From 706ef93df0c52f6516a501889ed296e0043095b1 Mon Sep 17 00:00:00 2001
From: Endre Karlson <endre.karlson@hp.com>
Date: Mon, 9 Mar 2015 14:26:30 +0100
Subject: [PATCH] Validate SSHFP records

Change-Id: Ied419f7ff7f6f66a1ec759d287d04934c44ad4da
---
 designatedashboard/dashboards/project/dns_domains/forms.py | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/designatedashboard/dashboards/project/dns_domains/forms.py b/designatedashboard/dashboards/project/dns_domains/forms.py
index d619dcc..355477c 100644
--- a/designatedashboard/dashboards/project/dns_domains/forms.py
+++ b/designatedashboard/dashboards/project/dns_domains/forms.py
@@ -33,6 +33,7 @@ DOMAIN_NAME_REGEX = r'^(?!.{255,})(?:(?!\-)[A-Za-z0-9_\-]{1,63}(?<!\-)\.)+$'
 WILDCARD_DOMAIN_NAME_REGEX = r'^(?!.{255,})(?:(^\*|(?!\-)[A-Za-z0-9_\-]{1,63})(?<!\-)\.)+$'  # noqa
 SRV_NAME_REGEX = r'^(?:_[A-Za-z0-9_\-]{1,62}\.){2}'
 SRV_DATA_REGEX = r'^(?:(?:6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|6[0-4][0-9]{3}|[1-5][0-9]{4}|[1-9][0-9]{1,3}|[0-9])\s){2}(?!.{255,})((?!\-)[A-Za-z0-9_\-]{1,63}(?<!\-)\.)+$'  # noqa
+SSHFP_DATA_REGEX = r'^[1-3]\s[1-2]\s\b([0-9a-fA-F]{5,40}|[0-9a-fA-F]{64})\b$'
 
 
 def handle_exc(func):
@@ -379,6 +380,12 @@ class RecordForm(forms.SelfHandlingForm):
             if record_type == 'TXT':
                 cleaned_data['data'] = cleaned_data['txt']
 
+        if record_type == 'SSHFP':
+            if not re.match(SSHFP_DATA_REGEX, cleaned_data['txt']):
+                self._add_field_error('txt',
+                                      _('Enter a valid SSHFP record'))
+            cleaned_data['data'] = cleaned_data['txt']
+
         cleaned_data.pop('txt')
 
         # Priority field