Changeset 1265

Timestamp:

03/16/10 15:08:07 (5 months ago)

Author:

Gary

Message:

unxsBind dnssec R&D scripts saved.

Location:

trunk/unxsBind/tools/dnssec

Files:

• ReSignParentZone.sh (added)
• SignZone.sh (modified) (3 diffs)

trunk/unxsBind/tools/dnssec/SignZone.sh

@@ -50 +50 @@
 fi
 
-#This will keep signing the zone over and over with more keys.
-#As long as the system has not generated another zone db file on us.
-cat $cKSKKey.key $cZSKKey.key >> $2;
+cp $2 $2.tmp;
+if [ $? != 0 ];then
+        echo "cp $2.tmp error";
+        exit 1;
+fi
+
+cat $cKSKKey.key $cZSKKey.key >> $2.tmp;
 if [ $? != 0 ];then
         echo "cat $cKSKKey $cZSKKey error";
@@ -78 +82 @@
 fi
 
-/usr/sbin/dnssec-signzone -o $1 -k /usr/local/idns/keys/$cKSKKey.key $2 /usr/local/idns/keys/$cZSKKey.key;
+/usr/sbin/dnssec-signzone -o $1 -k /usr/local/idns/keys/$cKSKKey.key $2.tmp /usr/local/idns/keys/$cZSKKey.key;
 if [ $? != 0 ];then
-        echo "/usr/sbin/dnssec-signzone -D /usr/local/idns/keys/ -o $1 -k /usr/local/idns/keys/$cKSKKey $2 /usr/local/idns/keys/$cZSKKey (error)";
+        echo "/usr/sbin/dnssec-signzone -D /usr/local/idns/keys/ -o $1 -k /usr/local/idns/keys/$cKSKKey $2.tmp /usr/local/idns/keys/$cZSKKey (error)";
+        rm -f /usr/local/idns/keys/K$1*.key;
+        rm -f /usr/local/idns/keys/K$1*.private;
         exit 1;
 fi
+#unexpected error leave keys for now
 if [ ! -f $2.signed ];then
         echo "/usr/sbin/dnssec-signzone error2";
+        #rm -f /usr/local/idns/keys/K$1*.key;
+        #rm -f /usr/local/idns/keys/K$1*.private;
         exit 1;
 fi
+
+rm -f $2.tmp;
 
 mv dsset-$1* /usr/local/idns/keys/;
@@ -101 +112 @@
 
 
-#We can remove the keys since they are in the .signed and the zone db files.
-#We keep the private keys however for resigning with same KSK (ZSK rollover).
-rm -f /usr/local/idns/keys/K$1*.key;
-
 #Note we assume that the default rndc key is setup correctly here.
 /usr/sbin/rndc reload > /dev/null 2>&1;