mirror of
https://github.com/getnamingo/registry.git
synced 2025-05-14 00:27:03 +02:00
Added easier OpenDNSSEC support
This commit is contained in:
parent
f80f1bcb95
commit
23d50a0b0c
2 changed files with 112 additions and 3 deletions
|
@ -135,7 +135,7 @@ Coroutine::create(function () use ($pool, $log, $c) {
|
|||
$zone->addResourceRecord($dsRecord);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
$builder = new ZoneBuilder();
|
||||
$completed_zone = $builder->build($zone);
|
||||
|
||||
|
@ -151,6 +151,12 @@ Coroutine::create(function () use ($pool, $log, $c) {
|
|||
}
|
||||
|
||||
file_put_contents("{$basePath}/{$cleanedTld}.zone", $completed_zone);
|
||||
|
||||
if ($c['dns_server'] == 'opendnssec') {
|
||||
chown("{$basePath}/{$cleanedTld}.zone", 'opendnssec');
|
||||
chgrp("{$basePath}/{$cleanedTld}.zone", 'opendnssec');
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if ($c['dns_server'] == 'bind') {
|
||||
|
@ -178,6 +184,20 @@ Coroutine::create(function () use ($pool, $log, $c) {
|
|||
if ($return_var != 0) {
|
||||
$log->error('Failed to notify secondary servers. ' . $return_var);
|
||||
}
|
||||
} elseif ($c['dns_server'] == 'opendnssec') {
|
||||
exec("ods-signer sign {$cleanedTld}");
|
||||
sleep(1);
|
||||
copy("/var/lib/opendnssec/signed/{$cleanedTld}", "/var/lib/bind/{$cleanedTld}.zone.signed");
|
||||
|
||||
exec("rndc reload {$cleanedTld}.", $output, $return_var);
|
||||
if ($return_var != 0) {
|
||||
$log->error('Failed to reload BIND. ' . $return_var);
|
||||
}
|
||||
|
||||
exec("rndc notify {$cleanedTld}.", $output, $return_var);
|
||||
if ($return_var != 0) {
|
||||
$log->error('Failed to notify secondary servers. ' . $return_var);
|
||||
}
|
||||
} else {
|
||||
// Default
|
||||
exec("rndc reload {$cleanedTld}.", $output, $return_var);
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue