Add missing fields from unbound.conf we need in Deckard
converter_new.py
currently does not support some options from unbound.conf:
There are namely (with respective paragraphs from man unbound.conf
):
-
trust-anchor
trust-anchor: <"Resource Record">
A DS or DNSKEY RR for a key to use for validation. Multiple entries can be given to
specify multiple trusted keys, in addition to the trust-anchor-files. The resource
record is entered in the same format as 'dig' or 'drill' prints them, the same format as
in the zone file. Has to be on a single line, with "" around it. A TTL can be specified
for ease of cut and paste, but is ignored. A class can be specified, but class IN is
default.
-
val-override-date
val-override-date: <rrsig-style date spec>
Default is "" or "0", which disables this debugging feature. If enabled by giving a
RRSIG style date, that date is used for verifying RRSIG inception and expiration dates,
instead of the current date. Do not set this unless you are debugging signature incep‐
tion and expiration. The value -1 ignores the date altogether, useful for some special
applications.
-
do-not-query-localhost
do-not-query-localhost: <yes or no>
If yes, localhost is added to the do-not-query-address entries, both IP6 ::1 and IP4
127.0.0.1/8. If no, then localhost can be used to send queries to. Default is yes.
-
harden-glue
harden-glue: <yes or no>
Will trust glue only if it is within the servers authority. Default is on.
I am not sure that this list is conclusive. I might add more later.