Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is there sub-domain support? #4

Open
csuka opened this issue Sep 26, 2018 · 0 comments
Open

Is there sub-domain support? #4

csuka opened this issue Sep 26, 2018 · 0 comments

Comments

@csuka
Copy link

csuka commented Sep 26, 2018

Does dancheck has sub-domain support? I think it expects a DS record at the subdomain...

To replicate:

We're hosting a DNSSEC server, e.g. example.com.
Showing danecheck works:

➜  danecheck git:(master) ✗ danecheck -n 1.2.3.4                              
. IN DNSKEY 256 3 8 AwEAA...QBkYGpF78= ; AD=1 NoError
. IN DNSKEY 256 3 8 AwEAA.......J5ZJWLRs= ; AD=1 NoError
. IN DNSKEY 257 3 8 AwEA.......+Uk1ihz0= ; AD=1 NoError
. IN DNSKEY 257 3 8 AwEAAaz.....V74bU= ; AD=1 NoError
. IN SOA a.root-servers.net. [email protected]. 2018092600 1800 900 604800 86400 ; AD=1 NoError

In this domain, we're hosting a sub-domain in the same zone, e.g. sub.example.com.
danecheck cannot verify this domain since it has no DS records and such.

➜  danecheck git:(master) ✗ danecheck -n 1.2.3.4 sub.example.com 
sub.example.com. IN DS ? ; AD=0 NODATA

example.com has a DNSkey and record for the whole zone. Including sub.example.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant