mirror/stackexchange-dnscontrol
1
0
Fork 0
mirror of https://github.com/StackExchange/dnscontrol.git synced 2024-05-11 05:55:12 +00:00
Code Issues Releases Activity

Added CAA_BUILDER (#478)

Browse Source 
* Added CAA_BUILDER

* CAA-Builder: simply use "none" to refuse all CAs

* Fixed small error in documentation
This commit is contained in:
Patrik Kernstock
2019-05-18 17:10:18 +02:00
committed by Tom Limoncelli
parent d782bb002b
commit a16f689d32
4 changed files with 184 additions and 87 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
pkg/js/helpers.js
View File

@ -680,6 +680,48 @@ function SPF_BUILDER(value) {
return r;
}
// CAA_BUILDER takes an object:
// label: The DNS label for the CAA record. (default: '@')
// iodef: The contact mail address. (optional)
// iodef_critical: Boolean if sending report is required/critical. If not supported, certificate should be refused. (optional)
// issue: List of CAs which are allowed to issue certificates for the domain (creates one record for each).
// issuewild: Allowed CAs which can issue wildcard certificates for this domain. (creates one record for each)
function CAA_BUILDER(value) {
if (!value.label) {
value.label = '@';
}
if (value.issue && value.issue == 'none')
value.issue = [ ";" ];
if (value.issuewild && value.issuewild == 'none')
value.issuewild = [ ";" ];
if ( (!value.issue && !value.issuewild) || ((value.issue && value.issue.length == 0) && (value.issuewild && value.issuewild.length == 0)) ) {
throw 'CAA_BUILDER requires at least one entry at issue or issuewild';
}
r = []; // The list of records to return.
if (value.iodef) {
if (value.iodef_critical) {
r.push(CAA(value.label, "iodef", value.iodef, CAA_CRITICAL));
} else {
r.push(CAA(value.label, "iodef", value.iodef));
}
}
if (value.issue)
for (var i = 0, len = value.issue.length; i < len; i++)
r.push(CAA(value.label, "issue", value.issue[i]));
if (value.issuewild)
for (var i = 0, len = value.issuewild.length; i < len; i++)
r.push(CAA(value.label, "issuewild", value.issuewild[i]));
return r;
}
// Split a DKIM string if it is >254 bytes.
function DKIM(arr) {
chunkSize = 255;