1
0
mirror of https://github.com/StackExchange/dnscontrol.git synced 2024-05-11 05:55:12 +00:00

Added CAA_BUILDER (#478)

* Added CAA_BUILDER

* CAA-Builder: simply use "none" to refuse all CAs

* Fixed small error in documentation
This commit is contained in:
Patrik Kernstock
2019-05-18 17:10:18 +02:00
committed by Tom Limoncelli
parent d782bb002b
commit a16f689d32
4 changed files with 184 additions and 87 deletions

46
docs/caa-builder.md Normal file
View File

@@ -0,0 +1,46 @@
---
layout: default
title: CAA Builder
---
# CAA Builder
dnscontrol contains a CAA_BUILDER which can be used to simply create
CAA records for your domains. Instead of creating each CAA record
individually, you can simply configure your report mail address, the
authorized certificate authorities and the builder cares about the rest.
## Example
For example you can use:
```
CAA_BUILDER({
label: "@",
iodef: "test@domain.tld",
iodef_critical: true,
issue: [
"letsencrypt.org",
"comodoca.com",
],
issuewild: "none",
})
```
The parameters are:
* `label:` The label of the CAA record. (Optional. Default: `"@"`)
* `iodef:` Report all violation to configured mail address.
* `iodef_critical:` This can be `true` or `false`. If enabled and CA does not support this record, then certificate issue will be refused. (Optional. Default: `false`)
* `issue:` An array of CAs which are allowed to issue certificates. (Use `"none"` to refuse all CAs)
* `issuewild:` An array of CAs which are allowed to issue wildcard certificates. (Can be simply `"none"` to refuse issuing wildcard certificates for all CAs)
`CAA_BUILDER()` returns multiple records (when configured as example above):
* `CAA("@", "iodef", "test@domain.tld", CAA_CRITICAL)`
* `CAA("@", "issue", "letsencrypt.org")`
* `CAA("@", "issue", "comodoca.com")`
* `CAA("@", "issuewild", ";")`
```

View File

@@ -113,6 +113,9 @@ title: DnsControl
<li>
<a href="{{site.github.url}}/spf-optimizer">SPF Optimizer</a>: Optimize your SPF records
</li>
<li>
<a href="{{site.github.url}}/caa-builder"CAA Builder</a>: Build CAA records the easy way
</li>
</ul>
</div>
<div class="col-md-4">