The DNSSEC Checker source code can be obtained by downloading the source archive. If you're not familiar with DNSSEC we recommend you to first read the whitepaper Hardening the internet.

If you would like to have more information about DNSSEC monitoring, please read the paper DNSSEC: monitoring and operational stability

Before using the DNSSEC Checker, please review the system requirements and depencies at the bottom of this page.

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.

The latest source code tarball is available for download here.

The DNSSEC Checker is a python script that has been created to be used within nagios 3.x, as standalone or can be used integraded in a webpage. The chain validation uses the binaries of unbound-host, which can use a running instance of unbound to enable caching to speed up the process. Other checks make use of the dnspython module to handle DNS packets with EDNS0.

We suggest to use:

• unbound-host version 1.4.3, 1.4.4 or 1.4.5
• unbound version 1.4.3, 1.4.4 or 1.4.5
• python version 2.5.5 or better
• dnspython version 1.8.0 or better