xref: /netbsd-src/external/mpl/bind/dist/bin/tests/system/nsupdate/ns3/sign.sh (revision 8aaca124c0ad52af9550477f296b63debc7b4c98)
1#!/bin/sh -e
2
3# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
4#
5# SPDX-License-Identifier: MPL-2.0
6#
7# This Source Code Form is subject to the terms of the Mozilla Public
8# License, v. 2.0.  If a copy of the MPL was not distributed with this
9# file, you can obtain one at https://mozilla.org/MPL/2.0/.
10#
11# See the COPYRIGHT file distributed with this work for additional
12# information regarding copyright ownership.
13
14. ../../conf.sh
15
16zone=nsec3param.test.
17infile=nsec3param.test.db.in
18zonefile=nsec3param.test.db
19
20keyname1=$($KEYGEN -q -a ${DEFAULT_ALGORITHM} -n zone -f KSK $zone)
21keyname2=$($KEYGEN -q -a ${DEFAULT_ALGORITHM} -n zone $zone)
22
23cat $infile $keyname1.key $keyname2.key >$zonefile
24
25$SIGNER -P -3 - -H 1 -o $zone -k $keyname1 $zonefile $keyname2 >/dev/null
26
27zone=dnskey.test.
28infile=dnskey.test.db.in
29zonefile=dnskey.test.db
30
31keyname1=$($KEYGEN -q -a ${DEFAULT_ALGORITHM} -n zone -f KSK $zone)
32keyname2=$($KEYGEN -q -a ${DEFAULT_ALGORITHM} -n zone $zone)
33
34cat $infile $keyname1.key $keyname2.key >$zonefile
35
36$SIGNER -P -o $zone -k $keyname1 $zonefile $keyname2 >/dev/null
37
38zone=delegation.test.
39infile=delegation.test.db.in
40zonefile=delegation.test.db
41
42keyname1=$($KEYGEN -q -a ${DEFAULT_ALGORITHM} -3 -f KSK $zone)
43keyname2=$($KEYGEN -q -a ${DEFAULT_ALGORITHM} -3 $zone)
44
45cat $infile $keyname1.key $keyname2.key >$zonefile
46
47$SIGNER -A -3 - -P -o $zone -k $keyname1 $zonefile $keyname2 >/dev/null
48
49# Just copy multisigner.db.in because it is signed with dnssec-policy.
50cp multisigner.test.db.in multisigner.test.db
51