From 3b6eb197a88ff450fb6abeff67152a592a7d683a Mon Sep 17 00:00:00 2001 From: Simon Kelley Date: Fri, 20 Jul 2018 21:23:56 +0100 Subject: [PATCH] Log DNSSEC trust anchors at startup. --- src/dnsmasq.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/dnsmasq.c b/src/dnsmasq.c index ff2c7f2..480c5f9 100644 --- a/src/dnsmasq.c +++ b/src/dnsmasq.c @@ -771,7 +771,8 @@ int main (int argc, char **argv) if (option_bool(OPT_DNSSEC_VALID)) { int rc; - + struct ds_config *ds; + /* Delay creating the timestamp file until here, after we've changed user, so that it has the correct owner to allow updating the mtime later. This means we have to report fatal errors via the pipe. */ @@ -792,6 +793,10 @@ int main (int argc, char **argv) if (rc == 1) my_syslog(LOG_INFO, _("DNSSEC signature timestamps not checked until system time valid")); + + for (ds = daemon->ds; ds; ds = ds->next) + my_syslog(LOG_INFO, _("configured with trust anchor for %s keytag %u"), + ds->name[0] == 0 ? "" : ds->name, ds->keytag); } #endif