GitLab

Hello,

Following below discussion (link) I propose to add DS RECORD functions for API

https://www.howtoforge.com/community/threads/dnssec-cascade-inside-ispconfig.86988/#post-423182

code added in 'interface/lib/classes/remote.d/dns.inc.php' // ----------------------------------------------------------------------------------------------------------------

//* Get record details public function dns_ds_get($session_id, $primary_id) { return $this->dns_rr_get($session_id, $primary_id, 'DS'); }

//* Add a record public function dns_ds_add($session_id, $client_id, $params, $update_serial=false) { return $this->dns_rr_add($session_id, $client_id, $params, $update_serial, 'DS'); }

//* Update a record public function dns_ds_update($session_id, $client_id, $primary_id, $params, $update_serial=false) { return $this->dns_rr_update($session_id, $client_id, $primary_id, $params, $update_serial, 'DS'); }

//* Delete a record public function dns_ds_delete($session_id, $primary_id, $update_serial=false) { return $this->dns_rr_delete($session_id, $primary_id, $update_serial, 'DS'); }

As a reminder, in case you want to have a cascade of zones using DNSSEC, you need to :

1. let's create child.dom.tld 1.a Create zone with 'dnssec_wanted=y'
2. in parent zone ie dom.tld 2.a. Create DS_record pointing to child zone (this is the aim of the functions I am adding) 2.b. Create 2 NS_records pointing to child zone
3. update parent zone dom.tld to have zone signing updated
4. don't forget to create secondary Zones on your secondary bind server

Many thanks for your trust francoisPE