Initial commit
This commit is contained in:
parent
b97f30faf4
commit
1ade94ce28
16 changed files with 118 additions and 170 deletions
4
.gitignore
vendored
4
.gitignore
vendored
|
|
@ -1,2 +1,2 @@
|
|||
checker-openpgpkey
|
||||
checker-openpgpkey.so
|
||||
checker-email-keys
|
||||
checker-email-keys.so
|
||||
|
|
|
|||
|
|
@ -6,9 +6,9 @@ WORKDIR /src
|
|||
COPY go.mod go.sum ./
|
||||
RUN go mod download
|
||||
COPY . .
|
||||
RUN CGO_ENABLED=0 go build -ldflags "-X main.Version=${CHECKER_VERSION}" -o /checker-openpgpkey .
|
||||
RUN CGO_ENABLED=0 go build -ldflags "-X main.Version=${CHECKER_VERSION}" -o /checker-email-keys .
|
||||
|
||||
FROM scratch
|
||||
COPY --from=builder /checker-openpgpkey /checker-openpgpkey
|
||||
COPY --from=builder /checker-email-keys /checker-email-keys
|
||||
EXPOSE 8080
|
||||
ENTRYPOINT ["/checker-openpgpkey"]
|
||||
ENTRYPOINT ["/checker-email-keys"]
|
||||
|
|
|
|||
2
Makefile
2
Makefile
|
|
@ -1,4 +1,4 @@
|
|||
CHECKER_NAME := checker-openpgpkey
|
||||
CHECKER_NAME := checker-email-keys
|
||||
CHECKER_IMAGE := happydomain/$(CHECKER_NAME)
|
||||
CHECKER_VERSION ?= custom-build
|
||||
|
||||
|
|
|
|||
2
NOTICE
2
NOTICE
|
|
@ -1,4 +1,4 @@
|
|||
checker-openpgpkey
|
||||
checker-email-keys
|
||||
Copyright (c) 2026 The happyDomain Authors
|
||||
|
||||
This product is licensed under the MIT License (see LICENSE).
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
# checker-openpgpkey
|
||||
# checker-email-keys
|
||||
|
||||
DANE-Email posture checker for happyDomain.
|
||||
|
||||
|
|
@ -107,7 +107,7 @@ Auto-filled by the host: `domain_name`, `subdomain`, `service`,
|
|||
make plugin
|
||||
|
||||
# Standalone HTTP server
|
||||
make && ./checker-openpgpkey -listen :8080
|
||||
make && ./checker-email-keys -listen :8080
|
||||
```
|
||||
|
||||
## HTML report
|
||||
|
|
|
|||
|
|
@ -1,9 +1,3 @@
|
|||
// This file is part of the happyDomain (R) project.
|
||||
// Copyright (c) 2026 happyDomain
|
||||
// Authors: Pierre-Olivier Mercier, et al.
|
||||
//
|
||||
// Licensed under the MIT License (see LICENSE).
|
||||
|
||||
package checker
|
||||
|
||||
import (
|
||||
|
|
@ -123,13 +117,9 @@ func (p *emailKeyProvider) Collect(ctx context.Context, opts sdk.CheckerOptions)
|
|||
data.RecordCount = len(ans.Records)
|
||||
|
||||
if ans.Rcode == dns.RcodeNameError || len(ans.Records) == 0 {
|
||||
sev := SeverityCrit
|
||||
if ans.Rcode == dns.RcodeNameError {
|
||||
sev = SeverityCrit
|
||||
}
|
||||
data.Findings = append(data.Findings, Finding{
|
||||
Code: CodeDNSNoRecord,
|
||||
Severity: sev,
|
||||
Severity: SeverityCrit,
|
||||
Message: fmt.Sprintf("Authoritative DNS returned no %s record at %s.", dns.TypeToString[qtype], data.QueriedOwner),
|
||||
Fix: "Ensure the record is present in the zone and that the zone has been loaded by the authoritative servers.",
|
||||
})
|
||||
|
|
|
|||
|
|
@ -1,9 +1,3 @@
|
|||
// This file is part of the happyDomain (R) project.
|
||||
// Copyright (c) 2026 happyDomain
|
||||
// Authors: Pierre-Olivier Mercier, et al.
|
||||
//
|
||||
// Licensed under the MIT License (see LICENSE).
|
||||
|
||||
package checker
|
||||
|
||||
import (
|
||||
|
|
|
|||
|
|
@ -1,9 +1,3 @@
|
|||
// This file is part of the happyDomain (R) project.
|
||||
// Copyright (c) 2026 happyDomain
|
||||
// Authors: Pierre-Olivier Mercier, et al.
|
||||
//
|
||||
// Licensed under the MIT License (see LICENSE).
|
||||
|
||||
package checker
|
||||
|
||||
import (
|
||||
|
|
|
|||
|
|
@ -1,9 +1,3 @@
|
|||
// This file is part of the happyDomain (R) project.
|
||||
// Copyright (c) 2026 happyDomain
|
||||
// Authors: Pierre-Olivier Mercier, et al.
|
||||
//
|
||||
// Licensed under the MIT License (see LICENSE).
|
||||
|
||||
package checker
|
||||
|
||||
import (
|
||||
|
|
|
|||
|
|
@ -1,9 +1,3 @@
|
|||
// This file is part of the happyDomain (R) project.
|
||||
// Copyright (c) 2026 happyDomain
|
||||
// Authors: Pierre-Olivier Mercier, et al.
|
||||
//
|
||||
// Licensed under the MIT License (see LICENSE).
|
||||
|
||||
package checker
|
||||
|
||||
import (
|
||||
|
|
|
|||
|
|
@ -1,9 +1,3 @@
|
|||
// This file is part of the happyDomain (R) project.
|
||||
// Copyright (c) 2026 happyDomain
|
||||
// Authors: Pierre-Olivier Mercier, et al.
|
||||
//
|
||||
// Licensed under the MIT License (see LICENSE).
|
||||
|
||||
package checker
|
||||
|
||||
import (
|
||||
|
|
|
|||
|
|
@ -1,9 +1,3 @@
|
|||
// This file is part of the happyDomain (R) project.
|
||||
// Copyright (c) 2026 happyDomain
|
||||
// Authors: Pierre-Olivier Mercier, et al.
|
||||
//
|
||||
// Licensed under the MIT License (see LICENSE).
|
||||
|
||||
package checker
|
||||
|
||||
import (
|
||||
|
|
|
|||
|
|
@ -1,9 +1,3 @@
|
|||
// This file is part of the happyDomain (R) project.
|
||||
// Copyright (c) 2026 happyDomain
|
||||
// Authors: Pierre-Olivier Mercier, et al.
|
||||
//
|
||||
// Licensed under the MIT License (see LICENSE).
|
||||
|
||||
// Package checker implements the OPENPGPKEY/SMIMEA DANE checker for
|
||||
// happyDomain. It runs a comprehensive testsuite on the DNS-published
|
||||
// OpenPGP key (RFC 7929) or S/MIME certificate (RFC 8162) corresponding
|
||||
|
|
|
|||
2
go.mod
2
go.mod
|
|
@ -1,4 +1,4 @@
|
|||
module git.happydns.org/checker-openpgpkey
|
||||
module git.happydns.org/checker-email-keys
|
||||
|
||||
go 1.25.0
|
||||
|
||||
|
|
|
|||
10
main.go
10
main.go
|
|
@ -4,23 +4,23 @@ import (
|
|||
"flag"
|
||||
"log"
|
||||
|
||||
openpgpkey "git.happydns.org/checker-openpgpkey/checker"
|
||||
emailkeys "git.happydns.org/checker-email-keys/checker"
|
||||
sdk "git.happydns.org/checker-sdk-go/checker"
|
||||
)
|
||||
|
||||
var listenAddr = flag.String("listen", ":8080", "HTTP listen address")
|
||||
|
||||
// Version is the standalone binary's version. Override with:
|
||||
//
|
||||
// go build -ldflags "-X main.Version=1.2.3" .
|
||||
var Version = "custom-build"
|
||||
|
||||
var listenAddr = flag.String("listen", ":8080", "HTTP listen address")
|
||||
|
||||
func main() {
|
||||
flag.Parse()
|
||||
|
||||
openpgpkey.Version = Version
|
||||
emailkeys.Version = Version
|
||||
|
||||
server := sdk.NewServer(openpgpkey.Provider())
|
||||
server := sdk.NewServer(emailkeys.Provider())
|
||||
if err := server.ListenAndServe(*listenAddr); err != nil {
|
||||
log.Fatalf("server error: %v", err)
|
||||
}
|
||||
|
|
|
|||
|
|
@ -4,18 +4,18 @@
|
|||
package main
|
||||
|
||||
import (
|
||||
openpgpkey "git.happydns.org/checker-openpgpkey/checker"
|
||||
emailkeys "git.happydns.org/checker-email-keys/checker"
|
||||
sdk "git.happydns.org/checker-sdk-go/checker"
|
||||
)
|
||||
|
||||
// Version is the plugin's version, meant to be overridden by CI:
|
||||
//
|
||||
// go build -buildmode=plugin -ldflags "-X main.Version=1.2.3" -o checker-openpgpkey.so ./plugin
|
||||
// go build -buildmode=plugin -ldflags "-X main.Version=1.2.3" -o checker-email-keys.so ./plugin
|
||||
var Version = "custom-build"
|
||||
|
||||
// NewCheckerPlugin is the symbol resolved by happyDomain when loading
|
||||
// the .so file.
|
||||
func NewCheckerPlugin() (*sdk.CheckerDefinition, sdk.ObservationProvider, error) {
|
||||
openpgpkey.Version = Version
|
||||
return openpgpkey.Definition(), openpgpkey.Provider(), nil
|
||||
emailkeys.Version = Version
|
||||
return emailkeys.Definition(), emailkeys.Provider(), nil
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue