Author: cyrus Date: 2014-06-18 12:04:29 +0200 (Wed, 18 Jun 2014) New Revision: 41245
Modified: trunk/package/network/services/dnsmasq/files/dnsmasq.init Log: dnsmasq: add UCI DNSSEC runtime support Ship keys for the root zone and add two uci options to enable DNSSEC checks: Option 'dnssec': Activate DNSSEC validation Option 'dnsseccheckunsigned': Ensure answers without DNSSEC are in unsigned zones. Signed-off-by: Andre Heider <[email protected]> Modified: trunk/package/network/services/dnsmasq/files/dnsmasq.init =================================================================== --- trunk/package/network/services/dnsmasq/files/dnsmasq.init 2014-06-18 10:04:25 UTC (rev 41244) +++ trunk/package/network/services/dnsmasq/files/dnsmasq.init 2014-06-18 10:04:29 UTC (rev 41245) @@ -14,6 +14,7 @@ CONFIGFILE="/var/etc/dnsmasq.conf" HOSTFILE="/tmp/hosts/dhcp" +TRUSTANCHORSFILE="/usr/share/dnsmasq/trust-anchors.conf" xappend() { local value="$1" @@ -186,6 +187,13 @@ config_list_foreach "$cfg" rebind_domain append_rebind_domain } + config_get dnssec "$cfg" dnssec + [ "$dnssec" -gt 0 ] && { + xappend "--conf-file=$TRUSTANCHORSFILE" + xappend "--dnssec" + append_bool "$cfg" dnsseccheckunsigned "--dnssec-check-unsigned" + } + dhcp_option_add "$cfg" "" 0 xappend "--dhcp-broadcast=tag:needs-broadcast" _______________________________________________ openwrt-commits mailing list [email protected] https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-commits
