2-sign-zone.sh


1
2
3
4
5
6
7
8
9
10
11
12
13

#!/bin/bash

set -e

cp root-zone.dns _tmp_root-zone.dns
for key in `ls K.*.key`
do
   echo "\$INCLUDE $key" >> _tmp_root-zone.dns
done

dnssec-signzone -A -3 $(head -c 1000 /dev/random | sha1sum | cut -b 1-16) -N INCREMENT -o . -t _tmp_root-zone.dns
rm _tmp_root-zone.dns
mv _tmp_root-zone.dns.signed root.signed.dns