weppos / dnscaa

dnscaa - CAA DNS Library for Go

The dnscaa package provides a library (not yet) and command-line tool to fetch the DNS CAA (Certification Authority Authorization) records for a hostname.

CLI usage

Compile

$ go build cmd/digcaa/digcaa.go

Run

$ ./digcaa www.comodo.com

2 records found
comodo.com.	1199	IN	CAA	0 iodef "mailto:[email protected]"
comodo.com.	1199	IN	CAA	0 issue "comodoca.com"

Or use go run to compile-and-run the command:

$ go run cmd/digcaa/digcaa.go www.comodo.com

2 records found
comodo.com.	1199	IN	CAA	0 iodef "mailto:[email protected]"
comodo.com.	1199	IN	CAA	0 issue "comodoca.com"

dnscaa's Issues

Add a license

This project needs some sort of license so others can use the code, or not but either way it would be good to know :)

cannot find package "github.com/weppos/dnscaa"

It seems build instructions are incomplete.

After clone this repo, when I type

go build cmd/digcaa/digcaa.go

I get

cmd/digcaa/digcaa.go:8:2: cannot find package "github.com/weppos/dnscaa" in any of:
	/usr/lib/golang/src/github.com/weppos/dnscaa (from $GOROOT)
	($GOPATH not set)

It seems some variables are not defined.

Could you help me about this issue?

Installation Instructions

Could you add installation instructions for us Go uninitiated? I've written it and added it below. I just had to install this on a new VM and if I miss a step I run into all sorts of weird issues. Having step by step instructions are very useful. (For anyone trying to install, make sure to rm everything you've already tried before using these or you'll get errors. That means your gopath src for dnscaa as well as the git clone must be removed before re-installing)

apt-get update
apt-get install golang
mkdir /root/go
export GOPATH=/root/go
go get github.com/weppos/dnscaa
git clone https://github.com/weppos/dnscaa.git
cd dnscaa
go build cmd/digcaa/digcaa.go
 
 
To run CAA tool:
 
./digcaa google.com

Why is 8.8.8.8 hard-coded?

Looks like Google Public DNS (8.8.8.8) is always used to lookup CAA:

dnscaa/dnscaa.go

Line 96 in 07e0c5f

rsp, _, err := r.dnsClient.Exchange(msg, "8.8.8.8:53")

, is that correct? Why is that? Just because it was the quickest solution, or is there some edge we want to mitigate?