[dns-operations] DNSSEC validation using DS records as trust anchors

Jacques Latour jacques.latour at cira.ca
Tue Jan 3 17:11:08 UTC 2017

Have a look at https://github.com/CIRALabs/DSAP, most of what you’re looking for is in there somewhere.

From: dns-operations [mailto:dns-operations-bounces at dns-oarc.net] On Behalf Of Emil Natan
Sent: January-03-17 11:50 AM
To: dns-operations at dns-oarc.net
Subject: [dns-operations] DNSSEC validation using DS records as trust anchors


I'm looking for DNSSEC validation tool/library (ideally PHP/Python/shell) which can perform validation on a DNSKEY record using trust anchor provided as DS record.
The use case is Registry receives request for DS delegation data update, then it uses this data and the DNSKEY RRSet from the authoritative servers to validate the DNSKEY RRSIG.
Any recommendations will be much appreciated. Thank you in advance.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20170103/964ad1fb/attachment.html>

More information about the dns-operations mailing list