diff options
| author | Steven Barth <steven@midlink.org> | 2014-06-18 10:04:29 +0000 |
|---|---|---|
| committer | Steven Barth <steven@midlink.org> | 2014-06-18 10:04:29 +0000 |
| commit | 15646b2175818ceb55b73f7def29737b37580f70 (patch) | |
| tree | 1a8da4460da3ca210f048db273c943d0dae3936c | |
| parent | 10cb433539461f4dc56e42e13049541c47a42e93 (diff) | |
| download | upstream-15646b2175818ceb55b73f7def29737b37580f70.tar.gz upstream-15646b2175818ceb55b73f7def29737b37580f70.tar.bz2 upstream-15646b2175818ceb55b73f7def29737b37580f70.zip | |
dnsmasq: add UCI DNSSEC runtime support
Ship keys for the root zone and add two uci options to enable
DNSSEC checks:
Option 'dnssec': Activate DNSSEC validation
Option 'dnsseccheckunsigned': Ensure answers without DNSSEC are in
unsigned zones.
Signed-off-by: Andre Heider <a.heider@gmail.com>
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41245 3c298f89-4303-0410-b956-a3cf2f4a3e73
| -rw-r--r-- | package/network/services/dnsmasq/files/dnsmasq.init | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/package/network/services/dnsmasq/files/dnsmasq.init b/package/network/services/dnsmasq/files/dnsmasq.init index f7edb28806..9f16d5f5d4 100644 --- a/package/network/services/dnsmasq/files/dnsmasq.init +++ b/package/network/services/dnsmasq/files/dnsmasq.init @@ -14,6 +14,7 @@ ADD_LOCAL_HOSTNAME=1 CONFIGFILE="/var/etc/dnsmasq.conf" HOSTFILE="/tmp/hosts/dhcp" +TRUSTANCHORSFILE="/usr/share/dnsmasq/trust-anchors.conf" xappend() { local value="$1" @@ -186,6 +187,13 @@ dnsmasq() { config_list_foreach "$cfg" rebind_domain append_rebind_domain } + config_get dnssec "$cfg" dnssec + [ "$dnssec" -gt 0 ] && { + xappend "--conf-file=$TRUSTANCHORSFILE" + xappend "--dnssec" + append_bool "$cfg" dnsseccheckunsigned "--dnssec-check-unsigned" + } + dhcp_option_add "$cfg" "" 0 xappend "--dhcp-broadcast=tag:needs-broadcast" |