mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-22 18:19:42 +00:00
496 lines
12 KiB
C
496 lines
12 KiB
C
/*
|
|
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
*
|
|
* See the COPYRIGHT file distributed with this work for additional
|
|
* information regarding copyright ownership.
|
|
*/
|
|
|
|
#ifndef WIN32
|
|
#include <arpa/inet.h>
|
|
#include <netdb.h>
|
|
#include <netinet/in.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/types.h>
|
|
#include <unistd.h>
|
|
#endif /* ifndef WIN32 */
|
|
|
|
#include <stdbool.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#include <isc/app.h>
|
|
#include <isc/attributes.h>
|
|
#include <isc/base64.h>
|
|
#include <isc/buffer.h>
|
|
#include <isc/commandline.h>
|
|
#include <isc/lib.h>
|
|
#include <isc/mem.h>
|
|
#include <isc/print.h>
|
|
#include <isc/sockaddr.h>
|
|
#include <isc/socket.h>
|
|
#include <isc/task.h>
|
|
#include <isc/timer.h>
|
|
#include <isc/util.h>
|
|
|
|
#include <dns/client.h>
|
|
#include <dns/fixedname.h>
|
|
#include <dns/keyvalues.h>
|
|
#include <dns/lib.h>
|
|
#include <dns/name.h>
|
|
#include <dns/rdata.h>
|
|
#include <dns/rdataset.h>
|
|
#include <dns/rdatastruct.h>
|
|
#include <dns/rdatatype.h>
|
|
#include <dns/result.h>
|
|
#include <dns/secalg.h>
|
|
|
|
#include <dst/dst.h>
|
|
|
|
#include <irs/resconf.h>
|
|
|
|
static char *algname;
|
|
|
|
static isc_result_t
|
|
printdata(dns_rdataset_t *rdataset, dns_name_t *owner) {
|
|
isc_buffer_t target;
|
|
isc_result_t result;
|
|
isc_region_t r;
|
|
char t[4096];
|
|
|
|
if (!dns_rdataset_isassociated(rdataset)) {
|
|
printf("[WARN: empty]\n");
|
|
return (ISC_R_SUCCESS);
|
|
}
|
|
|
|
isc_buffer_init(&target, t, sizeof(t));
|
|
|
|
result = dns_rdataset_totext(rdataset, owner, false, false, &target);
|
|
if (result != ISC_R_SUCCESS) {
|
|
return (result);
|
|
}
|
|
isc_buffer_usedregion(&target, &r);
|
|
printf("%.*s", (int)r.length, (char *)r.base);
|
|
|
|
return (ISC_R_SUCCESS);
|
|
}
|
|
|
|
ISC_NORETURN static void
|
|
usage(void);
|
|
|
|
static void
|
|
usage(void) {
|
|
fprintf(stderr, "resolve [-t RRtype] "
|
|
"[[-a algorithm] [-e] -k keyname -K keystring] "
|
|
"[-S domain:serveraddr_for_domain ] [-s server_address]"
|
|
"[-b address[#port]] hostname\n");
|
|
|
|
exit(1);
|
|
}
|
|
|
|
static void
|
|
set_key(dns_client_t *client, char *keynamestr, char *keystr, bool is_sep,
|
|
isc_mem_t **mctxp) {
|
|
isc_result_t result;
|
|
dns_fixedname_t fkeyname;
|
|
unsigned int namelen;
|
|
dns_name_t *keyname;
|
|
dns_rdata_dnskey_t keystruct;
|
|
unsigned char keydata[4096];
|
|
isc_buffer_t keydatabuf;
|
|
unsigned char rrdata[4096];
|
|
isc_buffer_t rrdatabuf;
|
|
isc_buffer_t b;
|
|
isc_textregion_t tr;
|
|
isc_region_t r;
|
|
dns_secalg_t alg;
|
|
|
|
isc_mem_create(mctxp);
|
|
|
|
if (algname != NULL) {
|
|
tr.base = algname;
|
|
tr.length = strlen(algname);
|
|
result = dns_secalg_fromtext(&alg, &tr);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "failed to identify the algorithm\n");
|
|
exit(1);
|
|
}
|
|
} else {
|
|
alg = DNS_KEYALG_RSASHA1;
|
|
}
|
|
|
|
keystruct.common.rdclass = dns_rdataclass_in;
|
|
keystruct.common.rdtype = dns_rdatatype_dnskey;
|
|
keystruct.flags = DNS_KEYOWNER_ZONE; /* fixed */
|
|
if (is_sep) {
|
|
keystruct.flags |= DNS_KEYFLAG_KSK;
|
|
}
|
|
keystruct.protocol = DNS_KEYPROTO_DNSSEC; /* fixed */
|
|
keystruct.algorithm = alg;
|
|
|
|
isc_buffer_init(&keydatabuf, keydata, sizeof(keydata));
|
|
isc_buffer_init(&rrdatabuf, rrdata, sizeof(rrdata));
|
|
result = isc_base64_decodestring(keystr, &keydatabuf);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "base64 decode failed\n");
|
|
exit(1);
|
|
}
|
|
isc_buffer_usedregion(&keydatabuf, &r);
|
|
keystruct.datalen = r.length;
|
|
keystruct.data = r.base;
|
|
|
|
result = dns_rdata_fromstruct(NULL, keystruct.common.rdclass,
|
|
keystruct.common.rdtype, &keystruct,
|
|
&rrdatabuf);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "failed to construct key rdata\n");
|
|
exit(1);
|
|
}
|
|
namelen = strlen(keynamestr);
|
|
isc_buffer_init(&b, keynamestr, namelen);
|
|
isc_buffer_add(&b, namelen);
|
|
keyname = dns_fixedname_initname(&fkeyname);
|
|
result = dns_name_fromtext(keyname, &b, dns_rootname, 0, NULL);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "failed to construct key name\n");
|
|
exit(1);
|
|
}
|
|
result = dns_client_addtrustedkey(client, dns_rdataclass_in,
|
|
dns_rdatatype_dnskey, keyname,
|
|
&rrdatabuf);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "failed to add key for %s\n", keynamestr);
|
|
exit(1);
|
|
}
|
|
}
|
|
|
|
static void
|
|
addserver(dns_client_t *client, const char *addrstr, const char *port,
|
|
const char *name_space) {
|
|
struct addrinfo hints, *res;
|
|
int gaierror;
|
|
isc_sockaddr_t sa;
|
|
isc_sockaddrlist_t servers;
|
|
isc_result_t result;
|
|
unsigned int namelen;
|
|
isc_buffer_t b;
|
|
dns_fixedname_t fname;
|
|
dns_name_t *name = NULL;
|
|
|
|
memset(&hints, 0, sizeof(hints));
|
|
hints.ai_family = AF_UNSPEC;
|
|
hints.ai_socktype = SOCK_DGRAM;
|
|
hints.ai_protocol = IPPROTO_UDP;
|
|
hints.ai_flags = AI_NUMERICHOST;
|
|
gaierror = getaddrinfo(addrstr, port, &hints, &res);
|
|
if (gaierror != 0) {
|
|
fprintf(stderr, "getaddrinfo failed: %s\n",
|
|
gai_strerror(gaierror));
|
|
exit(1);
|
|
}
|
|
INSIST(res->ai_addrlen <= sizeof(sa.type));
|
|
memmove(&sa.type, res->ai_addr, res->ai_addrlen);
|
|
sa.length = (unsigned int)res->ai_addrlen;
|
|
freeaddrinfo(res);
|
|
ISC_LINK_INIT(&sa, link);
|
|
ISC_LIST_INIT(servers);
|
|
ISC_LIST_APPEND(servers, &sa, link);
|
|
|
|
if (name_space != NULL) {
|
|
namelen = strlen(name_space);
|
|
isc_buffer_constinit(&b, name_space, namelen);
|
|
isc_buffer_add(&b, namelen);
|
|
name = dns_fixedname_initname(&fname);
|
|
result = dns_name_fromtext(name, &b, dns_rootname, 0, NULL);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "failed to convert qname: %u\n",
|
|
result);
|
|
exit(1);
|
|
}
|
|
}
|
|
|
|
result = dns_client_setservers(client, dns_rdataclass_in, name,
|
|
&servers);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "set server failed: %u\n", result);
|
|
exit(1);
|
|
}
|
|
}
|
|
|
|
int
|
|
main(int argc, char *argv[]) {
|
|
int ch;
|
|
isc_textregion_t tr;
|
|
char *server = NULL;
|
|
char *altserver = NULL;
|
|
char *altserveraddr = NULL;
|
|
char *altservername = NULL;
|
|
dns_client_t *client = NULL;
|
|
char *keynamestr = NULL;
|
|
char *keystr = NULL;
|
|
isc_result_t result;
|
|
isc_buffer_t b;
|
|
dns_fixedname_t qname0;
|
|
unsigned int namelen;
|
|
dns_name_t *qname, *name;
|
|
dns_rdatatype_t type = dns_rdatatype_a;
|
|
dns_rdataset_t *rdataset;
|
|
dns_namelist_t namelist;
|
|
isc_mem_t *keymctx = NULL;
|
|
unsigned int clientopt, resopt = 0;
|
|
bool is_sep = false;
|
|
const char *port = "53";
|
|
isc_mem_t *mctx = NULL;
|
|
isc_appctx_t *actx = NULL;
|
|
isc_taskmgr_t *taskmgr = NULL;
|
|
isc_socketmgr_t *socketmgr = NULL;
|
|
isc_timermgr_t *timermgr = NULL;
|
|
struct in_addr in4;
|
|
struct in6_addr in6;
|
|
isc_sockaddr_t a4, a6;
|
|
isc_sockaddr_t *addr4 = NULL, *addr6 = NULL;
|
|
|
|
while ((ch = isc_commandline_parse(argc, argv, "a:b:es:t:k:K:p:S:")) !=
|
|
-1) {
|
|
switch (ch) {
|
|
case 't':
|
|
tr.base = isc_commandline_argument;
|
|
tr.length = strlen(isc_commandline_argument);
|
|
result = dns_rdatatype_fromtext(&type, &tr);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "invalid RRtype: %s\n",
|
|
isc_commandline_argument);
|
|
exit(1);
|
|
}
|
|
break;
|
|
case 'a':
|
|
algname = isc_commandline_argument;
|
|
break;
|
|
case 'b':
|
|
if (inet_pton(AF_INET, isc_commandline_argument,
|
|
&in4) == 1) {
|
|
if (addr4 != NULL) {
|
|
fprintf(stderr, "only one local "
|
|
"address per family "
|
|
"can be specified\n");
|
|
exit(1);
|
|
}
|
|
isc_sockaddr_fromin(&a4, &in4, 0);
|
|
addr4 = &a4;
|
|
} else if (inet_pton(AF_INET6, isc_commandline_argument,
|
|
&in6) == 1) {
|
|
if (addr6 != NULL) {
|
|
fprintf(stderr, "only one local "
|
|
"address per family "
|
|
"can be specified\n");
|
|
exit(1);
|
|
}
|
|
isc_sockaddr_fromin6(&a6, &in6, 0);
|
|
addr6 = &a6;
|
|
} else {
|
|
fprintf(stderr, "invalid address %s\n",
|
|
isc_commandline_argument);
|
|
exit(1);
|
|
}
|
|
break;
|
|
case 'e':
|
|
is_sep = true;
|
|
break;
|
|
case 'S':
|
|
if (altserver != NULL) {
|
|
fprintf(stderr,
|
|
"alternate server "
|
|
"already defined: %s\n",
|
|
altserver);
|
|
exit(1);
|
|
}
|
|
altserver = isc_commandline_argument;
|
|
break;
|
|
case 's':
|
|
if (server != NULL) {
|
|
fprintf(stderr,
|
|
"server "
|
|
"already defined: %s\n",
|
|
server);
|
|
exit(1);
|
|
}
|
|
server = isc_commandline_argument;
|
|
break;
|
|
case 'k':
|
|
keynamestr = isc_commandline_argument;
|
|
break;
|
|
case 'K':
|
|
keystr = isc_commandline_argument;
|
|
break;
|
|
case 'p':
|
|
port = isc_commandline_argument;
|
|
break;
|
|
default:
|
|
usage();
|
|
}
|
|
}
|
|
|
|
argc -= isc_commandline_index;
|
|
argv += isc_commandline_index;
|
|
if (argc < 1) {
|
|
usage();
|
|
}
|
|
|
|
if (altserver != NULL) {
|
|
char *cp;
|
|
|
|
cp = strchr(altserver, ':');
|
|
if (cp == NULL) {
|
|
fprintf(stderr, "invalid alternate server: %s\n",
|
|
altserver);
|
|
exit(1);
|
|
}
|
|
*cp = '\0';
|
|
altservername = altserver;
|
|
altserveraddr = cp + 1;
|
|
}
|
|
|
|
isc_lib_register();
|
|
result = dns_lib_init();
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "dns_lib_init failed: %u\n", result);
|
|
exit(1);
|
|
}
|
|
|
|
isc_mem_create(&mctx);
|
|
|
|
result = isc_appctx_create(mctx, &actx);
|
|
if (result != ISC_R_SUCCESS) {
|
|
goto cleanup;
|
|
}
|
|
result = isc_app_ctxstart(actx);
|
|
if (result != ISC_R_SUCCESS) {
|
|
goto cleanup;
|
|
}
|
|
result = isc_taskmgr_createinctx(mctx, 1, 0, &taskmgr);
|
|
if (result != ISC_R_SUCCESS) {
|
|
goto cleanup;
|
|
}
|
|
result = isc_socketmgr_createinctx(mctx, &socketmgr);
|
|
if (result != ISC_R_SUCCESS) {
|
|
goto cleanup;
|
|
}
|
|
result = isc_timermgr_createinctx(mctx, &timermgr);
|
|
if (result != ISC_R_SUCCESS) {
|
|
goto cleanup;
|
|
}
|
|
|
|
clientopt = 0;
|
|
result = dns_client_create(mctx, actx, taskmgr, socketmgr, timermgr,
|
|
clientopt, &client, addr4, addr6);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "dns_client_create failed: %u, %s\n", result,
|
|
isc_result_totext(result));
|
|
exit(1);
|
|
}
|
|
|
|
/* Set the nameserver */
|
|
if (server == NULL) {
|
|
irs_resconf_t *resconf = NULL;
|
|
isc_sockaddrlist_t *nameservers;
|
|
|
|
result = irs_resconf_load(mctx, "/etc/resolv.conf", &resconf);
|
|
if (result != ISC_R_SUCCESS && result != ISC_R_FILENOTFOUND) {
|
|
fprintf(stderr, "irs_resconf_load failed: %u\n",
|
|
result);
|
|
exit(1);
|
|
}
|
|
nameservers = irs_resconf_getnameservers(resconf);
|
|
result = dns_client_setservers(client, dns_rdataclass_in, NULL,
|
|
nameservers);
|
|
if (result != ISC_R_SUCCESS) {
|
|
irs_resconf_destroy(&resconf);
|
|
fprintf(stderr, "dns_client_setservers failed: %u\n",
|
|
result);
|
|
exit(1);
|
|
}
|
|
irs_resconf_destroy(&resconf);
|
|
} else {
|
|
addserver(client, server, port, NULL);
|
|
}
|
|
|
|
/* Set the alternate nameserver (when specified) */
|
|
if (altserver != NULL) {
|
|
addserver(client, altserveraddr, port, altservername);
|
|
}
|
|
|
|
/* Install DNSSEC key (if given) */
|
|
if (keynamestr != NULL) {
|
|
if (keystr == NULL) {
|
|
fprintf(stderr, "key string is missing "
|
|
"while key name is provided\n");
|
|
exit(1);
|
|
}
|
|
set_key(client, keynamestr, keystr, is_sep, &keymctx);
|
|
}
|
|
|
|
/* Construct qname */
|
|
namelen = strlen(argv[0]);
|
|
isc_buffer_init(&b, argv[0], namelen);
|
|
isc_buffer_add(&b, namelen);
|
|
qname = dns_fixedname_initname(&qname0);
|
|
result = dns_name_fromtext(qname, &b, dns_rootname, 0, NULL);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "failed to convert qname: %u\n", result);
|
|
}
|
|
|
|
/* Perform resolution */
|
|
if (keynamestr == NULL) {
|
|
resopt |= DNS_CLIENTRESOPT_NODNSSEC;
|
|
}
|
|
ISC_LIST_INIT(namelist);
|
|
result = dns_client_resolve(client, qname, dns_rdataclass_in, type,
|
|
resopt, &namelist);
|
|
if (result != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "resolution failed: %s\n",
|
|
dns_result_totext(result));
|
|
}
|
|
for (name = ISC_LIST_HEAD(namelist); name != NULL;
|
|
name = ISC_LIST_NEXT(name, link))
|
|
{
|
|
for (rdataset = ISC_LIST_HEAD(name->list); rdataset != NULL;
|
|
rdataset = ISC_LIST_NEXT(rdataset, link))
|
|
{
|
|
if (printdata(rdataset, name) != ISC_R_SUCCESS) {
|
|
fprintf(stderr, "print data failed\n");
|
|
}
|
|
}
|
|
}
|
|
|
|
dns_client_freeresanswer(client, &namelist);
|
|
|
|
/* Cleanup */
|
|
cleanup:
|
|
dns_client_destroy(&client);
|
|
|
|
if (taskmgr != NULL) {
|
|
isc_taskmgr_destroy(&taskmgr);
|
|
}
|
|
if (timermgr != NULL) {
|
|
isc_timermgr_destroy(&timermgr);
|
|
}
|
|
if (socketmgr != NULL) {
|
|
isc_socketmgr_destroy(&socketmgr);
|
|
}
|
|
if (actx != NULL) {
|
|
isc_appctx_destroy(&actx);
|
|
}
|
|
isc_mem_detach(&mctx);
|
|
|
|
if (keynamestr != NULL) {
|
|
isc_mem_destroy(&keymctx);
|
|
}
|
|
dns_lib_shutdown();
|
|
|
|
return (0);
|
|
}
|