summaryrefslogtreecommitdiff
path: root/package/network/services/dnsmasq
diff options
context:
space:
mode:
authorSteven Barth <cyrus@openwrt.org>2014-06-18 10:04:29 +0000
committerSteven Barth <cyrus@openwrt.org>2014-06-18 10:04:29 +0000
commit132cbe5e29a0f7e4f2b5b80dec42dec974571eac (patch)
tree062e7b5a300cb516aba4a0932b57f79b85c23749 /package/network/services/dnsmasq
parent5f64a3e7cebf2cdd166d8e44f41cc614cbd4ee3c (diff)
downloadmtk-20170518-132cbe5e29a0f7e4f2b5b80dec42dec974571eac.zip
mtk-20170518-132cbe5e29a0f7e4f2b5b80dec42dec974571eac.tar.gz
mtk-20170518-132cbe5e29a0f7e4f2b5b80dec42dec974571eac.tar.bz2
dnsmasq: add UCI DNSSEC runtime support
Ship keys for the root zone and add two uci options to enable DNSSEC checks: Option 'dnssec': Activate DNSSEC validation Option 'dnsseccheckunsigned': Ensure answers without DNSSEC are in unsigned zones. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41245
Diffstat (limited to 'package/network/services/dnsmasq')
-rw-r--r--package/network/services/dnsmasq/files/dnsmasq.init8
1 files changed, 8 insertions, 0 deletions
diff --git a/package/network/services/dnsmasq/files/dnsmasq.init b/package/network/services/dnsmasq/files/dnsmasq.init
index f7edb28..9f16d5f 100644
--- a/package/network/services/dnsmasq/files/dnsmasq.init
+++ b/package/network/services/dnsmasq/files/dnsmasq.init
@@ -14,6 +14,7 @@ ADD_LOCAL_HOSTNAME=1
CONFIGFILE="/var/etc/dnsmasq.conf"
HOSTFILE="/tmp/hosts/dhcp"
+TRUSTANCHORSFILE="/usr/share/dnsmasq/trust-anchors.conf"
xappend() {
local value="$1"
@@ -186,6 +187,13 @@ dnsmasq() {
config_list_foreach "$cfg" rebind_domain append_rebind_domain
}
+ config_get dnssec "$cfg" dnssec
+ [ "$dnssec" -gt 0 ] && {
+ xappend "--conf-file=$TRUSTANCHORSFILE"
+ xappend "--dnssec"
+ append_bool "$cfg" dnsseccheckunsigned "--dnssec-check-unsigned"
+ }
+
dhcp_option_add "$cfg" "" 0
xappend "--dhcp-broadcast=tag:needs-broadcast"