Open NotoriousRebel opened 4 years ago
Last I checked c-ares does not support parsing DNSKEY RRs.
https://github.com/c-ares/c-ares/search?q=dnskey&type=
delv (bind) does dnssec ... Fwiw:
isc_result_t dns_zoneverify_dnssec
https://github.com/isc-projects/bind9/blob/main/lib/dns/zoneverify.c#L1960setup_dnsseckeys
https://github.com/isc-projects/bind9/blob/main/bin/delv/delv.c#L801dns_dnssec_verify
https://github.com/isc-projects/bind9/blob/main/lib/dns/dnssec.c#L374Thanks for compiling those links!
This project being a c-ares wrapper, will gain better DNSSEC support once it's also better supported by c-ares itself.
It seems that c-ares supports DNSSEC for example it seems they support DNSKEY queries: https://github.com/c-ares/c-ares/blob/7ebedab25dab50b2f008fbef8601c223096bb780/test/dns-proto.cc#L132
However, when I try with pycares I get this error:![image](https://user-images.githubusercontent.com/36310667/77833844-ad5d1800-7116-11ea-921b-e87b720ffaac.png)
It works with
dns.resolver.query('dnssec-tools.org', 'DNSKEY')