contrib/unbound/libunbound/python/examples/dnssec_test.py

   1 #!/usr/bin/env python
   2 from __future__ import print_function
   3 from unbound import ub_ctx, RR_TYPE_A, RR_TYPE_RRSIG, RR_TYPE_NSEC, RR_TYPE_NSEC3
   4 import ldns
   5
   6 def dnssecParse(domain, rrType=RR_TYPE_A):
   7     print("Resolving domain", domain)
   8     s, r = resolver.resolve(domain)
   9     print("status: %s, secure: %s, rcode: %s, havedata: %s, answer_len; %s" % (s, r.secure, r.rcode_str, r.havedata, r.answer_len))
  10
  11     s, pkt = ldns.ldns_wire2pkt(r.packet)
  12     if s != 0:
  13         raise RuntimeError("Error parsing DNS packet")
  14
  15     rrsigs = pkt.rr_list_by_type(RR_TYPE_RRSIG, ldns.LDNS_SECTION_ANSWER)
  16     print("RRSIGs from answer:", sorted(rrsigs))
  17
  18     rrsigs = pkt.rr_list_by_type(RR_TYPE_RRSIG, ldns.LDNS_SECTION_AUTHORITY)
  19     print("RRSIGs from authority:", sorted(rrsigs))
  20
  21     nsecs = pkt.rr_list_by_type(RR_TYPE_NSEC, ldns.LDNS_SECTION_AUTHORITY)
  22     print("NSECs:", sorted(nsecs))
  23
  24     nsec3s = pkt.rr_list_by_type(RR_TYPE_NSEC3, ldns.LDNS_SECTION_AUTHORITY)
  25     print("NSEC3s:", sorted(nsec3s))
  26
  27     print("---")
  28
  29
  30 resolver = ub_ctx()
  31 resolver.add_ta(".   IN DS   19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5")
  32
  33 dnssecParse("nic.cz")
  34 dnssecParse("nonexistent-domain-blablabla.cz")
  35 dnssecParse("nonexistent-domain-blablabla.root.cz")
  36