Add error handling in delete_record function around unrecognized/malformed keys.

binder/exceptions.py

@@ -23,3 +23,11 @@ class RecordException(Exception):
     """
 
     pass
+
+class KeyringException(Exception):
+    """
+    Thrown when there is a problem creating the keyring.
+      * When the length/padding of the TSIG data is incorrect.
+    """
+
+    pass

binder/helpers.py

@@ -9,6 +9,7 @@ import socket
 import dns.query
 import dns.reversename
 import dns.update
+import dns.tsig
 
 # App Imports
 from binder import exceptions, keyutils, models
@@ -83,8 +84,12 @@ def delete_record(dns_server, rr_list, key_name):
     if key_name is None:
         keyring = None
     else:
+        try:
             this_key = models.Key.objects.get(name=key_name)
             keyring = keyutils.create_keyring(this_key.name, this_key.data)
+        except exceptions.KeyringException, err:
+            return([{ "description" : "Error in deletion process",
+                      "output" : err }])
 
     delete_response = []
     for current_rr in rr_list:
@@ -93,8 +98,12 @@ def delete_record(dns_server, rr_list, key_name):
         domain = re_record.group(2)
         dns_update = dns.update.Update(domain, keyring = keyring)
         dns_update.delete(record)
+        try:
             output = dns.query.tcp(dns_update, dns_server)
-        delete_response.append({ "description" : "Delete record %s" % current_rr,
+        except dns.tsig.PeerBadKey:
+            output = "The DNS server does not know about the TSIG key: %s" % key_name
+
+        delete_response.append({ "description" : "Delete Record: %s" % current_rr,
                                  "output" : output })
 
     return delete_response

binder/keyutils.py

@@ -1,5 +1,10 @@
+import binascii
+
 import dns.tsigkeyring
 
+from binder import exceptions
+
+
 def create_keyring(key_name, key_data):
     """Return a tsigkeyring object from key name and key data.
 
@@ -11,8 +16,10 @@ def create_keyring(key_name, key_data):
       keyring object with the key name and TSIG secret.
     """
 
+    try:
         keyring = dns.tsigkeyring.from_text({
                 key_name : key_data
                 })
-
+    except binascii.Error, err:
+        raise exceptions.KeyringException("Error creating keyring. Verify correct key data for key: %s. Reason: %s" % (key_name, err))
     return keyring