From 156e2773eb9a8230b96ba38ca864b383d8bbdd78 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Tue, 7 Sep 2021 21:17:06 +0200 Subject: Handling IDN domains in dehydrated-nsupdate by not expanding the punycode. Signed-off-by: Daniel Baumann --- dehydrated/bin/dehydrated-nsupdate | 4 ++-- dehydrated/share/man/dehydrated-nsupdate.1.rst | 3 +++ 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/dehydrated/bin/dehydrated-nsupdate b/dehydrated/bin/dehydrated-nsupdate index b870e3b..be773f8 100755 --- a/dehydrated/bin/dehydrated-nsupdate +++ b/dehydrated/bin/dehydrated-nsupdate @@ -45,11 +45,11 @@ esac if command -v kdig > /dev/null 2>&1 then # knot-dnsutils - DIG="kdig" + DIG="kdig +noidn" elif command -v dig > /dev/null 2>&1 then # bind-dnsutils - DIG="dig" + DIG="dig +noidnout" else echo "'${HOOK}': need dig from bind-dnsutils or knot-dnsutils" >&2 exit 1 diff --git a/dehydrated/share/man/dehydrated-nsupdate.1.rst b/dehydrated/share/man/dehydrated-nsupdate.1.rst index db88f5e..b7e02a3 100644 --- a/dehydrated/share/man/dehydrated-nsupdate.1.rst +++ b/dehydrated/share/man/dehydrated-nsupdate.1.rst @@ -75,6 +75,9 @@ Features | **bind9-dnsutils and knot-dnsutils support* | **dehydrated-nsupdate** works with both nsupdate (bind9) and knsupdate (knot). +| **IDN handling** +| **dehydrated-nsupdate** works with IDN domains by not expanding the punycode. + Files ===== -- cgit v1.2.3