- Notifications
You must be signed in to change notification settings - Fork47
Tool for fetching/refreshing DNS Root Zone trust anchors
License
NotificationsYou must be signed in to change notification settings
iana-org/get-trust-anchor
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
This tool writes out a copy of the current DNSSEC trust anchor. It is compatible with both Python 2.7 and Python 3.x, and has no dependencies exceptPython and theOpenSSL command line tool.
The DNSSEC trust anchor will be fetch fromIANA, and the root KSK (Key Signing Key) will be fetched usingGoogle Public DNS over HTTPS, by downloading theroot zone file, or optionally directly from the DNSSEC trust anchor.
python get_trust_anchor.py