Added the TLSA DNS record.

This commit is contained in:
Revertron
2021-10-08 09:14:24 +02:00
parent f8a7d8e868
commit d502b6c890
6 changed files with 64 additions and 4 deletions
+43 -1
View File
@@ -39,6 +39,7 @@ pub enum QueryType {
AAAA, // 28
SRV, // 33
OPT, // 41
TLSA, // 52
}
impl QueryType {
@@ -55,6 +56,7 @@ impl QueryType {
QueryType::AAAA => 28,
QueryType::SRV => 33,
QueryType::OPT => 41,
QueryType::TLSA => 52,
}
}
@@ -70,6 +72,7 @@ impl QueryType {
28 => QueryType::AAAA,
33 => QueryType::SRV,
41 => QueryType::OPT,
52 => QueryType::TLSA,
_ => QueryType::UNKNOWN(num),
}
}
@@ -169,6 +172,14 @@ pub enum DnsRecord {
flags: u32,
data: String
}, // 41
TLSA {
domain: String,
certificate_usage: u8,
selector: u8,
matching_type: u8,
data: Vec<u8>,
ttl: TransientTtl
}, // 52
}
impl DnsRecord {
@@ -281,6 +292,16 @@ impl DnsRecord {
Ok(DnsRecord::OPT { packet_len: class, flags: ttl, data })
}
QueryType::TLSA => {
let certificate_usage = buffer.read()?;
let selector = buffer.read()?;
let matching_type = buffer.read()?;
let cur_pos = buffer.pos();
let data_len = data_len - 3;
let data = buffer.get_range(cur_pos, data_len as usize)?.to_vec();
buffer.step(data_len as usize)?;
Ok(DnsRecord::TLSA { domain, certificate_usage, selector, matching_type, data, ttl: TransientTtl(ttl) })
}
QueryType::UNKNOWN(_) => {
buffer.step(data_len as usize)?;
@@ -422,6 +443,20 @@ impl DnsRecord {
buffer.write_u8(*b)?;
}
}
DnsRecord::TLSA { ref domain, certificate_usage, selector, matching_type, ref data, ttl: TransientTtl(ttl) } => {
buffer.write_qname(domain)?;
buffer.write_u16(QueryType::TLSA.to_num())?;
buffer.write_u16(1)?;
buffer.write_u32(ttl)?;
buffer.write_u16((data.len() + 3) as u16)?;
buffer.write_u8(certificate_usage)?;
buffer.write_u8(selector)?;
buffer.write_u8(matching_type)?;
for b in data {
buffer.write_u8(*b)?;
}
}
DnsRecord::OPT { packet_len, flags, ref data } => {
buffer.write_u8(0)?;
buffer.write_u16(QueryType::OPT.to_num())?;
@@ -454,6 +489,7 @@ impl DnsRecord {
DnsRecord::SOA { .. } => QueryType::SOA,
DnsRecord::TXT { .. } => QueryType::TXT,
DnsRecord::OPT { .. } => QueryType::OPT,
DnsRecord::TLSA { .. } => QueryType::TLSA,
}
}
@@ -469,7 +505,8 @@ impl DnsRecord {
| DnsRecord::UNKNOWN { ref domain, .. }
| DnsRecord::SOA { ref domain, .. }
| DnsRecord::TXT { ref domain, .. } => Some(domain.clone()),
DnsRecord::OPT { .. } => None,
DnsRecord::OPT { .. }
| DnsRecord::TLSA { .. } => None,
}
}
@@ -490,6 +527,10 @@ impl DnsRecord {
Some(result)
},
DnsRecord::UNKNOWN { ref domain, .. } => Some(domain.clone()),
DnsRecord::TLSA { ref domain, certificate_usage, selector, matching_type, ref data, .. } => {
let data = crate::commons::to_hex(data);
Some(format!("{} {} {} {} {}", domain, certificate_usage, selector, matching_type, &data))
},
DnsRecord::OPT { .. } => None,
}
}
@@ -506,6 +547,7 @@ impl DnsRecord {
| DnsRecord::UNKNOWN { ttl: TransientTtl(ttl), .. }
| DnsRecord::SOA { ttl: TransientTtl(ttl), .. }
| DnsRecord::TXT { ttl: TransientTtl(ttl), .. } => ttl,
| DnsRecord::TLSA { ttl: TransientTtl(ttl), .. } => ttl,
DnsRecord::OPT { .. } => 0
}
}