LOLCATS

: /usr/lib/python3.9/site-packages/isc/ [ drwxr-xr-x ]

Information Server

System: Linux malabar.iixcp.rumahweb.net 5.14.0-687.24.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jul 9 18:14:06 EDT 2026 x86_64
Software: LiteSpeed
PHP Version: 5.6.40 PHP Os: Linux
Server IP: 202.10.43.4
Your IP: 216.73.217.36
User: ifte7726 [2274] | Group: [ifte7726] [2279]
Safe Mode: OFF
MYSQL: ON | PERL: OFF | PYTHON: OFF | WGET: OFF | CURL: ON | GCC: OFF | PKEXEC: OFF
Disable Function:

system,exec,escapeshellarg,escapeshellcmd,passthru,proc_close,proc_get_status,proc_nice,proc_open,proc_terminate,shell_exec,popen,pclose,dl,pfsockopen,leak,apache_child_terminate,posix_kill,posix_mkfifo,posix_setsid,posix_setuid,posix_setpgid,ini_alter,show_source,define_syslog_variables,symlink,syslog,openlog,openlog,closelog,ocinumcols,listen,chgrp,apache_note,apache_setenv,debugger_on,debugger_off,ftp_exec,dll,ftp,myshellexec,socket_bind,mail,posix_getwpuid

Command OFF Config Searcher Create RDP Find Modified Time Find File Get Tools GSocket Jumping Lock File Mass Deface Mass Delete Mass Chmod Mass Change Date Port Scan Reverse Shell Upload Zone-H

: checkds.py

############################################################################
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
#
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
#
# See the COPYRIGHT file distributed with this work for additional
# information regarding copyright ownership.
############################################################################

import argparse
import os
import sys
from subprocess import Popen, PIPE

from isc.utils import prefix,version

prog = 'dnssec-checkds'

############################################################################
# SECRR class:
# Class for DS resource record
############################################################################
class SECRR:
    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384'}
    rrname = ''
    rrclass = 'IN'
    keyid = None
    keyalg = None
    hashalg = None
    digest = ''
    ttl = 0

def __init__(self, rrtext):
        if not rrtext:
            raise Exception

# 'str' does not have decode method in python3
        if type(rrtext) is not str:
            fields = rrtext.decode('ascii').split()
        else:
            fields = rrtext.split()
        if len(fields) < 7:
            raise Exception

self.rrtype = "DS"
        self.rrname = fields[0].lower()

fields = fields[1:]
        if fields[0].upper() in ['IN', 'CH', 'HS']:
            self.rrclass = fields[0].upper()
            fields = fields[1:]
        else:
            self.ttl = int(fields[0])
            self.rrclass = fields[1].upper()
            fields = fields[2:]

if fields[0].upper() != self.rrtype:
            raise Exception('%s does not match %s' %
                            (fields[0].upper(), self.rrtype))

self.keyid, self.keyalg, self.hashalg = map(int, fields[1:4])
        self.digest = ''.join(fields[4:]).upper()

def __repr__(self):
        return '%s %s %s %d %d %d %s' % \
               (self.rrname, self.rrclass, self.rrtype,
                self.keyid, self.keyalg, self.hashalg, self.digest)

def __eq__(self, other):
        return self.__repr__() == other.__repr__()

############################################################################
# check:
# Fetch DS RRset for the given zone from the DNS; fetch DNSKEY
# RRset from the masterfile if specified, or from DNS if not.
# Generate a set of expected DS records from the DNSKEY RRset,
# and report on congruency.
############################################################################
def check(zone, args):
    rrlist = []
    if args.dssetfile:
        fp = open(args.dssetfile).read()
    else:
        cmd = [args.dig, "+noall", "+answer", "-t", "ds", "-q", zone]
        fp, _ = Popen(cmd, stdout=PIPE).communicate()

for line in fp.splitlines():
        if type(line) is not str:
            line = line.decode('ascii')
        rrlist.append(SECRR(line))
    rrlist = sorted(rrlist, key=lambda rr: (rr.keyid, rr.keyalg, rr.hashalg))

klist = []

cmd = [args.dsfromkey]
    for algo in args.algo:
        cmd += ['-a', algo]

if args.masterfile:
        cmd += ["-f", args.masterfile, zone]
        fp, _ = Popen(cmd, stdout=PIPE).communicate()
    else:
        intods, _ = Popen([args.dig, "+noall", "+answer", "-t", "dnskey",
                           "-q", zone], stdout=PIPE).communicate()
        cmd += ["-f", "-", zone]
        fp, _ = Popen(cmd, stdin=PIPE, stdout=PIPE).communicate(intods)

for line in fp.splitlines():
        if type(line) is not str:
            line = line.decode('ascii')
        klist.append(SECRR(line))

if len(klist) < 1:
        print("No DNSKEY records found in zone apex")
        return False

match = True
    for rr in rrlist:
        if rr not in klist:
            print("KSK for %s %s/%03d/%05d (%s) missing from child" %
                  (rr.rrtype, rr.rrname.strip('.'), rr.keyalg,
                   rr.keyid, SECRR.hashalgs[rr.hashalg]))
            match = False
    for rr in klist:
        if rr not in rrlist:
            print("%s for KSK %s/%03d/%05d (%s) missing from parent" %
                  (rr.rrtype, rr.rrname.strip('.'), rr.keyalg,
                   rr.keyid, SECRR.hashalgs[rr.hashalg]))
            match = False
    for rr in klist:
        if rr in rrlist:
            print("%s for KSK %s/%03d/%05d (%s) found in parent" %
                  (rr.rrtype, rr.rrname.strip('.'), rr.keyalg,
                   rr.keyid, SECRR.hashalgs[rr.hashalg]))

return match

############################################################################
# parse_args:
# Read command line arguments, set global 'args' structure
############################################################################
def parse_args():
    parser = argparse.ArgumentParser(description=prog + ': checks DS coverage')

bindir = 'bin'
    sbindir = 'bin' if os.name == 'nt' else 'sbin'

parser.add_argument('zone', type=str, help='zone to check')
    parser.add_argument('-a', '--algo', dest='algo', action='append',
                        default=[], type=str, help='DS digest algorithm')
    parser.add_argument('-d', '--dig', dest='dig',
                        default=os.path.join(prefix(bindir), 'dig'),
                        type=str, help='path to \'dig\'')
    parser.add_argument('-D', '--dsfromkey', dest='dsfromkey',
                        default=os.path.join(prefix(sbindir),
                                             'dnssec-dsfromkey'),
                        type=str, help='path to \'dnssec-dsfromkey\'')
    parser.add_argument('-f', '--file', dest='masterfile', type=str,
                        help='zone master file')
    parser.add_argument('-s', '--dsset', dest='dssetfile', type=str,
                        help='prepared DSset file')
    parser.add_argument('-v', '--version', action='version',
                        version=version)
    args = parser.parse_args()

args.zone = args.zone.strip('.')

return args

############################################################################
# Main
############################################################################
def main():
    args = parse_args()
    match = check(args.zone, args)
    exit(0 if match else 1)

NAME	TYPE	LAST MODIFIED	SIZE	OWNER / GROUP	PERMISSIONS	ACTION
..
checkds.py	f!le	2026-06-10 21:56	6.26 KB	root / root	-rw-r--r--
coverage.py	f!le	2026-06-10 21:56	9.75 KB	root / root	-rw-r--r--
dnskey.py	f!le	2026-06-10 21:56	16.03 KB	root / root	-rw-r--r--
eventlist.py	f!le	2026-06-10 21:56	5.71 KB	root / root	-rw-r--r--
__init__.py	f!le	2026-06-10 21:56	937 B	root / root	-rw-r--r--
keydict.py	f!le	2026-06-10 21:56	2.78 KB	root / root	-rw-r--r--
keyevent.py	f!le	2026-06-10 21:56	2.76 KB	root / root	-rw-r--r--
keymgr.py	f!le	2026-06-10 21:56	6.38 KB	root / root	-rw-r--r--
keyseries.py	f!le	2026-06-10 21:56	8.52 KB	root / root	-rw-r--r--
keyzone.py	f!le	2026-06-10 21:56	1.94 KB	root / root	-rw-r--r--
parsetab.py	f!le	2026-06-10 21:57	10 KB	root / root	-rw-r--r--
policy.py	f!le	2026-06-10 21:56	24.23 KB	root / root	-rw-r--r--
rndc.py	f!le	2026-06-10 21:56	6.54 KB	root / root	-rw-r--r--
utils.py	f!le	2026-06-10 21:56	2.13 KB	root / root	-rw-r--r--