FISHER_/dnscrypt-resolvers
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CI: update actions, check DNSSEC capability

Browse Source
This commit is contained in:
Frank Denis 2024-05-19 23:49:45 +02:00
parent 5c72c439f0
commit 551bc7c073
5 changed files with 30 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/ci.yml vendored
View File

@ -11,7 +11,7 @@ jobs:
run: run:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@v4
- name: check with dnscrypt-proxy - name: check with dnscrypt-proxy
run: | run: |

28
.github/workflows/prcheck.sh vendored
View File

@ -1,6 +1,6 @@
#! /bin/sh #! /bin/sh
DNSLOOKUP_VERSION=1.5.1 DNSLOOKUP_VERSION=1.10.1
case "$(uname -ms)" in case "$(uname -ms)" in
Darwin\ x86_64) DNSLOOKUP_ARCH=darwin-amd64 ;; Darwin\ x86_64) DNSLOOKUP_ARCH=darwin-amd64 ;;
@ -74,7 +74,7 @@ if [ ! -s "$NEW_ENTRIES" ]; then
exit 0 exit 0
fi fi
curl -qL https://github.com/jedisct1/dnscrypt-proxy/releases/download/2.1.3/dnscrypt-proxy-linux_x86_64-2.1.3.tar.gz | tar xzvf - curl -qL https://github.com/jedisct1/dnscrypt-proxy/releases/download/2.1.5/dnscrypt-proxy-linux_x86_64-2.1.5.tar.gz | tar xzvf -
cd linux-x86_64 || exit 1 cd linux-x86_64 || exit 1
exit_code=0 exit_code=0
@ -83,6 +83,8 @@ CONFIG="test-dnscrypt-proxy.toml"
PIDFILE="dnscrypt-proxy.pid" PIDFILE="dnscrypt-proxy.pid"
LOGFILE="dnscrypt-proxy.log" LOGFILE="dnscrypt-proxy.log"
while read -r stamp; do while read -r stamp; do
echo
echo ========================
echo echo
echo "* Checking resolver with stamp:" echo "* Checking resolver with stamp:"
echo "$stamp" echo "$stamp"
@ -97,7 +99,24 @@ while read -r stamp; do
echo '[static."test"]' echo '[static."test"]'
echo "stamp = '${stamp}'" echo "stamp = '${stamp}'"
} >"$CONFIG" } >"$CONFIG"
if ! ./dnscrypt-proxy -config "$CONFIG" -show-certs; then
exit_code=1
fi
echo
echo ---
echo
dnssec=false
if ./dnscrypt-proxy -config "$CONFIG" -list -json | grep -F '"dnssec": true' >/dev/null; then
dnssec=true
echo "DNSSEC support is expected"
else
echo "DNSSEC support is not expected"
fi
./dnscrypt-proxy -config "$CONFIG" -pidfile "$PIDFILE" -logfile "$LOGFILE" -loglevel 1 & ./dnscrypt-proxy -config "$CONFIG" -pidfile "$PIDFILE" -logfile "$LOGFILE" -loglevel 1 &
sleep 5 sleep 5
skip_log=false skip_log=false
if grep -q 'DNSCrypt relay' "$LOGFILE"; then if grep -q 'DNSCrypt relay' "$LOGFILE"; then
@ -110,6 +129,11 @@ while read -r stamp; do
echo "** UNABLE TO GET A RESPONSE FROM THE RESOLVER **" echo "** UNABLE TO GET A RESPONSE FROM THE RESOLVER **"
echo "Bogus stamp: ${stamp}" echo "Bogus stamp: ${stamp}"
exit_code=1 exit_code=1
elif $dnssec; then
if ./dnscrypt-proxy -config "$CONFIG" -resolve -check example.com | grep -F "resolver doesn't support DNSSEC" >/dev/null; then
echo "** DNSSEC SUPPORT IS EXPECTED BUT NOT DETECTED **"
exit_code=1
fi
fi fi
kill $(cat "$PIDFILE") kill $(cat "$PIDFILE")
if [ "$skip_log" = false ]; then if [ "$skip_log" = false ]; then

2
.github/workflows/prcheck.yml vendored
View File

@ -11,7 +11,7 @@ jobs:
prcheck: prcheck:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@v4
- name: new entries - name: new entries
run: .github/workflows/prcheck.sh run: .github/workflows/prcheck.sh

2
.github/workflows/resolverscheck.sh vendored
View File

@ -1,6 +1,6 @@
#! /bin/sh #! /bin/sh
DNSLOOKUP_VERSION=1.5.1 DNSLOOKUP_VERSION=1.10.1
case "$(uname -ms)" in case "$(uname -ms)" in
Darwin\ x86_64) DNSLOOKUP_ARCH=darwin-amd64 ;; Darwin\ x86_64) DNSLOOKUP_ARCH=darwin-amd64 ;;

2
.github/workflows/resolverscheck.yml vendored
View File

@ -11,7 +11,7 @@ jobs:
resolverscheck: resolverscheck:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@v4
- name: resolvers check - name: resolvers check
run: .github/workflows/resolverscheck.sh run: .github/workflows/resolverscheck.sh