/* $NetBSD: resolve.c,v 1.3.2.2 2024/02/25 15:43:17 martin Exp $ */ /* * Copyright (C) Internet Systems Consortium, Inc. ("ISC") * * SPDX-License-Identifier: MPL-2.0 * * This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this * file, you can obtain one at https://mozilla.org/MPL/2.0/. * * See the COPYRIGHT file distributed with this work for additional * information regarding copyright ownership. */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include /* * Global contexts */ isc_mem_t *ctxs_mctx = NULL; isc_appctx_t *ctxs_actx = NULL; isc_nm_t *ctxs_netmgr = NULL; isc_taskmgr_t *ctxs_taskmgr = NULL; isc_timermgr_t *ctxs_timermgr = NULL; static void ctxs_destroy(void) { isc_managers_destroy(&ctxs_netmgr, &ctxs_taskmgr, &ctxs_timermgr); if (ctxs_actx != NULL) { isc_appctx_destroy(&ctxs_actx); } if (ctxs_mctx != NULL) { isc_mem_destroy(&ctxs_mctx); } } static isc_result_t ctxs_init(void) { isc_result_t result; isc_mem_create(&ctxs_mctx); result = isc_appctx_create(ctxs_mctx, &ctxs_actx); if (result != ISC_R_SUCCESS) { goto fail; } isc_managers_create(ctxs_mctx, 1, 0, &ctxs_netmgr, &ctxs_taskmgr, &ctxs_timermgr); result = isc_app_ctxstart(ctxs_actx); if (result != ISC_R_SUCCESS) { goto fail; } return (ISC_R_SUCCESS); fail: ctxs_destroy(); return (result); } static char *algname = NULL; static isc_result_t printdata(dns_rdataset_t *rdataset, dns_name_t *owner) { isc_buffer_t target; isc_result_t result; isc_region_t r; char t[4096]; if (!dns_rdataset_isassociated(rdataset)) { printf("[WARN: empty]\n"); return (ISC_R_SUCCESS); } isc_buffer_init(&target, t, sizeof(t)); result = dns_rdataset_totext(rdataset, owner, false, false, &target); if (result != ISC_R_SUCCESS) { return (result); } isc_buffer_usedregion(&target, &r); printf("%.*s", (int)r.length, (char *)r.base); return (ISC_R_SUCCESS); } noreturn static void usage(void); static void usage(void) { fprintf(stderr, "resolve [-t RRtype] " "[[-a algorithm] [-e] -k keyname -K keystring] " "[-S domain:serveraddr_for_domain ] [-s server_address]" "[-b address[#port]] hostname\n"); exit(1); } static void set_key(dns_client_t *client, char *keynamestr, char *keystr, bool is_sep) { isc_result_t result; dns_fixedname_t fkeyname; unsigned int namelen; dns_name_t *keyname; dns_rdata_dnskey_t keystruct; unsigned char keydata[4096]; isc_buffer_t keydatabuf; unsigned char rrdata[4096]; isc_buffer_t rrdatabuf; isc_buffer_t b; isc_textregion_t tr; isc_region_t r; dns_secalg_t alg; if (algname != NULL) { tr.base = algname; tr.length = strlen(algname); result = dns_secalg_fromtext(&alg, &tr); if (result != ISC_R_SUCCESS) { fprintf(stderr, "failed to identify the algorithm\n"); exit(1); } } else { alg = DNS_KEYALG_RSASHA1; } keystruct.common.rdclass = dns_rdataclass_in; keystruct.common.rdtype = dns_rdatatype_dnskey; keystruct.flags = DNS_KEYOWNER_ZONE; /* fixed */ if (is_sep) { keystruct.flags |= DNS_KEYFLAG_KSK; } keystruct.protocol = DNS_KEYPROTO_DNSSEC; /* fixed */ keystruct.algorithm = alg; isc_buffer_init(&keydatabuf, keydata, sizeof(keydata)); isc_buffer_init(&rrdatabuf, rrdata, sizeof(rrdata)); result = isc_base64_decodestring(keystr, &keydatabuf); if (result != ISC_R_SUCCESS) { fprintf(stderr, "base64 decode failed\n"); exit(1); } isc_buffer_usedregion(&keydatabuf, &r); keystruct.datalen = r.length; keystruct.data = r.base; result = dns_rdata_fromstruct(NULL, keystruct.common.rdclass, keystruct.common.rdtype, &keystruct, &rrdatabuf); if (result != ISC_R_SUCCESS) { fprintf(stderr, "failed to construct key rdata\n"); exit(1); } namelen = strlen(keynamestr); isc_buffer_init(&b, keynamestr, namelen); isc_buffer_add(&b, namelen); keyname = dns_fixedname_initname(&fkeyname); result = dns_name_fromtext(keyname, &b, dns_rootname, 0, NULL); if (result != ISC_R_SUCCESS) { fprintf(stderr, "failed to construct key name\n"); exit(1); } result = dns_client_addtrustedkey(client, dns_rdataclass_in, dns_rdatatype_dnskey, keyname, &rrdatabuf); if (result != ISC_R_SUCCESS) { fprintf(stderr, "failed to add key for %s\n", keynamestr); exit(1); } } static void addserver(dns_client_t *client, const char *addrstr, const char *port, const char *name_space) { struct addrinfo hints, *res; int gaierror; isc_sockaddr_t sa; isc_sockaddrlist_t servers; isc_result_t result; isc_buffer_t b; dns_fixedname_t fname; dns_name_t *name = NULL; memset(&hints, 0, sizeof(hints)); hints.ai_family = AF_UNSPEC; hints.ai_socktype = SOCK_DGRAM; hints.ai_protocol = IPPROTO_UDP; hints.ai_flags = AI_NUMERICHOST; gaierror = getaddrinfo(addrstr, port, &hints, &res); if (gaierror != 0) { fprintf(stderr, "getaddrinfo failed: %s\n", gai_strerror(gaierror)); exit(1); } INSIST(res->ai_addrlen <= sizeof(sa.type)); memmove(&sa.type, res->ai_addr, res->ai_addrlen); sa.length = (unsigned int)res->ai_addrlen; freeaddrinfo(res); ISC_LINK_INIT(&sa, link); ISC_LIST_INIT(servers); ISC_LIST_APPEND(servers, &sa, link); if (name_space != NULL) { unsigned int namelen = strlen(name_space); isc_buffer_constinit(&b, name_space, namelen); isc_buffer_add(&b, namelen); name = dns_fixedname_initname(&fname); result = dns_name_fromtext(name, &b, dns_rootname, 0, NULL); if (result != ISC_R_SUCCESS) { fprintf(stderr, "failed to convert qname: %u\n", result); exit(1); } } result = dns_client_setservers(client, dns_rdataclass_in, name, &servers); if (result != ISC_R_SUCCESS) { fprintf(stderr, "set server failed: %u\n", result); exit(1); } } int main(int argc, char *argv[]) { int ch; isc_textregion_t tr; char *server = NULL; char *altserver = NULL; char *altserveraddr = NULL; char *altservername = NULL; dns_client_t *client = NULL; char *keynamestr = NULL; char *keystr = NULL; isc_result_t result; isc_buffer_t b; dns_fixedname_t qname0; unsigned int namelen; dns_name_t *qname = NULL, *name = NULL; dns_rdatatype_t type = dns_rdatatype_a; dns_rdataset_t *rdataset = NULL; dns_namelist_t namelist; unsigned int clientopt, resopt = 0; bool is_sep = false; const char *port = "53"; struct in_addr in4; struct in6_addr in6; isc_sockaddr_t a4, a6; isc_sockaddr_t *addr4 = NULL, *addr6 = NULL; while ((ch = isc_commandline_parse(argc, argv, "a:b:es:t:k:K:p:S:")) != -1) { switch (ch) { case 't': tr.base = isc_commandline_argument; tr.length = strlen(isc_commandline_argument); result = dns_rdatatype_fromtext(&type, &tr); if (result != ISC_R_SUCCESS) { fprintf(stderr, "invalid RRtype: %s\n", isc_commandline_argument); exit(1); } break; case 'a': algname = isc_commandline_argument; break; case 'b': if (inet_pton(AF_INET, isc_commandline_argument, &in4) == 1) { if (addr4 != NULL) { fprintf(stderr, "only one local " "address per family " "can be specified\n"); exit(1); } isc_sockaddr_fromin(&a4, &in4, 0); addr4 = &a4; } else if (inet_pton(AF_INET6, isc_commandline_argument, &in6) == 1) { if (addr6 != NULL) { fprintf(stderr, "only one local " "address per family " "can be specified\n"); exit(1); } isc_sockaddr_fromin6(&a6, &in6, 0); addr6 = &a6; } else { fprintf(stderr, "invalid address %s\n", isc_commandline_argument); exit(1); } break; case 'e': is_sep = true; break; case 'S': if (altserver != NULL) { fprintf(stderr, "alternate server " "already defined: %s\n", altserver); exit(1); } altserver = isc_commandline_argument; break; case 's': if (server != NULL) { fprintf(stderr, "server " "already defined: %s\n", server); exit(1); } server = isc_commandline_argument; break; case 'k': keynamestr = isc_commandline_argument; break; case 'K': keystr = isc_commandline_argument; break; case 'p': port = isc_commandline_argument; break; default: usage(); } } argc -= isc_commandline_index; argv += isc_commandline_index; if (argc < 1) { usage(); } if (altserver != NULL) { char *cp; cp = strchr(altserver, ':'); if (cp == NULL) { fprintf(stderr, "invalid alternate server: %s\n", altserver); exit(1); } *cp = '\0'; altservername = altserver; altserveraddr = cp + 1; } result = ctxs_init(); if (result != ISC_R_SUCCESS) { goto cleanup; } result = dst_lib_init(ctxs_mctx, NULL); if (result != ISC_R_SUCCESS) { fprintf(stderr, "dst_lib_init failed: %u\n", result); exit(1); } clientopt = 0; result = dns_client_create(ctxs_mctx, ctxs_actx, ctxs_taskmgr, ctxs_netmgr, ctxs_timermgr, clientopt, &client, addr4, addr6); if (result != ISC_R_SUCCESS) { fprintf(stderr, "dns_client_create failed: %u, %s\n", result, isc_result_totext(result)); exit(1); } /* Set the nameserver */ if (server == NULL) { irs_resconf_t *resconf = NULL; isc_sockaddrlist_t *nameservers; result = irs_resconf_load(ctxs_mctx, "/etc/resolv.conf", &resconf); if (result != ISC_R_SUCCESS && result != ISC_R_FILENOTFOUND) { fprintf(stderr, "irs_resconf_load failed: %u\n", result); exit(1); } nameservers = irs_resconf_getnameservers(resconf); result = dns_client_setservers(client, dns_rdataclass_in, NULL, nameservers); if (result != ISC_R_SUCCESS) { irs_resconf_destroy(&resconf); fprintf(stderr, "dns_client_setservers failed: %u\n", result); exit(1); } irs_resconf_destroy(&resconf); } else { addserver(client, server, port, NULL); } /* Set the alternate nameserver (when specified) */ if (altserver != NULL) { addserver(client, altserveraddr, port, altservername); } /* Install DNSSEC key (if given) */ if (keynamestr != NULL) { if (keystr == NULL) { fprintf(stderr, "key string is missing " "while key name is provided\n"); exit(1); } set_key(client, keynamestr, keystr, is_sep); } /* Construct qname */ namelen = strlen(argv[0]); isc_buffer_init(&b, argv[0], namelen); isc_buffer_add(&b, namelen); qname = dns_fixedname_initname(&qname0); result = dns_name_fromtext(qname, &b, dns_rootname, 0, NULL); if (result != ISC_R_SUCCESS) { fprintf(stderr, "failed to convert qname: %u\n", result); } /* Perform resolution */ if (keynamestr == NULL) { resopt |= DNS_CLIENTRESOPT_NODNSSEC; } ISC_LIST_INIT(namelist); result = dns_client_resolve(client, qname, dns_rdataclass_in, type, resopt, &namelist); if (result != ISC_R_SUCCESS) { fprintf(stderr, "resolution failed: %s\n", isc_result_totext(result)); } for (name = ISC_LIST_HEAD(namelist); name != NULL; name = ISC_LIST_NEXT(name, link)) { for (rdataset = ISC_LIST_HEAD(name->list); rdataset != NULL; rdataset = ISC_LIST_NEXT(rdataset, link)) { if (printdata(rdataset, name) != ISC_R_SUCCESS) { fprintf(stderr, "print data failed\n"); } } } dns_client_freeresanswer(client, &namelist); /* Cleanup */ cleanup: if (client != NULL) { dns_client_detach(&client); } ctxs_destroy(); dst_lib_destroy(); return (0); }