Skip to content

hiviah/dnssec-weak-keys

Repository files navigation

0. Get list of domains, one per line into "domains" file

0.2 Build unbound with python module (not all Linux distributions have it enabled) using configure like:
./configure --with-pyunbound --with-pythonmodule --disable-gost --with-pthreads

0.5 Make "keys" file with trust anchors for libunbound validation, e.g.
.   IN DS   19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5

1. Scan domains' keys
python fetch_dnskey.py domains keys 20

2. Extract keys from logfile
./parse_keys.pl < fetch_dnskey.log > domain_dnskeys

3. List weak keys
./list_weak_keys.py < domain_dnskeys > weak_keys

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published