netbird/plugins
0
0
Fork 0
mirror of https://github.com/netbirdio/plugins.git synced 2026-05-22 18:44:07 -07:00
Code Issues Packages Projects Releases Wiki Activity

dns/rfc2136: the whole legacy key format is madness

Browse Source 
The original ".key" file just disappears with all its knobs and
features.
This commit is contained in:
Franco Fichtner
2022-12-20 12:05:15 +01:00
parent 45973b0be8
commit cbbeafab2a
1 changed files with 10 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc
+10 -29
View File
@@ -120,35 +120,16 @@ function rfc2136_configure_do($verbose = false, $int = '', $updatehost = '', $fo
$hostname .= ".";
}
/* write private key file
this is dumb - public and private keys are the same for HMAC-MD5,
but nsupdate insists on having both */
$fd = fopen("/var/etc/K{$i}{$keyname}+157+00000.private", "w");
$privkey = <<<EOD
key "{$keyname}" {
algorithm hmac-md5;
secret "{$dnsupdate['keydata']}";
};
$keyfile = "/var/etc/nsupdatekey{$i}";
$keyfill = [
"key \"{$keyname}\" {",
"\talgorithm hmac-md5;",
"\tsecret \"{$dnsupdate['keydata']}\";",
"};",
'' /* end of file */
];
EOD;
fwrite($fd, $privkey);
fclose($fd);
/* write public key file */
if ($dnsupdate['keytype'] == "zone") {
$flags = 257;
$proto = 3;
} elseif ($dnsupdate['keytype'] == "host") {
$flags = 513;
$proto = 3;
} elseif ($dnsupdate['keytype'] == "user") {
$flags = 0;
$proto = 2;
}
$fd = fopen("/var/etc/K{$i}{$keyname}+157+00000.key", "w");
fwrite($fd, "{$keyname} IN KEY {$flags} {$proto} 157 {$dnsupdate['keydata']}\n");
fclose($fd);
file_put_contents($keyfile, implode(PHP_EOL, $keyfill));
/* generate update instructions */
$upinst = "";
@@ -219,7 +200,7 @@ EOD;
@file_put_contents("/var/etc/nsupdatecmds{$i}", $upinst);
unset($upinst);
/* invoke nsupdate */
$cmd = "/usr/local/bin/nsupdate -k /var/etc/K{$i}{$keyname}+157+00000.key";
$cmd = "/usr/local/bin/nsupdate -k {$keyfile}";
if (isset($dnsupdate['usetcp'])) {
$cmd .= " -v";
}