2-sign-zone.sh


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

#!/bin/bash

set -e

cd work
mkdir -p tmp

cp db.root tmp/zone.dns
for key in `ls K.*.key`
do
   echo "\$INCLUDE $key" >> tmp/zone.dns
done

dnssec-signzone -A -3 $(openssl rand -hex 16) -N INCREMENT -o . -t tmp/zone.dns

mv tmp/zone.dns.signed ../root.signed.dns

rm tmp/*