Todo: Disable DNSSEC test-scripts for non-dnssec zones

menandmice-services / dns-monitoring-scripts

Simple shell scripts for DNS and DNSSEC monitoring

BSD 2-Clause "Simplified" License

19 stars 7 forks source link

Todo: Disable DNSSEC test-scripts for non-dnssec zones #29

Open chani opened 7 years ago

chani commented 7 years ago

Some tests only make sense with DNSSEC zones; implementing a check for that to skip DNSSEC tests.

kbabioch commented 5 years ago

Is this still relevant to you? How do you run those tests? Using run.sh? I'm not convinced, since you can simply invoke the scripts one-by-one. They are meant for testing after all, so you should know what to do with the results.

emanzx commented 5 years ago

if you can check the authzone if it has DNSKEY record or not. if DNSKEY is present and the record has RRSIG means DNSSEC is enable. so you can flag the zone as DNSSEC enable/disable and run specific test for the zone.