Power Shell or .Net library to check if DNSSEC is setup for a domain

john john 946

I am building an application in ASP.NET core MVC which allow users to enter a domain name and click submit >> then the application should check if DNSSEC is setup for a domain >> update the database accordingly.

So is there a .NET core library which allow us to check if DNSSEC is setup for a domain? Or can we use Power shell and get the results of it inside our ASP.NET core web application?

Thanks

Zhi Lv - MSFT 32,016 Microsoft Vendor

So is there a .NET core library which allow us to check if DNSSEC is setup for a domain? Or can we use Power shell and get the results of it inside our ASP.NET core web application?

I don't find any library to if DNSSEC is setup for a domain.

To run the PowerShell command from the Asp.net core application, you could install Microsoft.PowerShell.SDK package, and then refer the following code to run the PowerShell command:

   using (PowerShell ps = PowerShell.Create())
   {
     // specify the script code to run.
     ps.AddScript("power shell command");

     // specify the parameters to pass into the script.
     ps.AddParameters("parameters ");

     // execute the script and await the result.
     var pipelineObjects = await ps.InvokeAsync().ConfigureAwait(false);

     // print the resulting pipeline objects to the console.
     foreach (var item in pipelineObjects)
     {
       Console.WriteLine(item.BaseObject.ToString());
     }
   }

1 answer

Rich Matheisen 45,091 Reputation points

2022-05-29T14:38:37.757+00:00

I suppose you could ask the server for a RRSIG record. Perhaps Get-DNSServerZone. But what your asking is NOT easy! Have a look here: how-do-i-see-if-a-domain-uses-dnssec
Please sign in to rate this answer.
john john 946 Reputation points

2022-05-30T10:48:09.173+00:00

@Rich Matheisen so if i can use this script Get-DNSServerZone , then why you mentioned that what i am asking is not easy ?
Thanks

Rich Matheisen 45,091 Reputation points

2022-05-30T14:23:41.9+00:00

Because it only demonstrates there are RRSIG records in the zone. It doesn't prove that DNSSEC is working . . . or working properly.
Sign in to comment