a
{)j @ sf d dl Z d dlZd dlZd dlmZmZ d dlmZmZ dZ G dd dZ
dd Z d d
Z d d Z
dS )
N)PopenPIPE)prefixversionzdnssec-checkdsc @ sN e Zd ZdddddZdZdZdZdZdZdZ d Z
d
d Z d d
Z dd Z
dS )SECRRzSHA-1zSHA-256ZGOSTzSHA-384) INNr c C s |st t|tur$|d }n| }t|dk r_ zcheck..)key-a-fZdnskey-)stdinr/ r z$No DNSKEY records found in zone apexFTz/KSK for %s %s/%03d/%05d (%s) missing from child.z0%s for KSK %s/%03d/%05d (%s) missing from parentz,%s for KSK %s/%03d/%05d (%s) found in parent) dssetfileopenreaddigr r Z communicate
splitlinesr r r appendr sorted dsfromkeyalgo
masterfiler printr r stripr r r. r ) zoneargsZrrlistfpcmd_lineZklistrA Zintodsmatchr0 r$ r$ r% checkS sp
rL c C s t jtd d} d}tjdkr"dnd}| jdtdd | jd d
d d g td
d | jdddtjt |dtdd | jdddtjt |dtdd | jdddtd d | jd d d td!d | jd"d#d$t
d% | }|j
d&|_ |S )'Nz: checks DS coverage) descriptionbinntZsbinrE z
zone to check)r helpr4 z--algorA r> zDS digest algorithm)destactiondefaultr rP z-dz--digr< z
path to 'dig')rQ rS r rP z-Dz --dsfromkeyr@ zdnssec-dsfromkeyzpath to 'dnssec-dsfromkey'r5 z--filerB zzone master file)rQ r rP z-sz--dssetr9 zprepared DSset filez-vz --versionr )rR r r8 )argparseArgumentParserprogosname add_argumentr pathr r r
parse_argsrE rD )parserZbindirZsbindirrF r$ r$ r% r[ s:
r[ c C s& t } t| j| }t|r dnd d S )Nr r )r[ rL rE exit)rF rK r$ r$ r% main s r^ )rT rW sys
subprocessr r Z isc.utilsr r rV r rL r[ r^ r$ r$ r$ r% s 9@