sign.sh revision 1.1.1.1
1#!/bin/sh -e 2# 3# Copyright (C) Internet Systems Consortium, Inc. ("ISC") 4# 5# This Source Code Form is subject to the terms of the Mozilla Public 6# License, v. 2.0. If a copy of the MPL was not distributed with this 7# file, You can obtain one at http://mozilla.org/MPL/2.0/. 8# 9# See the COPYRIGHT file distributed with this work for additional 10# information regarding copyright ownership. 11 12SYSTEMTESTTOP=../.. 13. $SYSTEMTESTTOP/conf.sh 14 15zone=. 16infile=root.db.in 17zonefile=root.db 18 19key1=`$KEYGEN -q -r $RANDFILE -a ED25519 -n zone $zone` 20key2=`$KEYGEN -q -r $RANDFILE -a ED25519 -n zone -f KSK $zone` 21#key2=`$KEYGEN -q -r $RANDFILE -a ED448 -n zone -f KSK $zone` 22$DSFROMKEY -a sha-256 $key2.key > dsset-256 23 24cat $infile $key1.key $key2.key > $zonefile 25 26$SIGNER -P -g -r $RANDFILE -o $zone $zonefile > /dev/null 2> signer.err || cat signer.err 27 28# Configure the resolving server with a trusted key. 29keyfile_to_trusted_keys $key1 > trusted.conf 30cp trusted.conf ../ns2/trusted.conf 31 32cd ../ns2 && $SHELL sign.sh 33