관리-도구
편집 파일: checkds.cpython-39.pyc
a &�"h � @ sf d dl Z d dlZd dlZd dlmZmZ d dlmZmZ dZ G dd� d�Z dd� Z d d � Z d d � Z dS ) � N)�Popen�PIPE)�prefix�versionzdnssec-checkdsc @ sN e Zd Zddddd�ZdZdZdZdZdZdZ d Z d d � Z d d � Z dd� Z dS )�SECRRzSHA-1zSHA-256ZGOSTzSHA-384)� � � � � �INNr c C s |st �t|�tur$|�d��� }n|�� }t|�dk r<t �d| _|d �� | _|dd � }|d � � dv r�|d � � | _ |dd � }n(t |d �| _ |d � � | _ |dd � }|d � � | jkr�t d|d � � | jf ��t t |dd � �\| _| _| _d �|d d � �� � | _d S ) N�ascii� ZDSr r )r ZCHZHSr z%s does not match %sr r )� Exception�type�str�decode�split�len�rrtype�lower�rrname�upper�rrclass�int�ttl�map�keyid�keyalg�hashalg�join�digest)�selfZrrtext�fields� r$ �//usr/lib/python3.9/site-packages/isc/checkds.py�__init__$ s, � zSECRR.__init__c C s$ d| j | j| j| j| j| j| jf S )Nz%s %s %s %d %d %d %s)r r r r r r r! )r" r$ r$ r% �__repr__C s ��zSECRR.__repr__c C s | � � |� � kS �N)r' )r" �otherr$ r$ r% �__eq__H s z SECRR.__eq__)�__name__� __module__� __qualname__�hashalgsr r r r r r! r r& r' r* r$ r$ r$ r% r s r c C sD g }|j rt|j ��� }n(|jddddd| g}t|td��� \}}|�� D ](}t|�t urd|� d�}|� t |�� qJt |dd � d �}g }|jg}|jD ]}|d |g7 }q�|jr�|d |j| g7 }t|td��� \}}nJt|jdddd d| gtd��� \} }|d d| g7 }t|ttd��| �\}}|�� D ],}t|�t u�rB|� d�}|� t |�� �q&t|�dk �rntd� dS d} |D ]@} | |v�rvtd| j| j�d�| j| jt j| j f � d} �qv|D ]@} | |v�r�td| j| j�d�| j| jt j| j f � d} �q�|D ]<} | |v �rtd| j| j�d�| j| jt j| j f � �q| S )Nz+noallz+answerz-tZdsz-q)�stdoutr c S s | j | j| jfS r( )r r r )�rrr$ r$ r% �<lambda>_ � zcheck.<locals>.<lambda>)�key�-a�-fZdnskey�-)�stdinr/ r z$No DNSKEY records found in zone apexFTz/KSK for %s %s/%03d/%05d (%s) missing from child�.z0%s for KSK %s/%03d/%05d (%s) missing from parentz,%s for KSK %s/%03d/%05d (%s) found in parent)� dssetfile�open�read�digr r Z communicate� splitlinesr r r �appendr �sorted� dsfromkey�algo� masterfiler �printr r �stripr r r. r ) �zone�argsZrrlist�fp�cmd�_�lineZklistrA Zintods�matchr0 r$ r$ r% �checkS sp �� �� �� �� rL c C s� t jtd d�} d}tjdkr"dnd}| jdtdd� | jd d d d g td d� | jdddtj�t |�d�tdd� | jdddtj�t |�d�tdd� | jdddtd d � | jd d d td!d � | jd"d#d$t d%� | � � }|j � d&�|_ |S )'Nz: checks DS coverage)� description�bin�ntZsbinrE z zone to check)r �helpr4 z--algorA r> zDS digest algorithm)�dest�action�defaultr rP z-dz--digr< z path to 'dig')rQ rS r rP z-Dz --dsfromkeyr@ zdnssec-dsfromkeyzpath to 'dnssec-dsfromkey'r5 z--filerB zzone master file)rQ r rP z-sz--dssetr9 zprepared DSset filez-vz --versionr )rR r r8 )�argparse�ArgumentParser�prog�os�name� add_argumentr �pathr r r � parse_argsrE rD )�parserZbindirZsbindirrF r$ r$ r% r[ � s: � � �� � � �r[ c C s& t � } t| j| �}t|r dnd� d S )Nr r )r[ rL rE �exit)rF rK r$ r$ r% �main� s r^ )rT rW �sys� subprocessr r Z isc.utilsr r rV r rL r[ r^ r$ r$ r$ r% �<module> s 9@