keygen.sh revision 0c27b3fe77ac1d5094ba3521e8142d9e7973133f
#
# Copyright (C) 2009-2012, 2014-2016 Internet Systems Consortium, Inc. ("ISC")
#
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
# $Id: keygen.sh,v 1.15 2012/02/06 23:46:46 tbox Exp $
SYSTEMTESTTOP=../..
echo "D:${debug}: dumping ${1}"
}
echo "I:setting up zone: $1"
debug="$1"
zone="$1"
zonefile="${zone}.db"
infile="${zonefile}.in"
n=`expr ${n:-0} + 1`
}
#
#
#
#
#
#
#
# A nsec3 zone (non-optout).
#
#
# An NSEC3 zone, with NSEC3 parameters set prior to signing
#
echo $ksk > ../autoksk.key
echo $zsk > ../autozsk.key
#
#
#
#
#
#
#
# A optout nsec3 zone.
#
#
# A RSASHA256 zone.
#
#
# A RSASHA512 zone.
#
#
# NSEC-only zone.
#
#
# Signature refresh test zone. Signatures are set to expire long
# in the past; they should be updated by autosign.
#
#
# NSEC3->NSEC transition test zone.
#
#
# secure-to-insecure transition test zone; used to test removal of
# keys via nsupdate
#
#
# another secure-to-insecure transition test zone; used to test
# removal of keys on schedule.
#
#
# Introducing a pre-published key test.
#
#
# Key TTL tests.
#
# no default key TTL; DNSKEY should get SOA TTL
# default key TTL should be used
# mismatched key TTLs, should use shortest
# existing DNSKEY RRset, should retain TTL
#
# A zone with a DNSKEY RRset that is published before it's activated
#
echo $ksk > ../delayksk.key
echo $zsk > ../delayzsk.key
#
# A zone with signatures that are already expired, and the private ZSK
# is missing.
#
$SIGNER -S -P -s now-1mo -e now-1mi -o $zone -f $zonefile ${zonefile}.in > s.out 2>&1 || dumpit s.out
echo $zsk > ../missingzsk.key
#
# A zone with signatures that are already expired, and the private ZSK
# is inactive.
#
$SIGNER -S -P -s now-1mo -e now-1mi -o $zone -f $zonefile ${zonefile}.in > s.out 2>&1 || dumpit s.out
echo $zsk > ../inactivezsk.key
#
# A zone that is set to 'auto-dnssec maintain' during a recofnig
#
#
# A zone which generates a CDS and CDNSEY RRsets automatically
#