004c5fca9d
Abstract the caddy call and make it simpler. See #3261 for some part of the discussion. Go from: ~~~ go func init() { caddy.RegisterPlugin("any", caddy.Plugin{ ServerType: "dns", Action: setup, }) } ~~~ To: ~~~ go func init() { plugin.Register("any", setup) } ~~~ This requires some external documents in coredns.io to be updated as well; the old way still works, so it's backwards compatible. Signed-off-by: Miek Gieben <miek@miek.nl>
109 lines
2.5 KiB
Go
109 lines
2.5 KiB
Go
package sign
|
|
|
|
import (
|
|
"fmt"
|
|
"math/rand"
|
|
"path/filepath"
|
|
"time"
|
|
|
|
"github.com/coredns/coredns/core/dnsserver"
|
|
"github.com/coredns/coredns/plugin"
|
|
|
|
"github.com/caddyserver/caddy"
|
|
)
|
|
|
|
func init() { plugin.Register("sign", setup) }
|
|
|
|
func setup(c *caddy.Controller) error {
|
|
sign, err := parse(c)
|
|
if err != nil {
|
|
return plugin.Error("sign", err)
|
|
}
|
|
|
|
c.OnStartup(sign.OnStartup)
|
|
c.OnStartup(func() error {
|
|
for _, signer := range sign.signers {
|
|
go signer.refresh(DurationRefreshHours)
|
|
}
|
|
return nil
|
|
})
|
|
c.OnShutdown(func() error {
|
|
for _, signer := range sign.signers {
|
|
close(signer.stop)
|
|
}
|
|
return nil
|
|
})
|
|
|
|
// Don't call AddPlugin, *sign* is not a plugin.
|
|
return nil
|
|
}
|
|
|
|
func parse(c *caddy.Controller) (*Sign, error) {
|
|
sign := &Sign{}
|
|
config := dnsserver.GetConfig(c)
|
|
|
|
for c.Next() {
|
|
if !c.NextArg() {
|
|
return nil, c.ArgErr()
|
|
}
|
|
dbfile := c.Val()
|
|
if !filepath.IsAbs(dbfile) && config.Root != "" {
|
|
dbfile = filepath.Join(config.Root, dbfile)
|
|
}
|
|
|
|
origins := make([]string, len(c.ServerBlockKeys))
|
|
copy(origins, c.ServerBlockKeys)
|
|
args := c.RemainingArgs()
|
|
if len(args) > 0 {
|
|
origins = args
|
|
}
|
|
for i := range origins {
|
|
origins[i] = plugin.Host(origins[i]).Normalize()
|
|
}
|
|
|
|
signers := make([]*Signer, len(origins))
|
|
for i := range origins {
|
|
signers[i] = &Signer{
|
|
dbfile: dbfile,
|
|
origin: plugin.Host(origins[i]).Normalize(),
|
|
jitter: time.Duration(float32(DurationJitter) * rand.Float32()),
|
|
directory: "/var/lib/coredns",
|
|
stop: make(chan struct{}),
|
|
signedfile: fmt.Sprintf("db.%ssigned", origins[i]), // origins[i] is a fqdn, so it ends with a dot, hence %ssigned.
|
|
}
|
|
}
|
|
|
|
for c.NextBlock() {
|
|
switch c.Val() {
|
|
case "key":
|
|
pairs, err := keyParse(c)
|
|
if err != nil {
|
|
return sign, err
|
|
}
|
|
for i := range signers {
|
|
for _, p := range pairs {
|
|
p.Public.Header().Name = signers[i].origin
|
|
}
|
|
signers[i].keys = append(signers[i].keys, pairs...)
|
|
}
|
|
case "directory":
|
|
dir := c.RemainingArgs()
|
|
if len(dir) == 0 || len(dir) > 1 {
|
|
return sign, fmt.Errorf("can only be one argument after %q", "directory")
|
|
}
|
|
if !filepath.IsAbs(dir[0]) && config.Root != "" {
|
|
dir[0] = filepath.Join(config.Root, dir[0])
|
|
}
|
|
for i := range signers {
|
|
signers[i].directory = dir[0]
|
|
signers[i].signedfile = fmt.Sprintf("db.%ssigned", signers[i].origin)
|
|
}
|
|
default:
|
|
return nil, c.Errf("unknown property '%s'", c.Val())
|
|
}
|
|
}
|
|
sign.signers = append(sign.signers, signers...)
|
|
}
|
|
|
|
return sign, nil
|
|
}
|