Skip to content

Commit a3f5e93

Browse files
committed
adds support for explicit ed25519 KEY RRs
1 parent 2a05172 commit a3f5e93

1 file changed

Lines changed: 20 additions & 9 deletions

File tree

dyn_key

Lines changed: 20 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -55,15 +55,26 @@ fi
5555
# loop over command line parameter (post getops()) for IPv[4,6] assignments
5656

5757
NSUPDATE_ITEM_RR=""
58-
for keyname in ${CMDLINE_EXTRA_PARAMS}; do
59-
if validateKEY "${keyname}";then
60-
NSUPDATE_RRTYPE="KEY"
61-
[[ -n ${DEBUG} ]] && echo "KEY '${keyname}' resolves, marked to ${NSUPDATE_ACTION}"
62-
NSUPDATE_ITEM_RR="${NSUPDATE_ITEM_RR}update ${NSUPDATE_ACTION} ${NEW_FQDN} ${NSUPDATE_TTL} ${NSUPDATE_RRTYPE} $(dig +short ${keyname} ${NSUPDATE_RRTYPE})\n"
63-
else
64-
echo "Warning: Skipping no KEY resolved with FQDN '${keyname}'"
65-
fi
66-
done
58+
# if CMDLINE_EXTRA_PARAMS looks like an explicit single ED25519 KEY RR record, then process, simply ie:
59+
# if [[ $TEST == "512 3 15 "* ]] ; then echo "yes"; fi
60+
# else CMDLINE_EXTRA_PARAMS is assumed to be one or more FQDN names of existing KEY RRs to look up
61+
62+
if [[ "${CMDLINE_EXTRA_PARAMS}" == "512 3 15 "* ]] ; then
63+
NSUPDATE_RRTYPE="KEY"
64+
NSUPDATE_ITEM_RR="${NSUPDATE_ITEM_RR}update ${NSUPDATE_ACTION} ${NEW_FQDN} ${NSUPDATE_TTL} ${NSUPDATE_RRTYPE} ${CMDLINE_EXTRA_PARAMS}\n"
65+
echo "Processing Explicit ED25519 KEY record";
66+
else
67+
for keyname in ${CMDLINE_EXTRA_PARAMS}; do
68+
if validateKEY "${keyname}";then
69+
NSUPDATE_RRTYPE="KEY"
70+
[[ -n ${DEBUG} ]] && echo "KEY '${keyname}' resolves, marked to ${NSUPDATE_ACTION}"
71+
NSUPDATE_ITEM_RR="${NSUPDATE_ITEM_RR}update ${NSUPDATE_ACTION} ${NEW_FQDN} ${NSUPDATE_TTL} ${NSUPDATE_RRTYPE} $(dig +short ${keyname} ${NSUPDATE_RRTYPE})\n"
72+
else
73+
echo "Warning: Skipping no KEY resolved with FQDN '${keyname}'"
74+
fi
75+
done
76+
fi
77+
6778

6879
if [[ -n ${DEBUG} ]]; then
6980
echo "---"

0 commit comments

Comments
 (0)