1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
#! /usr/bin/env ruby
# --
# Copyright 2007 Nominet UK
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# ++
# = NAME
#
# digdlv - Ruby script to perform DNS queries, validated against the ISC DLV
# registry.
#
# = SYNOPSIS
#
# digdlv name [ type [ class ] ]
#
# = DESCRIPTION
#
# Performs a DNS query on the given name. The record type
# and class can also be specified; if left blank they default
# to A and IN.
# The program firstly loads the DLV zone signing key. Then, the
# requested DNS query is performed recursively. The response is then validated
# - the DLV registry is searched for the keys of the closest ancestor
# of the query name, and the chain of trust is followed to prove
# that the DNSSEC records are correct, or that we do not expect the
# response to be signed.
#
# = AUTHOR
#
# Michael Fuhr <mike@fuhr.org>
# Alex D <alexd@nominet.org.uk>
require 'dnsruby'
def fatal_error(message)
puts message
exit -1
end
unless (1..3).include?(ARGV.length)
fatal_error("Usage: #{$0} name [ type [ class ] ]")
end
resolver = Dnsruby::Recursor.new
zone_transfer = Dnsruby::ZoneTransfer.new
dlv_key = Dnsruby::RR.create("dlv.isc.org. IN DNSKEY 257 3 5 BEAAAAPHMu/5onzrEE7z1egmhg/WPO0+juoZrW3euWEn4MxDCE1+lLy2 brhQv5rN32RKtMzX6Mj70jdzeND4XknW58dnJNPCxn8+jAGl2FZLK8t+ 1uq4W+nnA3qO2+DL+k6BD4mewMLbIYFwe0PG73Te9fZ2kJb56dhgMde5 ymX4BI/oQ+cAK50/xvJv00Frf8kw6ucMTwFlgPe+jnGxPPEmHAte/URk Y62ZfkLoBAADLHQ9IrS2tryAe7mbBZVcOwIeU/Rw/mRx/vwwMCTgNboM QKtUdvNXDrYJDSHZws3xiRXF1Rf+al9UmZfSav/4NWLKjHzpT59k/VSt TDN0YUuWrBNh")
Dnsruby::Dnssec.add_dlv_key(dlv_key)
name, type, klass = ARGV
type ||= 'A'
klass ||= 'IN'
if type.upcase == 'AXFR'
rrs = zone_transfer.transfer(name) # , klass)
if rrs
rrs.each { |rr| puts rr }
else
fatal_error("Zone transfer failed: #{resolver.errorstring}.")
end
else
begin
answer = resolver.query(name, type, klass)
puts answer
rescue Exception => e
fatal_error("query failed: #{e}")
end
end
|
