luci-mod-admin-full: Add DNSSEC dnsmasq option

If dnsmasq with DNSSEC support is enabled, display options
to enable DNSSEC.

Signed-off-by: Daniel Dickinson <openwrt@daniel.thecshore.com>
This commit is contained in:
Daniel Dickinson 2016-03-25 03:09:59 -04:00
parent 9652d44ef2
commit 7fcf4fcecd

View file

@ -2,6 +2,8 @@
-- Licensed to the public under the Apache License 2.0. -- Licensed to the public under the Apache License 2.0.
local ipc = require "luci.ip" local ipc = require "luci.ip"
local o
require "luci.util"
m = Map("dhcp", translate("DHCP and DNS"), m = Map("dhcp", translate("DHCP and DNS"),
translate("Dnsmasq is a combined <abbr title=\"Dynamic Host Configuration Protocol" .. translate("Dnsmasq is a combined <abbr title=\"Dynamic Host Configuration Protocol" ..
@ -70,6 +72,19 @@ s:taboption("advanced", Flag, "localise_queries",
translate("Localise queries"), translate("Localise queries"),
translate("Localise hostname depending on the requesting subnet if multiple IPs are available")) translate("Localise hostname depending on the requesting subnet if multiple IPs are available"))
local have_dnssec_support = luci.util.checklib("/usr/sbin/dnsmasq", "libhogweed.so")
if have_dnssec_support then
o = s:taboption("advanced", Flag, "dnssec",
translate("DNSSEC"))
o.optional = true
o = s:taboption("advanced", Flag, "dnsseccheckunsigned",
translate("DNSSEC check unsigned"),
translate("Requires upstream supports DNSSEC; verify unsigned domain responses really come from unsigned domains"))
o.optional = true
end
s:taboption("general", Value, "local", s:taboption("general", Value, "local",
translate("Local server"), translate("Local server"),
translate("Local domain specification. Names matching this domain are never forwarded and are resolved from DHCP or hosts files only")) translate("Local domain specification. Names matching this domain are never forwarded and are resolved from DHCP or hosts files only"))