-
Notifications
You must be signed in to change notification settings - Fork 0
Scripts useful to verifying dnssec
License
ttelford/dnssec-scripts
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
This is a simple script to simplify a basic amount of verification for the DNSSEC root keys. It requires: * wget * gpg * dig * dnssec-dsfromkey This script does the following: * Downloads (using https) the following: * root-anchors.xml file from IANA. * The (detached) GPG signature for root-anchors.xml * Imports the icann PGP keychain (DNSSEC Manager <[email protected]>) * Verifies the GPG signature of root-anchors.xml * Obtains the GPG key via DNS using dig * Compares the key obtained via DNS with the key obtained with https. * Prints the results At this time, there is no checking to see if the various tools actually exist; therefore, it can easily fail to run properly. This script has been tested on Linux
About
Scripts useful to verifying dnssec
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published