386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉#!/bin/sh
701e9f3149e79740c42786c5c241a762135318e7Tinderbox User#
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉# Copyright (C) 2012-2014, 2016 Internet Systems Consortium, Inc. ("ISC")
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews#
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews# This Source Code Form is subject to the terms of the Mozilla Public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews# License, v. 2.0. If a copy of the MPL was not distributed with this
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉# file, You can obtain one at http://mozilla.org/MPL/2.0/.
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
0d5cc4c53a0200d673bcf36bddcbaed50453e1fdMark Andrews# $Id: sign.sh,v 1.1.2.2 2010/06/01 06:38:47 marka Exp $
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉SYSTEMTESTTOP=../..
0d5cc4c53a0200d673bcf36bddcbaed50453e1fdMark Andrews. $SYSTEMTESTTOP/conf.sh
0d5cc4c53a0200d673bcf36bddcbaed50453e1fdMark Andrews
0d5cc4c53a0200d673bcf36bddcbaed50453e1fdMark Andrewsdssets=
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zone=dlv.
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉infile=dlv.db.in
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zonefile=dlv.db
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉outfile=dlv.db.signed
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉dssets="$dssets dsset-`echo $zone |sed -e "s/.$//g"`$TP"
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname1=`$KEYGEN -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname2=`$KEYGEN -f KSK -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉cat $infile $keyname1.key $keyname2.key > $zonefile
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉$SIGNER -r $RANDFILE -o $zone -f $outfile $zonefile > /dev/null 2> signer.err || cat signer.err
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉echo "I: signed $zone"
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zone=nsec.
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉infile=nsec.db.in
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zonefile=nsec.db
0d5cc4c53a0200d673bcf36bddcbaed50453e1fdMark Andrewsoutfile=nsec.db.signed
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉dssets="$dssets dsset-`echo $zone |sed -e "s/.$//g"`$TP"
c62d9ac65fe6e098e9e538ce5c9edeeb456115a4Ondřej Surý
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname1=`$KEYGEN -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname2=`$KEYGEN -f KSK -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
0d5cc4c53a0200d673bcf36bddcbaed50453e1fdMark Andrews
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉cat $infile $keyname1.key $keyname2.key > $zonefile
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉$SIGNER -r $RANDFILE -o $zone -f $outfile $zonefile > /dev/null 2> signer.err || cat signer.err
c62d9ac65fe6e098e9e538ce5c9edeeb456115a4Ondřej Surýecho "I: signed $zone"
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zone=private.nsec.
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉infile=private.nsec.db.in
0d5cc4c53a0200d673bcf36bddcbaed50453e1fdMark Andrewszonefile=private.nsec.db
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉outfile=private.nsec.db.signed
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname1=`$KEYGEN -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
c62d9ac65fe6e098e9e538ce5c9edeeb456115a4Ondřej Surýkeyname2=`$KEYGEN -f KSK -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉cat $infile $keyname1.key $keyname2.key > $zonefile
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉$SIGNER -r $RANDFILE -o $zone -f $outfile $zonefile > /dev/null 2> signer.err || cat signer.err
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉echo "I: signed $zone"
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉grep -v '^;' $keyname2.key | $PERL -n -e '
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉local ($dn, $class, $type, $flags, $proto, $alg, @rest) = split;
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉local $key = join("", @rest);
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉print <<EOF
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉trusted-keys {
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉 "$dn" $flags $proto $alg "$key";
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉};
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉EOF
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉' > private.nsec.conf
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zone=nsec3.
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉infile=nsec3.db.in
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zonefile=nsec3.db
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉outfile=nsec3.db.signed
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉dssets="$dssets dsset-`echo $zone |sed -e "s/.$//g"`$TP"
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname1=`$KEYGEN -r $RANDFILE -a NSEC3RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname2=`$KEYGEN -f KSK -r $RANDFILE -a NSEC3RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉cat $infile $keyname1.key $keyname2.key > $zonefile
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉$SIGNER -r $RANDFILE -3 - -H 10 -o $zone -f $outfile $zonefile > /dev/null 2> signer.err || cat signer.err
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉echo "I: signed $zone"
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zone=private.nsec3.
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉infile=private.nsec3.db.in
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zonefile=private.nsec3.db
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉outfile=private.nsec3.db.signed
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname1=`$KEYGEN -r $RANDFILE -a NSEC3RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname2=`$KEYGEN -f KSK -r $RANDFILE -a NSEC3RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉cat $infile $keyname1.key $keyname2.key > $zonefile
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉$SIGNER -r $RANDFILE -3 - -H 10 -o $zone -f $outfile $zonefile > /dev/null 2> signer.err || cat signer.err
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉echo "I: signed $zone"
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉grep -v '^;' $keyname2.key | $PERL -n -e '
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉local ($dn, $class, $type, $flags, $proto, $alg, @rest) = split;
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉local $key = join("", @rest);
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉print <<EOF
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉trusted-keys {
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉 "$dn" $flags $proto $alg "$key";
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉};
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉EOF
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉' > private.nsec3.conf
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zone=.
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉infile=root.db.in
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉zonefile=root.db
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉outfile=root.db.signed
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname1=`$KEYGEN -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉keyname2=`$KEYGEN -f KSK -r $RANDFILE -a RSASHA1 -b 1024 -n zone $zone 2> /dev/null`
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉cat $infile $keyname1.key $keyname2.key $dssets >$zonefile
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉$SIGNER -r $RANDFILE -o $zone -f $outfile $zonefile > /dev/null 2> signer.err || cat signer.err
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉echo "I: signed $zone"
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉grep -v '^;' $keyname2.key | $PERL -n -e '
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉local ($dn, $class, $type, $flags, $proto, $alg, @rest) = split;
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉local $key = join("", @rest);
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉print <<EOF
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉trusted-keys {
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉 "$dn" $flags $proto $alg "$key";
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉};
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉EOF
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉' > trusted.conf
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉