Re: [dane] Anyone interested in writing a DANE tutorial?

[Paul Wouters <[e-mail]>]

On Fri, 28 Sep 2012, Dan York wrote:

> and will check out the code and try it out.  I also noticed recently that you added TLSA support into dnspython although it wasn't
> immediately clear to me how to use that support. (dnspython could use some examples related to dnssec in general... at some point I may
> go and write some if no else does that first.)

documentation there is indeed lacking,

[paul@bofh ~]$ python
Python 2.7.3 (default, Jul 24 2012, 10:05:38) 
[GCC 4.7.0 20120507 (Red Hat 4.7.0-5)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import dns.resolver
>>> answers = dns.resolver.query('_443.import dns.resolver', 'TLSA')
>>> answers
<dns.resolver.Answer object at 0x2259350>
>>> for rdata in answers:
...     print rdata
... 
1 0 1 6bcff9a283336dd1ed99a9c40427741b5658863bd54f0a876a2bc4bf8d822112
>>> answers[0].selector
0
>>> answers[0].usage
1


Hope this helps,

Note that Pieter's TLSA patch in dnspython has been pushed into Fedora/RHEL a
few days ago. It's available in updates-testing and should be available
as a released update in a week or so.

Paul