Use PERL_LWP_SSL_CA_PATH not HTTPS_CA_DIR as the latter has issues.

[mirror/dsa-nagios.git] / dsa-nagios-checks / checks / dsa-check-zone-rrsig-expiration

diff --git a/dsa-nagios-checks/checks/dsa-check-zone-rrsig-expiration b/dsa-nagios-checks/checks/dsa-check-zone-rrsig-expiration
index e3652ac..e6a7b7f 100755 (executable)
--- a/dsa-nagios-checks/checks/dsa-check-zone-rrsig-expiration
+++ b/dsa-nagios-checks/checks/dsa-check-zone-rrsig-expiration
@@ -45,6 +45,8 @@
 #  - add -s option to configure udp packet size.  default changed from 4k to 1k
 # Copyright (c) 2013 Peter Palfrader <peter@palfrader.org>
 #  - add -r option to override initial refs.
+# Copyright (c) 2014 Peter Palfrader <peter@palfrader.org>
+#  - Do not ask for RRSIG directly, instead ask for SOA with dnssec data
 
 
 # usage
@@ -146,7 +148,7 @@ sub do_recursion {
                        $pkt = $res->send($zone, 'SOA');
                        last if $pkt;
                }
-               print STDERR "No response to seed query for $zone SOA from $prettyrefs, retrying.\n" if $opts{d};
+               print STDERR "No response to seed query for $zone SOA from $prettyrefs.\n" if $opts{d};
                critical("No response to seed query for $zone from $prettyrefs.") unless $pkt;
                critical($pkt->header->rcode . " from " . $pkt->answerfrom)
                        unless ($pkt->header->rcode eq 'NOERROR');
@@ -288,7 +290,6 @@ sub send_query {
        my $res = Net::DNS::Resolver->new;
        $res->nameserver($server) if $server;
        $res->udp_timeout($opts{t});
-       $res->udp_timeout($opts{t});
        $res->dnssec(1);
        $res->retry(2);
        $res->udppacketsize($opts{s});