bin/check/check-tool.c

	check-tool.c revision 3430bfffca9a77aaecc1490f0be68496c4370703
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington/*
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * Copyright (C) 2004, 2005  Internet Systems Consortium, Inc. ("ISC")
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * Copyright (C) 2000-2002  Internet Software Consortium.
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington *
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * Permission to use, copy, modify, and distribute this software for any
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * purpose with or without fee is hereby granted, provided that the above
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * copyright notice and this permission notice appear in all copies.
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington *
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * PERFORMANCE OF THIS SOFTWARE.
c2bc56dc65b4b103a5600565680eb5f33fa4c90bMark Andrews */
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington/* $Id: check-tool.c,v 1.23 2006/01/06 02:07:03 marka Exp $ */
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington/*! \file */
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <config.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <stdio.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <string.h>
c2bc56dc65b4b103a5600565680eb5f33fa4c90bMark Andrews
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include "check-tool.h"
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <isc/util.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <isc/buffer.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <isc/log.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <isc/net.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <isc/netdb.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <isc/region.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <isc/stdio.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <isc/types.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <dns/fixedname.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <dns/log.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <dns/name.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <dns/rdata.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <dns/rdataclass.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <dns/rdataset.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <dns/types.h>
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#include <dns/zone.h>
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafsson
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#ifdef HAVE_ADDRINFO
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#ifdef HAVE_GETADDRINFO
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#ifdef HAVE_GAISTRERROR
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#define USE_GETADDRINFO
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafsson#endif
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#endif
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#endif
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington#define CHECK(r) \
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington    do { \
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington        result = (r); \
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafsson        if (result != ISC_R_SUCCESS) \
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafsson            goto cleanup; \
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafsson    } while (0)
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafsson
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafssonstatic const char *dbtype[] = { "rbt" };
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafsson
a8f94d29b38872fbc6cf9a1a8223ff8453357da1Andreas Gustafssonint debug = 0;
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellingtonisc_boolean_t nomerge = ISC_TRUE;
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellingtonisc_boolean_t docheckmx = ISC_TRUE;
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellingtonisc_boolean_t dochecksrv = ISC_TRUE;
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellingtonisc_boolean_t docheckns = ISC_TRUE;
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellingtonunsigned int zone_options = DNS_ZONEOPT_CHECKNS |
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington                DNS_ZONEOPT_CHECKMX |
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington                DNS_ZONEOPT_MANYERRORS |
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington                DNS_ZONEOPT_CHECKNAMES |
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington                DNS_ZONEOPT_CHECKINTEGRITY |
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington                DNS_ZONEOPT_CHECKWILDCARD |
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington                DNS_ZONEOPT_WARNMXCNAME |
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington                DNS_ZONEOPT_WARNSRVCNAME;
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington/*
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington * This needs to match the list in bin/named/log.c.
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington */
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellingtonstatic isc_logcategory_t categories[] = {
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington    { "",            0 },
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington    { "client",      0 },
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington    { "network",         0 },
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington    { "update",      0 },
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington    { "queries",         0 },
    { "unmatched",       0 },
    { "update-security", 0 },
    { NULL,          0 }
};

static isc_boolean_t
checkns(dns_zone_t *zone, dns_name_t *name, dns_name_t *owner,
    dns_rdataset_t *a, dns_rdataset_t *aaaa)
{
#ifdef USE_GETADDRINFO
    dns_rdataset_t *rdataset;
    dns_rdata_t rdata = DNS_RDATA_INIT;
    struct addrinfo hints, *ai, *cur;
    char namebuf[DNS_NAME_FORMATSIZE + 1];
    char ownerbuf[DNS_NAME_FORMATSIZE];
    char addrbuf[sizeof("xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:123.123.123.123")];
    isc_boolean_t answer = ISC_TRUE;
    isc_boolean_t match;
    const char *type;
    void *ptr = NULL;
    int result;

    REQUIRE(a == NULL || !dns_rdataset_isassociated(a) ||
        a->type == dns_rdatatype_a);
    REQUIRE(aaaa == NULL || !dns_rdataset_isassociated(aaaa) ||
        aaaa->type == dns_rdatatype_aaaa);
    memset(&hints, 0, sizeof(hints));
    hints.ai_flags = AI_CANONNAME;
    hints.ai_family = PF_UNSPEC;
    hints.ai_socktype = SOCK_STREAM;
    hints.ai_protocol = IPPROTO_TCP;

    dns_name_format(name, namebuf, sizeof(namebuf) - 1);
    /*
     * Turn off search.
     */
    if (dns_name_countlabels(name) > 1U)
        strcat(namebuf, ".");
    dns_name_format(owner, ownerbuf, sizeof(ownerbuf));

    result = getaddrinfo(namebuf, NULL, &hints, &ai);
    dns_name_format(name, namebuf, sizeof(namebuf) - 1);
    switch (result) {
    case 0:
        if (strcasecmp(ai->ai_canonname, namebuf) != 0) {
            dns_zone_log(zone, ISC_LOG_ERROR,
                     "%s/NS '%s' (out of zone) "
                     "is a CNAME (illegal)",
                     ownerbuf, namebuf);
            /* XXX950 make fatal for 9.5.0 */
            /* answer = ISC_FALSE; */
        }
        break;
    case EAI_NONAME:
#if defined(EAI_NODATA) && (EAI_NODATA != EAI_NONAME)
    case EAI_NODATA:
#endif
        dns_zone_log(zone, ISC_LOG_ERROR, "%s/NS '%s' (out of zone) "
                 "has no addresses records (A or AAAA)",
                 ownerbuf, namebuf);
        /* XXX950 make fatal for 9.5.0 */
        return (ISC_TRUE);

    default:
        dns_zone_log(zone, ISC_LOG_WARNING,
                 "getaddrinfo(%s) failed: %s",
                 namebuf, gai_strerror(result));
        return (ISC_TRUE);
    }
    if (a == NULL || aaaa == NULL)
        return (answer);
    /*
     * Check that all glue records really exist.
     */
    if (!dns_rdataset_isassociated(a))
        goto checkaaaa;
    result = dns_rdataset_first(a);
    while (result == ISC_R_SUCCESS) {
        dns_rdataset_current(a, &rdata);
        match = ISC_FALSE;
        for (cur = ai; cur != NULL; cur = cur->ai_next) {
            if (cur->ai_family != AF_INET)
                continue;
            ptr = &((struct sockaddr_in *)(cur->ai_addr))->sin_addr;
            if (memcmp(ptr, rdata.data, rdata.length) == 0) {
                match = ISC_TRUE;
                break;
            }
        }
        if (!match) {
            dns_zone_log(zone, ISC_LOG_ERROR, "%s/NS '%s' "
                     "extra GLUE A record (%s)",
                     ownerbuf, namebuf,
                     inet_ntop(AF_INET, rdata.data,
                           addrbuf, sizeof(addrbuf)));
            /* XXX950 make fatal for 9.5.0 */
            /* answer = ISC_FALSE; */
        }
        dns_rdata_reset(&rdata);
        result = dns_rdataset_next(a);
    }

 checkaaaa:
    if (!dns_rdataset_isassociated(aaaa))
        goto checkmissing;
    result = dns_rdataset_first(aaaa);
    while (result == ISC_R_SUCCESS) {
        dns_rdataset_current(aaaa, &rdata);
        match = ISC_FALSE;
        for (cur = ai; cur != NULL; cur = cur->ai_next) {
            if (cur->ai_family != AF_INET6)
                continue;
            ptr = &((struct sockaddr_in6 *)(cur->ai_addr))->sin6_addr;
            if (memcmp(ptr, rdata.data, rdata.length) == 0) {
                match = ISC_TRUE;
                break;
            }
        }
        if (!match) {
            dns_zone_log(zone, ISC_LOG_ERROR, "%s/NS '%s' "
                     "extra GLUE AAAA record (%s)",
                     ownerbuf, namebuf,
                     inet_ntop(AF_INET6, rdata.data,
                           addrbuf, sizeof(addrbuf)));
            /* XXX950 make fatal for 9.5.0. */
            /* answer = ISC_FALSE; */
        }
        dns_rdata_reset(&rdata);
        result = dns_rdataset_next(aaaa);
    }

 checkmissing:
    /*
     * Check that all addresses appear in the glue.
     */
    for (cur = ai; cur != NULL; cur = cur->ai_next) {
        switch (cur->ai_family) {
        case AF_INET:
            rdataset = a;
            ptr = &((struct sockaddr_in *)(cur->ai_addr))->sin_addr;
            type = "A";
            break;
        case AF_INET6:
            rdataset = aaaa;
            ptr = &((struct sockaddr_in6 *)(cur->ai_addr))->sin6_addr;
            type = "AAAA";
            break;
        default:
             continue;
        }
        match = ISC_FALSE;
        if (dns_rdataset_isassociated(rdataset))
            result = dns_rdataset_first(rdataset);
        else
            result = ISC_R_FAILURE;
        while (result == ISC_R_SUCCESS && !match) {
            dns_rdataset_current(rdataset, &rdata);
            if (memcmp(ptr, rdata.data, rdata.length) == 0)
                match = ISC_TRUE;
            dns_rdata_reset(&rdata);
            result = dns_rdataset_next(rdataset);
        }
        if (!match) {
            dns_zone_log(zone, ISC_LOG_ERROR, "%s/NS '%s' "
                     "missing GLUE %s record (%s)",
                     ownerbuf, namebuf, type,
                     inet_ntop(cur->ai_family, ptr,
                           addrbuf, sizeof(addrbuf)));
            /* XXX950 make fatal for 9.5.0. */
            /* answer = ISC_FALSE; */
        }
    }
    freeaddrinfo(ai);
    return (answer);
#else
    return (ISC_TRUE);
#endif
}

static isc_boolean_t
checkmx(dns_zone_t *zone, dns_name_t *name, dns_name_t *owner) {
#ifdef USE_GETADDRINFO
    struct addrinfo hints, *ai;
    char namebuf[DNS_NAME_FORMATSIZE + 1];
    char ownerbuf[DNS_NAME_FORMATSIZE];
    int result;
    int level = ISC_LOG_ERROR;
    isc_boolean_t answer = ISC_TRUE;

    memset(&hints, 0, sizeof(hints));
    hints.ai_flags = AI_CANONNAME;
    hints.ai_family = PF_UNSPEC;
    hints.ai_socktype = SOCK_STREAM;
    hints.ai_protocol = IPPROTO_TCP;

    dns_name_format(name, namebuf, sizeof(namebuf) - 1);
    /*
     * Turn off search.
     */
    if (dns_name_countlabels(name) > 1U)
        strcat(namebuf, ".");
    dns_name_format(owner, ownerbuf, sizeof(ownerbuf));

    result = getaddrinfo(namebuf, NULL, &hints, &ai);
    dns_name_format(name, namebuf, sizeof(namebuf) - 1);
    switch (result) {
    case 0:
        if (strcasecmp(ai->ai_canonname, namebuf) != 0) {
            if ((zone_options & DNS_ZONEOPT_WARNMXCNAME) != 0)
                level = ISC_LOG_WARNING;
            if ((zone_options & DNS_ZONEOPT_IGNOREMXCNAME) == 0) {
                dns_zone_log(zone, ISC_LOG_WARNING,
                         "%s/MX '%s' (out of zone) "
                         "is a CNAME (illegal)",
                         ownerbuf, namebuf);
                if (level == ISC_LOG_ERROR)
                    answer = ISC_FALSE;
            }
        }
        freeaddrinfo(ai);
        return (answer);

    case EAI_NONAME:
#if defined(EAI_NODATA) && (EAI_NODATA != EAI_NONAME)
    case EAI_NODATA:
#endif
        dns_zone_log(zone, ISC_LOG_ERROR, "%s/MX '%s' (out of zone) "
                 "has no addresses records (A or AAAA)",
                 ownerbuf, namebuf);
        /* XXX950 make fatal for 9.5.0. */
        return (ISC_TRUE);

    default:
        dns_zone_log(zone, ISC_LOG_WARNING,
                 "getaddrinfo(%s) failed: %s",
                 namebuf, gai_strerror(result));
        return (ISC_TRUE);
    }
#else
    return (ISC_TRUE);
#endif
}

static isc_boolean_t
checksrv(dns_zone_t *zone, dns_name_t *name, dns_name_t *owner) {
#ifdef USE_GETADDRINFO
    struct addrinfo hints, *ai;
    char namebuf[DNS_NAME_FORMATSIZE + 1];
    char ownerbuf[DNS_NAME_FORMATSIZE];
    int result;
    int level = ISC_LOG_ERROR;
    isc_boolean_t answer = ISC_TRUE;

    memset(&hints, 0, sizeof(hints));
    hints.ai_flags = AI_CANONNAME;
    hints.ai_family = PF_UNSPEC;
    hints.ai_socktype = SOCK_STREAM;
    hints.ai_protocol = IPPROTO_TCP;

    dns_name_format(name, namebuf, sizeof(namebuf) - 1);
    /*
     * Turn off search.
     */
    if (dns_name_countlabels(name) > 1U)
        strcat(namebuf, ".");
    dns_name_format(owner, ownerbuf, sizeof(ownerbuf));

    result = getaddrinfo(namebuf, NULL, &hints, &ai);
    dns_name_format(name, namebuf, sizeof(namebuf) - 1);
    switch (result) {
    case 0:
        if (strcasecmp(ai->ai_canonname, namebuf) != 0) {
            if ((zone_options & DNS_ZONEOPT_WARNSRVCNAME) != 0)
                level = ISC_LOG_WARNING;
            if ((zone_options & DNS_ZONEOPT_IGNORESRVCNAME) == 0) {
                dns_zone_log(zone, level,
                         "%s/SRV '%s' (out of zone) "
                         "is a CNAME (illegal)",
                         ownerbuf, namebuf);
                if (level == ISC_LOG_ERROR)
                    answer = ISC_FALSE;
            }
        }
        freeaddrinfo(ai);
        return (answer);

    case EAI_NONAME:
#if defined(EAI_NODATA) && (EAI_NODATA != EAI_NONAME)
    case EAI_NODATA:
#endif
        dns_zone_log(zone, ISC_LOG_ERROR, "%s/SRV '%s' (out of zone) "
                 "has no addresses records (A or AAAA)",
                 ownerbuf, namebuf);
        /* XXX950 make fatal for 9.5.0. */
        return (ISC_TRUE);

    default:
        dns_zone_log(zone, ISC_LOG_WARNING,
                 "getaddrinfo(%s) failed: %s",
                 namebuf, gai_strerror(result));
        return (ISC_TRUE);
    }
#else
    return (ISC_TRUE);
#endif
}

isc_result_t
setup_logging(isc_mem_t *mctx, isc_log_t **logp) {
    isc_logdestination_t destination;
    isc_logconfig_t *logconfig = NULL;
    isc_log_t *log = NULL;

    RUNTIME_CHECK(isc_log_create(mctx, &log, &logconfig) == ISC_R_SUCCESS);
    isc_log_registercategories(log, categories);
    isc_log_setcontext(log);
    dns_log_init(log);
    dns_log_setcontext(log);

    destination.file.stream = stdout;
    destination.file.name = NULL;
    destination.file.versions = ISC_LOG_ROLLNEVER;
    destination.file.maximum_size = 0;
    RUNTIME_CHECK(isc_log_createchannel(logconfig, "stderr",
                       ISC_LOG_TOFILEDESC,
                       ISC_LOG_DYNAMIC,
                       &destination, 0) == ISC_R_SUCCESS);
    RUNTIME_CHECK(isc_log_usechannel(logconfig, "stderr",
                     NULL, NULL) == ISC_R_SUCCESS);

    *logp = log;
    return (ISC_R_SUCCESS);
}

/*% load the zone */
isc_result_t
load_zone(isc_mem_t *mctx, const char *zonename, const char *filename,
      dns_masterformat_t fileformat, const char *classname,
      dns_zone_t **zonep)
{
    isc_result_t result;
    dns_rdataclass_t rdclass;
    isc_textregion_t region;
    isc_buffer_t buffer;
    dns_fixedname_t fixorigin;
    dns_name_t *origin;
    dns_zone_t *zone = NULL;

    REQUIRE(zonep == NULL || *zonep == NULL);

    if (debug)
        fprintf(stderr, "loading \"%s\" from \"%s\" class \"%s\"\n",
            zonename, filename, classname);

    CHECK(dns_zone_create(&zone, mctx));

    dns_zone_settype(zone, dns_zone_master);

    isc_buffer_init(&buffer, zonename, strlen(zonename));
    isc_buffer_add(&buffer, strlen(zonename));
    dns_fixedname_init(&fixorigin);
    origin = dns_fixedname_name(&fixorigin);
    CHECK(dns_name_fromtext(origin, &buffer, dns_rootname,
                ISC_FALSE, NULL));
    CHECK(dns_zone_setorigin(zone, origin));
    CHECK(dns_zone_setdbtype(zone, 1, (const char * const *) dbtype));
    CHECK(dns_zone_setfile2(zone, filename, fileformat));

    DE_CONST(classname, region.base);
    region.length = strlen(classname);
    CHECK(dns_rdataclass_fromtext(&rdclass, &region));

    dns_zone_setclass(zone, rdclass);
    dns_zone_setoption(zone, zone_options, ISC_TRUE);
    dns_zone_setoption(zone, DNS_ZONEOPT_NOMERGE, nomerge);
    if (docheckmx)
        dns_zone_setcheckmx(zone, checkmx);
    if (docheckns)
        dns_zone_setcheckns(zone, checkns);
    if (dochecksrv)
        dns_zone_setchecksrv(zone, checksrv);

    CHECK(dns_zone_load(zone));
    if (zonep != NULL) {
        *zonep = zone;
        zone = NULL;
    }

 cleanup:
    if (zone != NULL)
        dns_zone_detach(&zone);
    return (result);
}

/*% dump the zone */
isc_result_t
dump_zone(const char *zonename, dns_zone_t *zone, const char *filename,
      dns_masterformat_t fileformat, const dns_master_style_t *style)
{
    isc_result_t result;
    FILE *output = stdout;

    if (debug) {
        if (filename != NULL)
            fprintf(stderr, "dumping \"%s\" to \"%s\"\n",
                zonename, filename);
        else
            fprintf(stderr, "dumping \"%s\"\n", zonename);
    }

    if (filename != NULL) {
        result = isc_stdio_open(filename, "w+", &output);

        if (result != ISC_R_SUCCESS) {
            fprintf(stderr, "could not open output "
                "file \"%s\" for writing\n", filename);
            return (ISC_R_FAILURE);
        }
    }

    result = dns_zone_dumptostream2(zone, output, fileformat, style);

    if (filename != NULL)
        (void)isc_stdio_close(output);

    return (result);
}