CAAC - CAA record checker
This little tool lets you check / create a CAA Record for one domain or check several domains if a record exists. It creates records for following DNS:
- Generic - For Google Cloud DNS, Route 53, DNSimple, and other hosted DNS services
- Standard Zone File - For BIND ≥9.9.6, PowerDNS ≥4.0.0, NSD ≥4.0.1, Knot DNS ≥2.2.0
- Legacy Zone File (RFC 3597 Syntax) - For BIND <9.9.6, NSD <4.0.1, Windows Server 2016
- dnsmasq
Getting Started
Clone the repo with
git clone https://github.com/joelgun-xyz/caac.git
Prerequisites
This tool runs on Python3.
Installing
You need to install a couple of libs from the requirements.txt
PyYAML==5.1.2
dnspython==1.16.0
tqdm==4.31.1
Click==7.0
click-plugins==1.0.4
requests==2.22.0
Change in the cloned project directory and run following command to install them all:
pip3 install -r requirements.txt
Running the script
You can check for / create a CAA record with:
python3 caac.py -d example.com
You can check several domains for CAA records with:
python3 caac.py -bd example.com,example2.com,example.com
Output
Sample CAA check output:
[ +++ ] Found an entry for "raiffi.ch"!
raiffi.ch. 0 iodef "mailto:ca@raiffi.ch"
raiffi.ch. 0 issue "amazon.com"
raiffi.ch. 0 issue "digicert.com"
raiffi.ch. 0 issue "quovadisglobal.com"
If there is no:
python3 caac.py -d vqb.ch
[ +++ ] There was no CAA Record!
Do you want to create one? [y/N]:
Authors
- joelgun - Initial work - up(https://twitter.com/joelgun
License
This project is licensed under the Apache License - see the LICENSE.md file for details
Acknowledgments
- CAA helper from SSLMate