Script to check and notify you about any (about to) expired RRSIG's

tlweb

Verified User
Joined
Feb 23, 2015
Messages
36
Location
Netherlands
Well i've now had twice a problem where the RRSIG's were not updated by DA before they expired. The update is only triggered once on the 1st day of the month and the default expiration is set to 35 days. Also there is no retry system in place that would retry the updating of the RRSIG's in time.

So i wrote a small bash script together with my best friend chatGPT as i'm a bash N00B. And i added it to crontab for it to run every day at 6am in the morning.

It warns you about expired, soon to expire (<24h) and in debug mode it also reports valid RRSIG's.

Any input or improvements are appreciated and can be posted here or you could create an issue or PR on github.

GITHUB REPO: DA RRSIG Expiry Check

Kind regards,

Tom
 
Back
Top