1*00b67f09SDavid van Moolenbroek#!/bin/sh 2*00b67f09SDavid van Moolenbroek# 3*00b67f09SDavid van Moolenbroek# Copyright (C) 2013 Internet Systems Consortium, Inc. ("ISC") 4*00b67f09SDavid van Moolenbroek# 5*00b67f09SDavid van Moolenbroek# Permission to use, copy, modify, and/or distribute this software for any 6*00b67f09SDavid van Moolenbroek# purpose with or without fee is hereby granted, provided that the above 7*00b67f09SDavid van Moolenbroek# copyright notice and this permission notice appear in all copies. 8*00b67f09SDavid van Moolenbroek# 9*00b67f09SDavid van Moolenbroek# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH 10*00b67f09SDavid van Moolenbroek# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY 11*00b67f09SDavid van Moolenbroek# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT, 12*00b67f09SDavid van Moolenbroek# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM 13*00b67f09SDavid van Moolenbroek# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE 14*00b67f09SDavid van Moolenbroek# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR 15*00b67f09SDavid van Moolenbroek# PERFORMANCE OF THIS SOFTWARE. 16*00b67f09SDavid van Moolenbroek 17*00b67f09SDavid van Moolenbroek# Fetch a copy of a current root signing key; used for testing 18*00b67f09SDavid van Moolenbroek# DNSSEC validation in 'sample'. 19*00b67f09SDavid van Moolenbroek# 20*00b67f09SDavid van Moolenbroek# After running this script, "sample `cat sample.key` <args>" will 21*00b67f09SDavid van Moolenbroek# perform a lookup as specified in <args> and validate the result 22*00b67f09SDavid van Moolenbroek# using the root key. 23*00b67f09SDavid van Moolenbroek# 24*00b67f09SDavid van Moolenbroek# (This is NOT a secure method of obtaining the root key; it is 25*00b67f09SDavid van Moolenbroek# included here for testing purposes only.) 26*00b67f09SDavid van Moolenbroekdig +noall +answer dnskey . | perl -n -e ' 27*00b67f09SDavid van Moolenbroeklocal ($dn, $ttl, $class, $type, $flags, $proto, $alg, @rest) = split; 28*00b67f09SDavid van Moolenbroeknext if ($flags != 257); 29*00b67f09SDavid van Moolenbroeklocal $key = join("", @rest); 30*00b67f09SDavid van Moolenbroekprint "-a $alg -e -k $dn -K $key\n" 31*00b67f09SDavid van Moolenbroek' > sample.key 32