mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-08-28 21:17:54 +00:00
be compatible with new dnssec tool command line argument
usage; bug fixes
This commit is contained in:
parent
98225f5d5e
commit
02b4e9aef2
@ -6,7 +6,7 @@ zonefile=example.db
|
|||||||
|
|
||||||
keyname=`$KEYGEN -a RSA -b 768 -n zone $zone`
|
keyname=`$KEYGEN -a RSA -b 768 -n zone $zone`
|
||||||
|
|
||||||
tag=`echo $keykname | sed -n 's/^.*\+\([0-9][0-9]*\)$/\1/p'`
|
tag=`echo $keyname | sed -n 's/^.*\+\([0-9][0-9]*\)$/\1/p'`
|
||||||
|
|
||||||
echo "key=$keyname, tag=$tag"
|
echo "key=$keyname, tag=$tag"
|
||||||
|
|
||||||
@ -14,23 +14,24 @@ echo "key=$keyname, tag=$tag"
|
|||||||
# sign it, and pass it back
|
# sign it, and pass it back
|
||||||
|
|
||||||
( cd ../ns3 && sh sign.sh )
|
( cd ../ns3 && sh sign.sh )
|
||||||
|
|
||||||
cp ../ns3/secure.example.keyset .
|
cp ../ns3/secure.example.keyset .
|
||||||
/local/bind9/bin/tests/keysigner -v 9 secure.example.keyset example./$tag/001
|
|
||||||
|
$KEYSIGNER -v 9 secure.example.keyset $keyname
|
||||||
|
|
||||||
# This will leave two copies of the child's zone key in the signed db file;
|
# This will leave two copies of the child's zone key in the signed db file;
|
||||||
# that shouldn't cause any problems.
|
# that shouldn't cause any problems.
|
||||||
cat secure.example.signedkey >>../ns3/secure.example.db.signed
|
cat secure.example.signedkey >>../ns3/secure.example.db.signed
|
||||||
|
|
||||||
pubkeyfile="$keyname.key"
|
$KEYSETTOOL $keyname
|
||||||
|
|
||||||
$KEYSETTOOL $zone $tag/001
|
cat $infile $keyname.key >$zonefile
|
||||||
|
|
||||||
cat $infile $pubkeyfile >$zonefile
|
|
||||||
|
|
||||||
$SIGNER -v 1 -o $zone $zonefile
|
$SIGNER -v 1 -o $zone $zonefile
|
||||||
|
|
||||||
# Configure the resolving server with a trusted key.
|
# Configure the resolving server with a trusted key.
|
||||||
|
|
||||||
cat $pubkeyfile | perl -n -e '
|
cat $keyname.key | perl -n -e '
|
||||||
my ($dn, $class, $type, $flags, $proto, $alg, @rest) = split;
|
my ($dn, $class, $type, $flags, $proto, $alg, @rest) = split;
|
||||||
my $key = join("", @rest);
|
my $key = join("", @rest);
|
||||||
print <<EOF
|
print <<EOF
|
||||||
|
@ -4,21 +4,15 @@ zone=secure.example.
|
|||||||
infile=secure.example.db.in
|
infile=secure.example.db.in
|
||||||
zonefile=secure.example.db
|
zonefile=secure.example.db
|
||||||
|
|
||||||
rm -f K$zone*.key
|
|
||||||
rm -f K$zone*.private
|
|
||||||
rm -f $zone*.keyset
|
|
||||||
|
|
||||||
keyname=`$KEYGEN -a RSA -b 768 -n zone $zone`
|
keyname=`$KEYGEN -a RSA -b 768 -n zone $zone`
|
||||||
|
|
||||||
tag=`echo $keykname | sed -n 's/^.*\+\([0-9][0-9]*\)$/\1/p'`
|
tag=`echo $keyname | sed -n 's/^.*\+\([0-9][0-9]*\)$/\1/p'`
|
||||||
|
|
||||||
echo "key=$keyname, tag=$tag"
|
echo "key=$keyname, tag=$tag"
|
||||||
|
|
||||||
pubkeyfile="$keyname.key"
|
$KEYSETTOOL $keyname.key
|
||||||
|
|
||||||
$KEYSETTOOL $zone $tag/001
|
cat $infile $keyname.key >$zonefile
|
||||||
|
|
||||||
cat $infile $pubkeyfile >$zonefile
|
|
||||||
|
|
||||||
$SIGNER -v 1 -o $zone $zonefile
|
$SIGNER -v 1 -o $zone $zonefile
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user