ki9
/
nsupdate-sshfp
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added argument for server

master
Keith Irwin 2023-11-03 19:51:01 -06:00
parent 56e24f1051
commit d94af01048
Signed by: ki9
GPG Key ID: DF773B3F4A88DA86
3 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@ -22,11 +22,11 @@ Bash script to update [SSHFP records](https://en.wikipedia.org/wiki/SSHFP_record
## Usage
```sh
$ nsupdate-sshfp <domain> <ttl> <tsig>
$ nsupdate-sshfp <domain> <server> <ttl> <tsig>
```
For example:
```sh
$ nsupdate-sshfp example.com 86400 'hmac-sha512:mykeyname:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX=='
$ nsupdate-sshfp ssh.example.com ns.example.com 86400 'hmac-sha512:mykeyname:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX=='
```

11
nsupdate-sshfp
View File

@ -1,14 +1,15 @@
#!/bin/bash
# nsupdate-sshfp
if [ "$#" -ne "3" ]; then
echo "USAGE: ${0} <domain> <ttl> <tsig-key>"
if [ "$#" -ne "4" ]; then
echo "USAGE: ${0} <domain> <server> <ttl> <tsig>"
exit 1
fi
domain="${1}"
ttl="${2}"
tsig_key="${3}"
server="${2}"
ttl="${3}"
tsig_key="${4}"
new_records=$(ssh-keygen -r ${1} | sed -e 's/^/add /' -e "s/ IN / ${ttl} /")
printf 'delete %s sshfp\n%s\nsend\n' "${domain}" "${new_records}" \
printf 'server %s\ndelete %s sshfp\n%s\nsend\n' "${server}" "${domain}" "${new_records}" \
| nsupdate -y "${tsig_key}"

3
systemd/nsupdate-sshfp@.service
View File

@ -7,9 +7,10 @@ Wants=nsupdate-sshfp@%i
[Service]
Type=oneshot
Environment=DOMAIN=%i
Environment=SERVER=ns.example.com
Environment=TTL=86400
Environment=TSIG=hmac-sha512:mykeyname:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX==
ExecStart=/usr/local/bin/nsupdate-sshfp ${DOMAIN} ${TTL} ${TSIG}
ExecStart=/usr/local/bin/nsupdate-sshfp ${DOMAIN} ${SERVER} ${TTL} ${TSIG}
[Install]
WantedBy=multi-user.target