Implement Csync for CDNSKEY

[karlerikounapuu]

Closes #658

Requires cdnskey-scanner to be installed, so it can crawl cdnskeys of domain zone.

By default, when new CDNSKEY record is found, it is added to the zone if scanner & Job has gone through 3 cycles and the CDNSKEY data is persistent.

Required modifications to config/application.yml:

cdns_scanner_input_file: '/desired/path/to/fred/cdns-scanner/input.txt'
cdns_scanner_output_file: 'desired/path/to/fred/cdns-scanner/output.txt'
dnssec_resolver_ips: 8.8.8.8, 8.8.4.4

...where file specificed in cdns_scanner_input_file is the file which is used for STDIN of cdnskey-scanner binary and cdns_scanner_output_file is the STDOUT of cdnskey-scanner.

CsyncJob.run(generate: true) can be used to generate content of cdns_scanner_input_file, but it can be created by external script as well. It's optional.

CsyncJob.run reads the cdns_scanner_output_file line by line and keeps track of cycles and whether and when new CDNSKEY can be pushed to zone as DNSKEY.

It is expected that CsyncJob.run is ran after cdnskey-scanner has processed the data and successfully outputed data to cdns_scanner_output_file. Output file must be not modified.

It is expected that CsyncJob.run is triggered only once per each cdnskey-scanner output. Each job run is considered as 1 cycle. As mentioned before, 3/3 cycles triggers the update of zone if the domain doesn't have active DNSSEC data or instantly after first run if it does.

Launch of cdnskey-scanner is not implemented in this PR as the scanning process itself is time consuming. But generally something like this via Cron should work:

cat /path/to/input.txt | cdnskey-scanner <max run time in sec> 1>/path/to/output.txt
bin/rails r -e production "CsyncJob.run" >> log/cron.log 2>&1

• Better logging

• Send poll message when DNSSEC data changed for domain

• Notify registrant if DNSKEY has been added/deleted from zone

• cdnskey 0 3 0 AA== (remove)

• Validate DNSSEC doesn't break with new soon-to-be-saved DS

[ratM1n]

on imoprt job execution, I get error: https://gist.github.com/ratM1n/3856a801e45328361b6ed2f723b9cca5

[ratM1n]

"generate" works as it should, but in import, i get this: https://gist.github.com/ratM1n/bc6601d530935f1093f7363d2478788a

[karlerikounapuu]

Before merging, please undo commit a53475d

For testing, Ensure you use RAILS_ENV staging and mock the root anchor via config/application.yml trusted_dnskey key.
Example record:

trusted_dnskey: kreative.ee. 3578 IN DNSKEY 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+ KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==

[ratM1n]

last change broke database query: https://gist.github.com/ratM1n/0e8ffabac7bf4010d7f3a7cd192268c3