mirror of
https://github.com/coredns/coredns.git
synced 2026-04-09 13:35:33 -04:00
* core: Add full TSIG verification in DoH transport This PR add full TSIG verification in DoH using dns.TsigVerify() 7943 --------- Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
74 lines
1.6 KiB
Go
74 lines
1.6 KiB
Go
package dnsserver
|
|
|
|
import (
|
|
"net"
|
|
"net/http"
|
|
|
|
"github.com/miekg/dns"
|
|
)
|
|
|
|
// DoHWriter is a dns.ResponseWriter that adds more specific LocalAddr and RemoteAddr methods.
|
|
type DoHWriter struct {
|
|
// raddr is the remote's address. This can be optionally set.
|
|
raddr net.Addr
|
|
// laddr is our address. This can be optionally set.
|
|
laddr net.Addr
|
|
|
|
// request is the HTTP request we're currently handling.
|
|
request *http.Request
|
|
|
|
// tsigStatus stores the TSIG verification result for the request.
|
|
tsigStatus error
|
|
|
|
// Msg is a response to be written to the client.
|
|
Msg *dns.Msg
|
|
}
|
|
|
|
// WriteMsg stores the message to be written to the client.
|
|
func (d *DoHWriter) WriteMsg(m *dns.Msg) error {
|
|
d.Msg = m
|
|
return nil
|
|
}
|
|
|
|
// Write stores the message to be written to the client.
|
|
func (d *DoHWriter) Write(b []byte) (int, error) {
|
|
d.Msg = new(dns.Msg)
|
|
return len(b), d.Msg.Unpack(b)
|
|
}
|
|
|
|
// RemoteAddr returns the remote address.
|
|
func (d *DoHWriter) RemoteAddr() net.Addr {
|
|
return d.raddr
|
|
}
|
|
|
|
// LocalAddr returns the local address.
|
|
func (d *DoHWriter) LocalAddr() net.Addr {
|
|
return d.laddr
|
|
}
|
|
|
|
// Network no-op implementation.
|
|
func (d *DoHWriter) Network() string {
|
|
return ""
|
|
}
|
|
|
|
// Request returns the HTTP request.
|
|
func (d *DoHWriter) Request() *http.Request {
|
|
return d.request
|
|
}
|
|
|
|
// Close no-op implementation.
|
|
func (d *DoHWriter) Close() error {
|
|
return nil
|
|
}
|
|
|
|
// TsigStatus returns the TSIG verification status for this request.
|
|
func (d *DoHWriter) TsigStatus() error {
|
|
return d.tsigStatus
|
|
}
|
|
|
|
// TsigTimersOnly no-op implementation.
|
|
func (d *DoHWriter) TsigTimersOnly(_ bool) {}
|
|
|
|
// Hijack no-op implementation.
|
|
func (d *DoHWriter) Hijack() {}
|