DNS: Show DNSSEC status on index page if deavtivated

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2017-04-02 19:48:20 +01:00
parent 73b3a1264f
commit 183b23b5ca
13 changed files with 36 additions and 0 deletions

View File

@@ -439,12 +439,18 @@ enable_dnssec() {
# Don't do anything if DNSSEC is already activated
[ "${status}" = "no" ] && return 0
# Log DNSSEC status
echo "on" > /var/ipfire/red/dnssec-status
# Activate DNSSEC and flush cache with any stale and unvalidated data
unbound-control -q set_option val-permissive-mode: no
unbound-control -q flush_zone .
}
disable_dnssec() {
# Log DNSSEC status
echo "off" > /var/ipfire/red/dnssec-status
unbound-control -q set_option val-permissive-mode: yes
}