From d94af0104824dfa64cbba079e8e7d82732887dbe Mon Sep 17 00:00:00 2001 From: Keith Irwin Date: Fri, 3 Nov 2023 19:51:01 -0600 Subject: [PATCH] Added argument for server --- README.md | 4 ++-- nsupdate-sshfp | 11 ++++++----- systemd/nsupdate-sshfp@.service | 3 ++- 3 files changed, 10 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index a1e392a..0eaa031 100644 --- a/README.md +++ b/README.md @@ -22,11 +22,11 @@ Bash script to update [SSHFP records](https://en.wikipedia.org/wiki/SSHFP_record ## Usage ```sh -$ nsupdate-sshfp +$ nsupdate-sshfp ``` For example: ```sh -$ nsupdate-sshfp example.com 86400 'hmac-sha512:mykeyname:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX==' +$ nsupdate-sshfp ssh.example.com ns.example.com 86400 'hmac-sha512:mykeyname:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX==' ``` diff --git a/nsupdate-sshfp b/nsupdate-sshfp index c31215e..7bfa13a 100755 --- a/nsupdate-sshfp +++ b/nsupdate-sshfp @@ -1,14 +1,15 @@ #!/bin/bash # nsupdate-sshfp -if [ "$#" -ne "3" ]; then - echo "USAGE: ${0} " +if [ "$#" -ne "4" ]; then + echo "USAGE: ${0} " exit 1 fi domain="${1}" -ttl="${2}" -tsig_key="${3}" +server="${2}" +ttl="${3}" +tsig_key="${4}" new_records=$(ssh-keygen -r ${1} | sed -e 's/^/add /' -e "s/ IN / ${ttl} /") -printf 'delete %s sshfp\n%s\nsend\n' "${domain}" "${new_records}" \ +printf 'server %s\ndelete %s sshfp\n%s\nsend\n' "${server}" "${domain}" "${new_records}" \ | nsupdate -y "${tsig_key}" diff --git a/systemd/nsupdate-sshfp@.service b/systemd/nsupdate-sshfp@.service index 47f1d55..c7aa70b 100644 --- a/systemd/nsupdate-sshfp@.service +++ b/systemd/nsupdate-sshfp@.service @@ -7,9 +7,10 @@ Wants=nsupdate-sshfp@%i [Service] Type=oneshot Environment=DOMAIN=%i +Environment=SERVER=ns.example.com Environment=TTL=86400 Environment=TSIG=hmac-sha512:mykeyname:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX== -ExecStart=/usr/local/bin/nsupdate-sshfp ${DOMAIN} ${TTL} ${TSIG} +ExecStart=/usr/local/bin/nsupdate-sshfp ${DOMAIN} ${SERVER} ${TTL} ${TSIG} [Install] WantedBy=multi-user.target