From ravirocks1021 at gmail.com  Thu May 12 04:39:40 2016
From: ravirocks1021 at gmail.com (ravin goyal)
Date: Thu, 12 May 2016 10:09:40 +0530
Subject: [ldns-users] Fwd: Regarding dns resolver in c using ldns
In-Reply-To: <CANU0Mn0C1MK2pLZ24XeXji-P8Wz_iS=Cso5H_Y1GrpJfZfPGHA@mail.gmail.com>
References: <CANU0Mn0C1MK2pLZ24XeXji-P8Wz_iS=Cso5H_Y1GrpJfZfPGHA@mail.gmail.com>
Message-ID: <CANU0Mn1jEwdk6_zR0MWLBe2YeoZHXgvMgomzsH8UmWe8_OdjxQ@mail.gmail.com>

Hii

I am trying to implement dns resolver in C using ldns and following
example codes given on website i implemented basic dns resolver for
TXT records

But main concern is i want to set a static server address rather than
looking up /etc/resolv.conf file

And for that i have found ldns_resolver_set_source is what i actually
need for this
but i don't see any working example/code to use this function

I followed the docs but i still in middle of how I am going to use
this function.
Any help??

Regards
Ravin


From willem at nlnetlabs.nl  Thu May 12 09:35:22 2016
From: willem at nlnetlabs.nl (Willem Toorop)
Date: Thu, 12 May 2016 11:35:22 +0200
Subject: [ldns-users] Fwd: Regarding dns resolver in c using ldns
In-Reply-To: <CANU0Mn1jEwdk6_zR0MWLBe2YeoZHXgvMgomzsH8UmWe8_OdjxQ@mail.gmail.com>
References: <CANU0Mn0C1MK2pLZ24XeXji-P8Wz_iS=Cso5H_Y1GrpJfZfPGHA@mail.gmail.com>
 <CANU0Mn1jEwdk6_zR0MWLBe2YeoZHXgvMgomzsH8UmWe8_OdjxQ@mail.gmail.com>
Message-ID: <57344E5A.3050700@nlnetlabs.nl>

Hi Ravin,

I suspect you want to use ldns_resolver_push_nameserver to target a
server directly with a query.  See attached example for its usage.

Best regards,

-- Willem

Op 12-05-16 om 06:39 schreef ravin goyal:
> Hii
> 
> I am trying to implement dns resolver in C using ldns and following
> example codes given on website i implemented basic dns resolver for
> TXT records
> 
> But main concern is i want to set a static server address rather than
> looking up /etc/resolv.conf file
> 
> And for that i have found ldns_resolver_set_source is what i actually
> need for this
> but i don't see any working example/code to use this function
> 
> I followed the docs but i still in middle of how I am going to use
> this function.
> Any help??
> 
> Regards
> Ravin
> _______________________________________________
> ldns-users mailing list
> ldns-users at open.nlnetlabs.nl
> https://open.nlnetlabs.nl/mailman/listinfo/ldns-users
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: push_nameserver_example.c
Type: text/x-csrc
Size: 1030 bytes
Desc: not available
URL: <http://lists.nlnetlabs.nl/pipermail/ldns-users/attachments/20160512/faa46dc1/attachment.bin>

From ravirocks1021 at gmail.com  Thu May 12 10:13:23 2016
From: ravirocks1021 at gmail.com (ravin goyal)
Date: Thu, 12 May 2016 15:43:23 +0530
Subject: [ldns-users] Fwd: Regarding dns resolver in c using ldns
In-Reply-To: <57344E5A.3050700@nlnetlabs.nl>
References: <CANU0Mn0C1MK2pLZ24XeXji-P8Wz_iS=Cso5H_Y1GrpJfZfPGHA@mail.gmail.com>
 <CANU0Mn1jEwdk6_zR0MWLBe2YeoZHXgvMgomzsH8UmWe8_OdjxQ@mail.gmail.com>
 <57344E5A.3050700@nlnetlabs.nl>
Message-ID: <CANU0Mn2=ZHYVq1ZE3jj83aY-XYyuKAcg80sNP-QmbbWJL03WtQ@mail.gmail.com>

Thanks! Willem


That helped me

Regards
Ravin

On 12 May 2016 at 15:05, Willem Toorop <willem at nlnetlabs.nl> wrote:
> Hi Ravin,
>
> I suspect you want to use ldns_resolver_push_nameserver to target a
> server directly with a query.  See attached example for its usage.
>
> Best regards,
>
> -- Willem
>
> Op 12-05-16 om 06:39 schreef ravin goyal:
>> Hii
>>
>> I am trying to implement dns resolver in C using ldns and following
>> example codes given on website i implemented basic dns resolver for
>> TXT records
>>
>> But main concern is i want to set a static server address rather than
>> looking up /etc/resolv.conf file
>>
>> And for that i have found ldns_resolver_set_source is what i actually
>> need for this
>> but i don't see any working example/code to use this function
>>
>> I followed the docs but i still in middle of how I am going to use
>> this function.
>> Any help??
>>
>> Regards
>> Ravin
>> _______________________________________________
>> ldns-users mailing list
>> ldns-users at open.nlnetlabs.nl
>> https://open.nlnetlabs.nl/mailman/listinfo/ldns-users
>>
>
>
> _______________________________________________
> ldns-users mailing list
> ldns-users at open.nlnetlabs.nl
> https://open.nlnetlabs.nl/mailman/listinfo/ldns-users
>


From vladimir.levijev at gmail.com  Tue May 17 12:16:05 2016
From: vladimir.levijev at gmail.com (Vladimir Levijev)
Date: Tue, 17 May 2016 15:16:05 +0300
Subject: [ldns-users] Limit number of recursions when using LDNS_RD
Message-ID: <CAAn0BQZ5mZUAZwku+q=Doufm-BZUJGNZ_koHiL1YExV741jXHw@mail.gmail.com>

Hi,

I couldn't find any information on whether it's possible to limit the
number of recursions when performing a recursive IN DNAME (or any
other) query?

Thanks,

VL


From ravirocks1021 at gmail.com  Wed May 18 12:08:01 2016
From: ravirocks1021 at gmail.com (ravin goyal)
Date: Wed, 18 May 2016 17:38:01 +0530
Subject: [ldns-users] Fwd: Regarding dns resolver in c using ldns
In-Reply-To: <CANU0Mn2=ZHYVq1ZE3jj83aY-XYyuKAcg80sNP-QmbbWJL03WtQ@mail.gmail.com>
References: <CANU0Mn0C1MK2pLZ24XeXji-P8Wz_iS=Cso5H_Y1GrpJfZfPGHA@mail.gmail.com>
 <CANU0Mn1jEwdk6_zR0MWLBe2YeoZHXgvMgomzsH8UmWe8_OdjxQ@mail.gmail.com>
 <57344E5A.3050700@nlnetlabs.nl>
 <CANU0Mn2=ZHYVq1ZE3jj83aY-XYyuKAcg80sNP-QmbbWJL03WtQ@mail.gmail.com>
Message-ID: <CANU0Mn3jg1-KxM6Y=eduFjT3GTko_qXFuWgp1u9zZkEf-pVX_g@mail.gmail.com>

Hii Willem

Regarding ldns_resolver_push_nameserver to target a server directly
with a query , in the example code that you have sent using

while creating nameserver address you have done this :

 ldns_rdf_new_frm_str( LDNS_RDF_TYPE_A, "185.49.140.60")

but in here i want to set the domain name rather than the ip address itself

I tried using  ldns_rdf_new_frm_str( LDNS_RDF_TYPE_DNAME, "domain.com")

but it is not working

How can we set the domain name of the nameserver rather than ip address


thanks in advance.


From willem at nlnetlabs.nl  Wed May 18 12:28:49 2016
From: willem at nlnetlabs.nl (Willem Toorop)
Date: Wed, 18 May 2016 14:28:49 +0200
Subject: [ldns-users] Fwd: Regarding dns resolver in c using ldns
In-Reply-To: <CANU0Mn3jg1-KxM6Y=eduFjT3GTko_qXFuWgp1u9zZkEf-pVX_g@mail.gmail.com>
References: <CANU0Mn0C1MK2pLZ24XeXji-P8Wz_iS=Cso5H_Y1GrpJfZfPGHA@mail.gmail.com>
 <CANU0Mn1jEwdk6_zR0MWLBe2YeoZHXgvMgomzsH8UmWe8_OdjxQ@mail.gmail.com>
 <57344E5A.3050700@nlnetlabs.nl>
 <CANU0Mn2=ZHYVq1ZE3jj83aY-XYyuKAcg80sNP-QmbbWJL03WtQ@mail.gmail.com>
 <CANU0Mn3jg1-KxM6Y=eduFjT3GTko_qXFuWgp1u9zZkEf-pVX_g@mail.gmail.com>
Message-ID: <573C6001.3060506@nlnetlabs.nl>

Hi Ravin,

This is a little of a chicken and egg problem :).
I suspect you want to target the authoritative nameservers for a given
domain.  In that case you have to find out which authoritative
nameservers serve that domain and their IP addresses first.

So to target the authoritative nameservers serving domain.com, you first
have to query for the NS RRset for domain.com (perhaps with a
ldns_resolver initialized with /etc/resolv.conf ; i.e.
ldns_resolver_new_frm_fp(&res, NULL)).

Below is the query done with drill, but it could be done with a
ldns_resolver initialized with /etc/resolv.conf just as well...

$ drill domain.com NS
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 59096
;; flags: qr rd ra ; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4
;; QUESTION SECTION:
;; domain.com.	IN	NS

;; ANSWER SECTION:
domain.com.	86400	IN	NS	ns1.p13.dynect.net.
domain.com.	86400	IN	NS	ns2.p13.dynect.net.
domain.com.	86400	IN	NS	ns3.p13.dynect.net.
domain.com.	86400	IN	NS	ns4.p13.dynect.net.

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:
ns1.p13.dynect.net.	68784	IN	A	208.78.70.13
ns2.p13.dynect.net.	68784	IN	A	204.13.250.13
ns3.p13.dynect.net.	68784	IN	A	208.78.71.13
ns4.p13.dynect.net.	68784	IN	A	204.13.251.13

;; Query time: 454 msec
;; SERVER: 185.49.140.101
;; WHEN: Wed May 18 14:21:03 2016
;; MSG SIZE  rcvd: 178

Now push those IP addresses in the additional section on the
ldns_resolver with which you want to target the authoritative
nameserver. (you might have to do more lookups to get the addresses
though...)

Is this helpful to you?

-- Willem

Op 18-05-16 om 14:08 schreef ravin goyal:
> Hii Willem
> 
> Regarding ldns_resolver_push_nameserver to target a server directly
> with a query , in the example code that you have sent using
> 
> while creating nameserver address you have done this :
> 
>  ldns_rdf_new_frm_str( LDNS_RDF_TYPE_A, "185.49.140.60")
> 
> but in here i want to set the domain name rather than the ip address itself
> 
> I tried using  ldns_rdf_new_frm_str( LDNS_RDF_TYPE_DNAME, "domain.com")
> 
> but it is not working
> 
> How can we set the domain name of the nameserver rather than ip address
> 
> 
> thanks in advance.
> 



From ravirocks1021 at gmail.com  Wed May 18 12:29:04 2016
From: ravirocks1021 at gmail.com (ravin goyal)
Date: Wed, 18 May 2016 17:59:04 +0530
Subject: [ldns-users] Fwd: Regarding dns resolver in c using ldns
In-Reply-To: <CANU0Mn0gWhibzYe0LaynPVG6ueoYTFUZ4oACYCxmmVHimvOUSA@mail.gmail.com>
References: <57344E5A.3050700@nlnetlabs.nl>
 <CANU0Mn2=ZHYVq1ZE3jj83aY-XYyuKAcg80sNP-QmbbWJL03WtQ@mail.gmail.com>
 <CANU0Mn3jg1-KxM6Y=eduFjT3GTko_qXFuWgp1u9zZkEf-pVX_g@mail.gmail.com>
 <20160518.142120.514287537816376809.he@uninett.no>
 <CANU0Mn0gWhibzYe0LaynPVG6ueoYTFUZ4oACYCxmmVHimvOUSA@mail.gmail.com>
Message-ID: <CANU0Mn2xxV1SziNgtV==AM7qYc7cSG1vndgqfP5YbELWyqJ4YQ@mail.gmail.com>

Hii Havard

right now what is happening is

dig @185.49.140.60 txt nlnetlabs.nl

but i want it as

dig @domain.com txt nlnetlabs.nl

where domain.com is 185.49.140.60

I don't want to rely on ip address , possibility of ip address gets
change over period of time is higher than the domain name gets change
that's why i want to set domain name rather than ip address

I hope i made myself clear

thanks

On 18 May 2016 at 17:58, ravin goyal <ravirocks1021 at gmail.com> wrote:
> Hii Havard
>
> right now what is happening is
>
> dig @185.49.140.60 txt nlnetlabs.nl
>
> but i want it as
>
> dig @domain.com txt nlnetlabs.nl
>
> where domain.com is 185.49.140.60
>
> I don't want to rely on ip address , possibility of ip address gets
> change over period of time is higher than the domain name gets change
> that's why i want to set domain name rather than ip address
>
> I hope i made myself clear
>
> thanks


From sca at andreasschulze.de  Tue May 31 21:52:33 2016
From: sca at andreasschulze.de (A. Schulze)
Date: Tue, 31 May 2016 23:52:33 +0200
Subject: [ldns-users] TLSA verification using ldns-dane
Message-ID: <1197b7a9-aaf9-c8a2-3b9c-052ed98f7a70@andreasschulze.de>

Hello,

i use the command "ldns-dane verify www.example.org 443" to check if
the TLSA-Record _443._tcp.www.example.org match the certificate at https://www.example.org.
That works.

Now I try to check a mailserver that support STARTTLS.
I assume "-i : Interact after connecting" is my friend. But what's the intended use?

I tried variations of "echo STARTTLS | ldns-dane -i verify mail.example.org 25" but that fail:
   handshaking SSL_get_error: 1
   error: could not get cert chain from ssl
   140217346352784:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:795:

Or does the above error say "ldns-dane don't understand the TLS version used by mail.example.org" ???

Andreas