Skip to content

Commit e3c8c49

Browse files
Add external DNS disclaimer for DS records
This is a rebased and reworded version of this PR: mail-in-a-box#1920
1 parent 3efd425 commit e3c8c49

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

management/status_checks.py

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -666,7 +666,7 @@ def check_dnssec(domain, env, output, dns_zonefiles, is_checking_primary=False):
666666
return
667667
output.print_error("""This domain's DNSSEC DS record is incorrect. The chain of trust is broken between the public DNS system
668668
and this machine's DNS server. It may take several hours for public DNS to update after a change. If you did not recently
669-
make a change, you must resolve this immediately (see below).""")
669+
make a change or are using external DNS, you must resolve this immediately (see below).""")
670670

671671
output.print_line("""Follow the instructions provided by your domain name registrar to set a DS record.
672672
Registrars support different sorts of DS records. Use the first option that works:""")
@@ -695,6 +695,7 @@ def preferred_ds_order_func(ds_suggestion):
695695
output.print_line(ds_suggestion['record'], monospace=True)
696696
if len(ds) > 0:
697697
output.print_line("")
698+
output.print_line("If you are using external DNS you may ignore this")
698699
output.print_line("The DS record is currently set to:")
699700
for rr in sorted(ds):
700701
output.print_line("Key Tag: {}, Algorithm: {}, Digest Type: {}, Digest: {}".format(*rr))

0 commit comments

Comments
 (0)