sys.stdout.write("Enabling nsec3 for zone %s: "%zone)
p=subprocess.Popen(cmd,stdout=subprocess.PIPE)
out=p.communicate()[0]
sys.stdout.write(out)
p.wait()
classZone(object):
ZSK=None
KSK=None
...
...
@@ -397,12 +406,16 @@ if __name__ == '__main__':
parser.add_argument('-ds',action='store_true',help='Show DS for each supplied zone or for all zones if no zone supplied')
parser.add_argument('-key',action='store_true',help='Show DNSKEY for each zone supplied zone or for all zones if no zone supplied')
parser.add_argument('--ds-seen',metavar='KEYID',type=int,help='To call with the ID of a new KSK published in the parent zone. Programs old KSK removal')
parser.add_argument('--nsec3',action='store_true',help='Enable NSEC3 for the zones, using a random salt')
args=parser.parse_args()
zones=args.zone
ifargs.make:
forzoneinzones:
Zone.create(zone)
zones=get_zones(zonesifzoneselseNone)
ifargs.nsec3:
forzoneinzones:
nsec3(zone.name,os.urandom(24).encode("hex"))
ifargs.ds_seen:
iflen(zones)!=1:
sys.stderr.write("Please specify exactly ONE zone name\n")