DownloadThe Validating Stub Resolver (vsResolver) is a DNS stub resolver that implements the Domain Name System Security Extensions (DNSSEC) specified in RFC 4033, RFC 4034 and RFC 4035. These add data origin authentication and data integrity to the Domain Name System. vsResolver extends the dnspython toolkit (http://www.dnspython.org/) and uses the pycrypto library for its underlying crypto implementation(https://www.dlitz.net/software/pycrypto/).
Click on this link for a ridiculously simple python page demonstrating vsResolver working - http://superawesum.novas.us/py/hello.py. Try entering some domains and click submit. Then, enable details, click submit to get the details,and compare with what you get for that domain at http://dnssec-debugger.verisignlabs.com.
Features
- DNS Security Extenstions (DNSSEC) Validating Stub Resolver
- Written in python, extends dnspython, which uses pycrypto
- Backwards compatible with dns.Resolver.query()
- Returns a query result along with a DNSSEC rating of BOGUS, PROVABLY_INSECURE or SECURE
- negative results (e.g., NXDOMAIN) are also rated as BOGUS, PROVABLY_INSECURE or SECURE
- See RFC4033, RFC4034 and RFC4035 for details on DNSSEC
- Can be used as is as a utility to determine the DNSSEC status of a domain
- Can be used as a software library to provide DNSSEC valiation to a DNS query
- SecureOnly, NoBogus and Permissive modes of operation
- Can be run with root trust anchor and/or specific islands of trust
Project Samples
