Pass in nameservers and timeout when running get_dnskey recursi…

…vely
domainaware · Jan 7, 2024 · 7fb98c8 · 7fb98c8
1 parent 96be08c
commit 7fb98c8
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,7 @@ Changelog
 - Do not require an `RRSIG` answer when querying for `DNSKEY` records
   - On Windows and macOS, querying for a `DNSKEY` record on `proton.ch` will return a `RRSET` and `RRSIG`. However,
     running the same query on Debian-based Linux will only return a `RRSET`
+- Pass in `nameservers` and `timeout` when running `get_dnskey` recursively
 
 5.2.6
 -----

diff --git a/checkdmarc/dnssec.py b/checkdmarc/dnssec.py
@@ -69,7 +69,9 @@ def get_dnskey(domain: str, nameservers: list[str] = None,
                     logging.debug(f"No DNSKEY records found at {domain}")
                     base_domain = get_base_domain(domain)
                     if domain != base_domain:
-                        return get_dnskey(base_domain)
+                        return get_dnskey(base_domain,
+                                          nameservers=nameservers,
+                                          timeout=timeout)
                     cache[domain] = None
                     return None
                 rrset = answer[0]