Skip to content

Commit c0fb9a4

Browse files
author
Till Brehm
committed
Load only key files of active DNSSEC algorithms into the database.
1 parent acafd80 commit c0fb9a4

File tree

1 file changed

+11
-2
lines changed

1 file changed

+11
-2
lines changed

server/plugins-available/bind_plugin.inc.php

Lines changed: 11 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -176,8 +176,17 @@ function soa_dnssec_sign(&$data) {
176176
//* Write Data back ino DB
177177
$dnssecdata = "DS-Records:\n".file_get_contents($dns_config['bind_zonefiles_dir'].'/dsset-'.$domain.'.');
178178
$dnssecdata .= "\n------------------------------------\n\nDNSKEY-Records:\n";
179-
foreach (glob($dns_config['bind_zonefiles_dir'].'/K'.$domain.'*.key') as $keyfile) {
180-
$dnssecdata .= file_get_contents($keyfile)."\n\n";
179+
180+
if(in_array('ECDSAP256SHA256',$dnssec_algo)) {
181+
foreach (glob($dns_config['bind_zonefiles_dir'].'/K'.$domain.'.+013*.key') as $keyfile) {
182+
$dnssecdata .= file_get_contents($keyfile)."\n\n";
183+
}
184+
}
185+
186+
if(in_array('NSEC3RSASHA1',$dnssec_algo)) {
187+
foreach (glob($dns_config['bind_zonefiles_dir'].'/K'.$domain.'.+007*.key') as $keyfile) {
188+
$dnssecdata .= file_get_contents($keyfile)."\n\n";
189+
}
181190
}
182191

183192
if ($app->dbmaster !== $app->db) $app->dbmaster->query('UPDATE dns_soa SET dnssec_info=?, dnssec_initialized=\'Y\', dnssec_last_signed=? WHERE id=?', $dnssecdata, intval(time()), intval($data['new']['id']));

0 commit comments

Comments
 (0)