1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
package sign
import (
"fmt"
"math/rand"
"path/filepath"
"time"
"github.com/coredns/caddy"
"github.com/coredns/coredns/core/dnsserver"
"github.com/coredns/coredns/plugin"
)
func init() { plugin.Register("sign", setup) }
func setup(c *caddy.Controller) error {
sign, err := parse(c)
if err != nil {
return plugin.Error("sign", err)
}
c.OnStartup(sign.OnStartup)
c.OnStartup(func() error {
for _, signer := range sign.signers {
go signer.refresh(durationRefreshHours)
}
return nil
})
c.OnShutdown(func() error {
for _, signer := range sign.signers {
close(signer.stop)
}
return nil
})
// Don't call AddPlugin, *sign* is not a plugin.
return nil
}
func parse(c *caddy.Controller) (*Sign, error) {
sign := &Sign{}
config := dnsserver.GetConfig(c)
for c.Next() {
if !c.NextArg() {
return nil, c.ArgErr()
}
dbfile := c.Val()
if !filepath.IsAbs(dbfile) && config.Root != "" {
dbfile = filepath.Join(config.Root, dbfile)
}
origins := plugin.OriginsFromArgsOrServerBlock(c.RemainingArgs(), c.ServerBlockKeys)
signers := make([]*Signer, len(origins))
for i := range origins {
signers[i] = &Signer{
dbfile: dbfile,
origin: origins[i],
jitterIncep: time.Duration(float32(durationInceptionJitter) * rand.Float32()),
jitterExpir: time.Duration(float32(durationExpirationDayJitter) * rand.Float32()),
directory: "/var/lib/coredns",
stop: make(chan struct{}),
signedfile: fmt.Sprintf("db.%ssigned", origins[i]), // origins[i] is a fqdn, so it ends with a dot, hence %ssigned.
}
}
for c.NextBlock() {
switch c.Val() {
case "key":
pairs, err := keyParse(c)
if err != nil {
return sign, err
}
for i := range signers {
for _, p := range pairs {
p.Public.Header().Name = signers[i].origin
}
signers[i].keys = append(signers[i].keys, pairs...)
}
case "directory":
dir := c.RemainingArgs()
if len(dir) == 0 || len(dir) > 1 {
return sign, fmt.Errorf("can only be one argument after %q", "directory")
}
if !filepath.IsAbs(dir[0]) && config.Root != "" {
dir[0] = filepath.Join(config.Root, dir[0])
}
for i := range signers {
signers[i].directory = dir[0]
signers[i].signedfile = fmt.Sprintf("db.%ssigned", signers[i].origin)
}
default:
return nil, c.Errf("unknown property '%s'", c.Val())
}
}
sign.signers = append(sign.signers, signers...)
}
return sign, nil
}
|
