-qr )stdoutr
c S s | j | j| jfS )N)r' r( r) )rrr- r- r. m s zcheck..)keyz-fz-lZdnskey-)stdinr7 r z$No DNSKEY records found in zone apexFz,%s for KSK %s/%03d/%05d (%s) found in parentTz0%s for KSK %s/%03d/%05d (%s) missing from parentz'No %s records were found for any DNSKEYr r )digr r Z communicate
splitlinesr r r appendr sorted dsfromkeyr printr r! r r( r' r6 r) )
zoneargs
masterfile lookasideZrrlistcmdfp_lineZklistZintodsfoundr8 r- r- r. checkc sV
rL c C s t jtd d} d}tjdkr"dnd}| jdtdd | jd d
d td d
| jdddtdd
| jdddtjjt |dtdd | jdddtjjt |dtdd | jd d d t
d | j }|j j
d |_ |jr|jj
d |_|S )!Nz: checks DS coverage) descriptionbinntZsbinrC z
zone to check)r helpz-fz--filerE zzone master file)destr rP z-lz --lookasiderF zDLV lookaside zonez-dz--digr= z
path to 'dig')rQ defaultr rP z-Dz --dsfromkeyrA zdnssec-dsfromkeyzpath to 'dnssec-dsfromkey'z-vz --versionr )actionr r )argparseArgumentParserprogosname add_argumentr pathr r r
parse_argsrC r rF )parserZbindirZsbindirrD r- r- r. r[ s,
r[ c C s. t } t| j| | j| j}t|r$dnd d S )Nr r )r[ rL rC rE rF exit)rD rK r- r- r. main s r^ )NN)rT rW sys
subprocessr r Z isc.utilsr r rV r rL r[ r^ r- r- r- r. s I
;