Adding Bash dns header
This commit is contained in:
36
Bash/dns.bash
Normal file
36
Bash/dns.bash
Normal file
@@ -0,0 +1,36 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
function GenerateTLSAHash {
|
||||||
|
### Generate DANE TLSA
|
||||||
|
# param 1: Certfile
|
||||||
|
openssl x509 -in "$1" -noout -pubkey | openssl pkey -pubin -outform DER | openssl dgst -sha256 -binary | hexdump -ve '/1 "%02x"'
|
||||||
|
}
|
||||||
|
function GenerateTLSA-311 {
|
||||||
|
### Generate DANE TLSA
|
||||||
|
# param 1: identity
|
||||||
|
printf "3 1 1 $(GenerateTLSAHash /etc/letsencrypt/live/"$1"/cert.pem)\n"
|
||||||
|
}
|
||||||
|
|
||||||
|
function GenerateTLSA-211 {
|
||||||
|
### Generate DANE TLSA
|
||||||
|
# param 1: identity
|
||||||
|
printf "2 1 1 $(GenerateTLSAHash /etc/letsencrypt/live/"$1"/chain.pem)\n"
|
||||||
|
}
|
||||||
|
|
||||||
|
function GenerateTLSA {
|
||||||
|
### Generate DANE TLSA
|
||||||
|
# param 1: identity
|
||||||
|
GenerateTLSA-311 "$1"
|
||||||
|
GenerateTLSA-211 "$1"
|
||||||
|
}
|
||||||
|
|
||||||
|
function GenerateCAA {
|
||||||
|
### Generate CAA
|
||||||
|
# Pending an attribute on the chain to derive this from.
|
||||||
|
echo '128 issue "letsencrypt.org"'
|
||||||
|
}
|
||||||
|
|
||||||
|
function GenerateSSHFP {
|
||||||
|
### Generate the SSHFP
|
||||||
|
ssh-keyscan -D localhost | grep -E '1 2|4 2' | sed 's/localhost IN SSHFP //'
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user