[dns-operations] DNSSEC validation using DS records as trust anchors

[Jacques Latour]

Emil,
Have a look at https://github.com/CIRALabs/DSAP, most of what you’re looking for is in there somewhere.
Jacques


From: dns-operations [mailto:dns-operations-bounces at dns-oarc.net] On Behalf Of Emil Natan
Sent: January-03-17 11:50 AM
To: dns-operations at dns-oarc.net
Subject: [dns-operations] DNSSEC validation using DS records as trust anchors

Hello,

I'm looking for DNSSEC validation tool/library (ideally PHP/Python/shell) which can perform validation on a DNSKEY record using trust anchor provided as DS record.
The use case is Registry receives request for DS delegation data update, then it uses this data and the DNSKEY RRSet from the authoritative servers to validate the DNSKEY RRSIG.
Any recommendations will be much appreciated. Thank you in advance.

Emil





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20170103/964ad1fb/attachment.html>