Viewing file:  edit_zonekey.cgi (4.7 KB) -rwxr-xr-x
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
#!/usr/bin/perl
# Display the signing key for a zone, or offer to set one up
use strict;
use warnings;
no warnings 'redefine';
no warnings 'uninitialized';
our (%access, %in, %text, $in, %config);
require './bind8-lib.pl';
&ReadParse();
my $zone = &get_zone_name_or_error($in{'zone'}, $in{'view'});
my $dom = $zone->{'name'};
&can_edit_zone($zone) ||
&error($text{'master_ecannot'});
$access{'dnssec'} || &error($text{'dnssec_ecannot'});
my $desc = &zone_subhead($zone);
&ui_print_header($desc, $text{'zonekey_title'}, "",
undef, undef, undef, undef, &restart_links($zone));
# Check if the zone already has a key, from a DNSKEY record
my @keyrecs = &get_dnskey_record($zone);
if (@keyrecs) {
# Tell the user we already have it
print &text('zonekey_already'),"\n";
print $text{'zonekey_webmin'},"\n";
print "<p>\n";
my @keys = &get_dnssec_key($zone);
if (!@keys) {
print &text('zonekey_noprivate'),"<p>\n";
}
elsif (!ref($keys[0])) {
print &text('zonekey_eprivate', $keys[0]),"<p>\n";
@keys = ( );
}
foreach my $key (@keys) {
# Collapsible section for key details
my $kt = $key->{'ksk'} ? 'ksk' : 'zone';
my ($keyrec) = grep { $_->{'values'}->[0] ==
($key->{'ksk'} ? 257 : 256) } @keyrecs;
next if (!$keyrec);
my $keyline = format_dnssec_public_key(
join(" ", $keyrec->{'name'}, $keyrec->{'class'},
$keyrec->{'type'}, @{$keyrec->{'values'}}));
print &ui_hidden_start($text{'zonekey_expand'.$kt},
$kt, 0, "edit_zonekey.cgi?$in");
print $text{'zonekey_public'},"<br>\n";
print &ui_textarea("keyline", $keyline, 4, 80, "off", 0,
"readonly style='width:90%'"),"<br>\n";
print &text('zonekey_publicfile',
"<tt>$key->{'publicfile'}</tt>"),"<p>\n";
print $text{'zonekey_private'},"<br>\n";
print &ui_textarea(
"private", $key->{'privatetext'}, 14, 80,
"off", 0, "readonly style='width:90%'"),"<br>\n";
print &text('zonekey_privatefile',
"<tt>$key->{'privatefile'}</tt>"),"<br>\n";
if ($key->{'algorithm'}) {
print &text('zonekey_algorithm',
"<tt>$key->{'algorithm'}</tt>"),"<br>\n";
}
print &ui_hidden_end();
}
my $ds = &get_ds_record($zone);
if ($ds) {
print $text{'zonekey_ds'},"<br>\n";
# Split DS records in string into a list
my @ds = split(/\s(?=\S+\.\s+\d+\s+IN\s+DS\s+\d+\s+
\d+\s+\d+\s+[0-9A-Fa-f]{16,})/x, $ds);
print &ui_textarea("ds", join("\n", @ds), 2, 80, "off", 0,
"readonly style='width:90%'"),"<br>\n";
print &ui_columns_start([
$text{'zonekey_ds_keytag'},
$text{'zonekey_ds_alg'},
$text{'zonekey_ds_type'},
$text{'zonekey_ds_digest'},
]);
foreach my $r (@ds) {
if ($r =~ /
\bDS\s+(?<key_tag>\d+)\s+(?<algorithm>\d+)\s+
(?<digest_type>\d+)\s+
(?<digest>[0-9A-Fa-f]+)\b/x) {
print &ui_columns_row([
$+{key_tag}, $+{algorithm},
$+{digest_type}, $+{digest}]);
}
}
print &ui_columns_end();
}
# Offer to disable
print &ui_hr();
print &ui_buttons_start();
print &ui_buttons_row("disable_zonekey.cgi", $text{'zonekey_disable'},
$text{'zonekey_disabledesc'}."<br>\n".
&ui_checkbox("keep", 1, $text{'zonekey_keep'}, 1),
&ui_hidden("view", $in{'view'}).
&ui_hidden("zone", $in{'zone'}));
# Offer to sign now
print &ui_buttons_row("sign_zone.cgi", $text{'zonekey_sign'},
$text{'zonekey_signdesc'},
&ui_hidden("view", $in{'view'}).
&ui_hidden("zone", $in{'zone'}));
# Offer to re-generate now, for zones with a KSK
if (@keys == 2) {
print &ui_buttons_row("resign_zone.cgi",
$text{'zonekey_resign'},
$text{'zonekey_resigndesc'},
&ui_hidden("view", $in{'view'}).
&ui_hidden("zone", $in{'zone'}));
}
print &ui_buttons_end();
}
else {
# Offer to setup
print $text{'zonekey_desc'},"<p>\n";
print &ui_form_start("enable_zonekey.cgi", "post");
print &ui_hidden("zone", $in{'zone'});
print &ui_hidden("view", $in{'view'});
print &ui_table_start($text{'zonekey_header'}, undef, 2);
# Key algorithm
print &ui_table_row($text{'zonekey_alg'},
&ui_select("alg", $config{'tmpl_dnssecalg'} || "RSASHA256",
[ &list_dnssec_algorithms() ]));
# Key size
print &ui_table_row($text{'zonekey_size'},
&ui_radio("size_def", 1, [ [ 1, $text{'zonekey_ave'}."<br>" ],
[ 2, $text{'zonekey_strong'}."<br>"],
[ 0, $text{'zonekey_other'} ] ]).
" ".&ui_textbox("size", undef, 6));
# Number of keys
print &ui_table_row($text{'zonedef_single'},
&ui_radio("single", 0, [ [ 0, $text{'zonedef_two'} ],
[ 1, $text{'zonedef_one'} ] ]));
print &ui_table_end();
print &ui_form_end([ [ undef, $text{'zonekey_enable'} ] ]);
}
&ui_print_footer("edit_master.cgi?zone=$in{'zone'}&view=$in{'view'}",
$text{'master_return'});
|