Skip to content

Instantly share code, notes, and snippets.

@killerbees19

killerbees19/dnssec-check.sh Secret

Last active February 12, 2023 17:52
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save killerbees19/601205e1bfc1a95bd829508cd909f32b to your computer and use it in GitHub Desktop.
Save killerbees19/601205e1bfc1a95bd829508cd909f32b to your computer and use it in GitHub Desktop.
Download ZIP
netcup *sigh*
Raw
dnssec-check.sh
#!/bin/bash
# v1.0.0 (2023-02-12) cs@fnx.li
cat ~/.getssl/.*.domains.list \
| while IFS= read -r domain
do
# ACHTUNG: Der Resolver muss DNSSEC validieren!
# Dieses Script validiert selbst keine Antworten.
# Es wird nur überprüft, ob eine Antwort erfolgt.
[[ -z "$(dig DS "$domain" +short)" || -z "$(dig NS "$domain" +short)" ]] \
&& printf '%s: %s\n' "$domain" "ERROR" >&2 \
|| printf '%s: %s\n' "$domain" "OK"
done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment