sign.sh revision 0c27b3fe77ac1d5094ba3521e8142d9e7973133f
#
# Copyright (C) 2000-2002, 2004, 2006-2016 Internet Systems Consortium, Inc. ("ISC")
#
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
SYSTEMTESTTOP=../..
cnameandkey=`$KEYGEN -T KEY -q -r $RANDFILE -a RSASHA1 -b 768 -n host cnameandkey.$zone`
dnameandkey=`$KEYGEN -T KEY -q -r $RANDFILE -a RSASHA1 -b 768 -n host dnameandkey.$zone`
# Change the signer field of the a.b.keyless.example SIG A
# to point to a provably nonexistent KEY record.
#
#
#
#
#
#
#
# A nsec3 zone (non-optout).
#
#
#
#
#
#
#
#
# A optout nsec3 zone.
#
#
# A nsec3 zone (non-optout) with unknown nsec3 hash algorithm (-U).
#
#
# A optout nsec3 zone with a unknown nsec3 hash algorithm (-U).
#
#
# A zone with a unknown DNSKEY algorithm.
# Algorithm 7 is replaced by 100 in the zone and dsset.
#
awk '$4 == "DNSKEY" { $7 = 100; print } $4 == "RRSIG" { $6 = 100; print } { print }' ${zonefile}.tmp > ${zonefile}.signed
#
# A zone with a unknown DNSKEY algorithm + unknown NSEC3 hash algorithm (-U).
# Algorithm 7 is replaced by 100 in the zone and dsset.
#
awk '$4 == "DNSKEY" { $7 = 100; print } $4 == "RRSIG" { $6 = 100; print } { print }' ${zonefile}.tmp > ${zonefile}.signed
#
# A multiple parameter nsec3 zone.
#
#
# A RSASHA256 zone.
#
#
# A RSASHA512 zone.
#
#
# A zone with the DNSKEY set only signed by the KSK
#
#
# A zone with the expired signatures
#
#
# A NSEC3 signed zone that will have a DNSKEY added to it via UPDATE.
#
#
# A NSEC signed zone that will have auto-dnssec enabled and
# extra keys not in the initial signed zone.
#
#
# A NSEC3 signed zone that will have auto-dnssec enabled and
# extra keys not in the initial signed zone.
#
#
# Secure below cname test zone.
#
#
# Patched TTL test zone.
#
#
# Seperate DNSSEC records.
#
: > $signedfile
#
# Seperate DNSSEC records smart signing.
#
: > $signedfile
#
# Zone with signatures about to expire, but no private key to replace them
#
#
# A zone where the signer's name has been forced to uppercase.
#
#
# Check that the signer's name is in lower case when zone name is in
# upper case.
#
#
# Zone with signatures about to expire, and dynamic, but configured
# not to resign with 'auto-resign no;'
#
# preserve a normalized copy of the NS RRSIG for comparison later
awk '$4 == "RRSIG" && $5 == "NS" {$2 = ""; print}' | \
#
# An inline signing zone
#
#
# publish a new key while deactivating another key at the same time.
#
#
# A zone which will change its sig-validity-interval
#
#
# A zone with a bad DS in the parent
# (sourced from bogus.example.db.in)
#
#
# A zone with future signatures.
#
#
# A zone with future signatures.
#
#
# A zone with a revoked key
#