a
G@�h � @ sf d dl Z d dlZd dlZd dlmZmZ d dlmZmZ dZ G dd� d�Z
dd� Z d d
� Z d d � Z
dS )
� N)�Popen�PIPE)�prefix�versionzdnssec-checkdsc @ sN e Zd Zddddd�ZdZdZdZdZdZdZ d Z
d
d � Z d d
� Z dd� Z
dS )�SECRRzSHA-1zSHA-256ZGOSTzSHA-384)� � � � � �INNr c C s |st �t|�tur$|�d��� }n|�� }t|�dk r<t �d| _|d �� | _|dd � }|d � � dv r�|d � � | _
|dd � }n(t |d �| _ |d � � | _
|dd � }|d � � | jkr�t d|d � � | jf ��t
t |dd � �\| _| _| _d
�|d d � �� � | _d S ) N�ascii� ZDSr r )r ZCHZHSr z%s does not match %sr
r )� Exception�type�str�decode�split�len�rrtype�lower�rrname�upper�rrclass�int�ttl�map�keyid�keyalg�hashalg�join�digest)�selfZrrtext�fields� r$ �//usr/lib/python3.9/site-packages/isc/checkds.py�__init__$ s, � zSECRR.__init__c C s$ d| j | j| j| j| j| j| jf S )Nz%s %s %s %d %d %d %s)r r r r r r r! )r" r$ r$ r% �__repr__C s
��zSECRR.__repr__c C s | � � |� � kS �N)r' )r" �otherr$ r$ r% �__eq__H s z SECRR.__eq__)�__name__�
__module__� __qualname__�hashalgsr r r r r r! r r& r' r* r$ r$ r$ r% r s r c C sD g }|j rt|j ��� }n(|jddddd| g}t|td��� \}}|�� D ](}t|�t urd|�
d�}|� t |�� qJt
|dd � d
�}g }|jg}|jD ]}|d |g7 }q�|jr�|d |j| g7 }t|td��� \}}nJt|jdddd
d| gtd��� \} }|d d| g7 }t|ttd��| �\}}|�� D ],}t|�t u�rB|�
d�}|� t |�� �q&t|�dk �rntd� dS d}
|D ]@} | |v�rvtd| j| j�d�| j| jt j| j f � d}
�qv|D ]@} | |v�r�td| j| j�d�| j| jt j| j f � d}
�q�|D ]<} | |v �rtd| j| j�d�| j| jt j| j f � �q|
S )Nz+noallz+answerz-tZdsz-q)�stdoutr
c S s | j | j| jfS r( )r r r )�rrr$ r$ r% �<lambda>_ � zcheck.<locals>.<lambda>)�key�-a�-fZdnskey�-)�stdinr/ r z$No DNSKEY records found in zone apexFTz/KSK for %s %s/%03d/%05d (%s) missing from child�.z0%s for KSK %s/%03d/%05d (%s) missing from parentz,%s for KSK %s/%03d/%05d (%s) found in parent)� dssetfile�open�read�digr r Z communicate�
splitlinesr r r �appendr �sorted� dsfromkey�algo�
masterfiler �printr r �stripr r r. r ) �zone�argsZrrlist�fp�cmd�_�lineZklistrA Zintods�matchr0 r$ r$ r% �checkS sp
��
��
��
��
rL c C s� t jtd d�} d}tjdkr"dnd}| jdtdd� | jd d
d d g td
d� | jdddtj�t |�d�tdd� | jdddtj�t |�d�tdd� | jdddtd d � | jd d d td!d � | jd"d#d$t
d%� | � � }|j �
d&�|_ |S )'Nz: checks DS coverage)� description�bin�ntZsbinrE z
zone to check)r �helpr4 z--algorA r> zDS digest algorithm)�dest�action�defaultr rP z-dz--digr< z
path to 'dig')rQ rS r rP z-Dz --dsfromkeyr@ zdnssec-dsfromkeyzpath to 'dnssec-dsfromkey'r5 z--filerB zzone master file)rQ r rP z-sz--dssetr9 zprepared DSset filez-vz --versionr )rR r r8 )�argparse�ArgumentParser�prog�os�name� add_argumentr �pathr r r �
parse_argsrE rD )�parserZbindirZsbindirrF r$ r$ r% r[ � s: �
�
�� � �
�r[ c C s& t � } t| j| �}t|r dnd� d S )Nr r )r[ rL rE �exit)rF rK r$ r$ r% �main� s r^ )rT rW �sys�
subprocessr r Z isc.utilsr r rV r rL r[ r^ r$ r$ r$ r% �<module> s 9@