dns-caa

DNS CAA

This npm-packages checks for the existance of the security-feature DNS CAA.

Installation

npm install dns-caa --save

Usage

• when the term issue is being used, it's a single domain certificates.
• when the term issuewild is being used, it's for wildcard certficates

DNSCAA.getDnsCaa = async function (domain, dnsServer = '8.8.8.8')

const DNSCAA = require('dns-caa');

let _getGoogleDnsCaa = async function () {
	let checkResult = await DNSCAA.getDnsCaa('google.com');
	console.log(checkResult);
};

let _getGoogleDnsCaaDnsServer = async function () {
	let checkResult = await DNSCAA.getDnsCaa('google.com', 8.8.4.4);
	console.log(checkResult);
};

// retrieve DNS-CAA for google.com via the default DNS-Server 8.8.8.8
_getGoogleDnsCaa();

// retrieve DNS-CAA for google.com from DNS-Server 8.8.4.4
_getGoogleDnsCaa();

output:

{
	issue: [ 'pki.goog' ],
	issuewild: []
}

DNSCAA.validate = async function (domain, expectedCAAs, dnsServer = '8.8.8.8')

const DNSCAA = require('dns-caa');

let _getGoogleValidation = async function () {
	let checkResult = await DNSCAA.validate('google.com', {issue: ['google.de', 'pki.goog']});
	console.log(checkResult);
};

// check fi google.com has the entries google.de and pki.goog as valid CAA-records
_getGoogleValidation();

output:

{
	hasDnsCaa: true,
	issue: [
		{ caa: 'google.de', exists: false },
		{ caa: 'pki.goog', exists: true }
	],
	issuewild: []
}