StackExchange/dnscontrol
1
1
Fork 0
mirror of https://github.com/StackExchange/dnscontrol.git synced 2025-10-06 03:46:34 +08:00
Code Issues Projects Releases Packages Wiki Activity

deSEC: improve formating of DS records on domain creation

Browse source 
This also adds a note to the provider page about alternative ways
to get the DS records after the domain is created.
This commit is contained in:
Eli Heady 2025-09-12 10:14:26 -04:00
parent f874b5fc1d
commit f9d48e2896
No known key found for this signature in database
2 changed files with 13 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
documentation/provider/desec.md
View file

@ -44,3 +44,9 @@ integration test suite can not be run in a single session. See
[https://desec.readthedocs.io/en/latest/rate-limits.html#api-request-throttling](https://desec.readthedocs.io/en/latest/rate-limits.html#api-request-throttling)
{% endhint %}
Upon domain creation, the DNSKEY and DS records needed for DNSSEC setup are
printed in the command output. If you need these values later, get them from
the deSEC web interface or query deSEC nameservers for the CDS records. For
example: `dig +short @ns1.desec.io example.com CDS` will return the published
CDS records which can be used to insert the required DS records into the parent
zone.

8
providers/desec/protocol.go
View file

@ -261,7 +261,13 @@ func (c *desecProvider) createDomain(domain string) error {
return err
}
printer.Printf("To enable DNSSEC validation for your domain, make sure to convey the DS record(s) to your registrar:\n")
printer.Printf("%+q", dm.Keys)
for _, key := range dm.Keys {
printer.Printf("DNSKEY: %s\n", key.Dnskey)
printer.Printf("DS record(s):\n")
for _, d := range key.Ds {
printer.Printf(" %s\n", d)
}
}
return nil
}