16 |
16 |
17 function test_ksk_new { # prueft ob es einen KSK gibt |
17 function test_ksk_new { # prueft ob es einen KSK gibt |
18 for zone in $master_dir/* |
18 for zone in $master_dir/* |
19 do |
19 do |
20 test -f $zone/${zone##*/}.signed || continue |
20 test -f $zone/${zone##*/}.signed || continue |
21 test -f $zone/.index.ksk || echo ${zone##/*/} |
21 test -f "$zone/.index.ksk" || echo ${zone##/*/} |
22 done |
22 done |
23 } |
23 } |
24 |
24 |
25 function test_zsk_time { # prueft den keycounter |
25 function test_zsk_time { # prueft den keycounter |
26 for zone in $master_dir/* |
26 for zone in $master_dir/* |
54 zsk_time=`test_zsk_time $key_counter_end` |
54 zsk_time=`test_zsk_time $key_counter_end` |
55 zsk_new=`test_zsk_new` |
55 zsk_new=`test_zsk_new` |
56 ksk_new=`test_ksk_new` |
56 ksk_new=`test_ksk_new` |
57 |
57 |
58 |
58 |
59 for NEW_ZSK_ZONE in $zsk_new $zsk_time $zsk_aenderung # Erstellt ZSK |
59 for NEW_ZSK_ZONE in $zsk_time $zsk_aenderung # Erstellt ZSK |
60 do |
60 do |
61 cd $master_dir/$NEW_ZSK_ZONE |
61 cd $master_dir/$NEW_ZSK_ZONE |
62 echo "erzeugt zsk fuer" $NEW_ZSK_ZONE |
62 echo "erzeugt zsk fuer" $NEW_ZSK_ZONE |
63 dnssec-keygen -a RSASHA1 -b 512 -n ZONE $NEW_ZSK_ZONE >> .index.zsk |
63 dnssec-keygen -a RSASHA1 -b 512 -n ZONE $NEW_ZSK_ZONE >> .index.zsk |
64 INDEX_ZSK=$( tail -n2 .index.zsk ) |
64 INDEX_ZSK=$( tail -n2 .index.zsk ) |
65 echo $INDEX_ZSK | fmt -w1 > .index.zsk |
65 echo $INDEX_ZSK | fmt -w1 > .index.zsk |
66 |
66 |
67 echo 0 > keycounter |
67 echo 0 > keycounter |
68 done |
68 done |
69 |
69 |
70 for NEW_KSK_ZONE in $ksk_new # Erstellt KSK |
70 for NEW_KSK_ZONE in $zsk_aenderung # Erstellt KSK |
71 do |
71 do |
72 cd $master_dir/$NEW_KSK_ZONE |
72 cd $master_dir/$NEW_KSK_ZONE |
73 echo "erzeugt ksk fuer" $NEW_KSK_ZONE |
73 echo "erzeugt ksk fuer" $NEW_KSK_ZONE |
74 dnssec-keygen -a RSASHA1 -b 2048 -f KSK -n ZONE $NEW_KSK_ZONE >> .index.ksk |
74 dnssec-keygen -a RSASHA1 -b 2048 -f KSK -n ZONE $NEW_KSK_ZONE >> .index.ksk |
75 INDEX_KSK=$( tail -n2 .index.ksk ) |
75 INDEX_KSK=$( tail -n2 .index.ksk ) |