1*00b67f09SDavid van Moolenbroek#!/bin/sh -e 2*00b67f09SDavid van Moolenbroek# 3*00b67f09SDavid van Moolenbroek# Copyright (C) 2012, 2014 Internet Systems Consortium, Inc. ("ISC") 4*00b67f09SDavid van Moolenbroek# 5*00b67f09SDavid van Moolenbroek# Permission to use, copy, modify, and/or distribute this software for any 6*00b67f09SDavid van Moolenbroek# purpose with or without fee is hereby granted, provided that the above 7*00b67f09SDavid van Moolenbroek# copyright notice and this permission notice appear in all copies. 8*00b67f09SDavid van Moolenbroek# 9*00b67f09SDavid van Moolenbroek# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 10*00b67f09SDavid van Moolenbroek# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 11*00b67f09SDavid van Moolenbroek# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 12*00b67f09SDavid van Moolenbroek# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 13*00b67f09SDavid van Moolenbroek# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 14*00b67f09SDavid van Moolenbroek# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 15*00b67f09SDavid van Moolenbroek# PERFORMANCE OF THIS SOFTWARE. 16*00b67f09SDavid van Moolenbroek 17*00b67f09SDavid van MoolenbroekSYSTEMTESTTOP=../.. 18*00b67f09SDavid van Moolenbroek. $SYSTEMTESTTOP/conf.sh 19*00b67f09SDavid van Moolenbroek 20*00b67f09SDavid van Moolenbroekzone=. 21*00b67f09SDavid van Moolenbroekinfile=root.db.in 22*00b67f09SDavid van Moolenbroekzonefile=root.db 23*00b67f09SDavid van Moolenbroek 24*00b67f09SDavid van Moolenbroek(cd ../ns2 && $SHELL sign.sh) 25*00b67f09SDavid van Moolenbroek 26*00b67f09SDavid van Moolenbroekcp ../ns2/dsset-good. . 27*00b67f09SDavid van Moolenbroekcp ../ns2/dsset-bad. . 28*00b67f09SDavid van Moolenbroek 29*00b67f09SDavid van Moolenbroekkey1=`$KEYGEN -q -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone` 30*00b67f09SDavid van Moolenbroekkey2=`$KEYGEN -q -r $RANDFILE -a RSASHA1 -b 2048 -n zone -f KSK $zone` 31*00b67f09SDavid van Moolenbroek 32*00b67f09SDavid van Moolenbroekcat $infile $key1.key $key2.key > $zonefile 33*00b67f09SDavid van Moolenbroek 34*00b67f09SDavid van Moolenbroek$SIGNER -P -g -r $RANDFILE -o $zone $zonefile > /dev/null 35*00b67f09SDavid van Moolenbroek 36*00b67f09SDavid van Moolenbroek# Configure the resolving server with a trusted key. 37*00b67f09SDavid van Moolenbroek 38*00b67f09SDavid van Moolenbroekcat $key2.key | grep -v '^; ' | $PERL -n -e ' 39*00b67f09SDavid van Moolenbroeklocal ($dn, $class, $type, $flags, $proto, $alg, @rest) = split; 40*00b67f09SDavid van Moolenbroeklocal $key = join("", @rest); 41*00b67f09SDavid van Moolenbroekprint <<EOF 42*00b67f09SDavid van Moolenbroektrusted-keys { 43*00b67f09SDavid van Moolenbroek "$dn" $flags $proto $alg "$key"; 44*00b67f09SDavid van Moolenbroek}; 45*00b67f09SDavid van MoolenbroekEOF 46*00b67f09SDavid van Moolenbroek' > trusted.conf 47*00b67f09SDavid van Moolenbroekcp trusted.conf ../ns2/trusted.conf 48*00b67f09SDavid van Moolenbroekcp trusted.conf ../ns3/trusted.conf 49*00b67f09SDavid van Moolenbroekcp trusted.conf ../ns4/trusted.conf 50