mirror of
https://github.com/isc-projects/bind9.git
synced 2026-03-29 13:53:29 -04:00
45afdb2672
4594. [func] dnssec-keygen no longer uses RSASHA1 by default; the signing algorithm must be specified on the command line with the "-a" option. Signing scripts that rely on the existing default behavior will break; use "dnssec-keygen -a RSASHA1" to repair them. (The goal of this change is to make it easier to find scripts using RSASHA1 so they can be changed in the event of that algorithm being deprecated in the future.) [RT #44755]
36 lines
1.4 KiB
Bash
36 lines
1.4 KiB
Bash
#!/bin/sh
|
|
#
|
|
# Copyright (C) 2000, 2001, 2004, 2007, 2012, 2014, 2016, 2017 Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
cp -f ns2/example1.db ns2/example.db
|
|
cp -f ns2/named1.conf ns2/named.conf
|
|
cp -f ns3/named1.conf ns3/named.conf
|
|
rm -f ns2/external/K*
|
|
rm -f ns2/external/inline.db.signed
|
|
rm -f ns2/external/inline.db.signed.jnl
|
|
rm -f ns2/internal/K*
|
|
rm -f ns2/internal/inline.db.signed
|
|
rm -f ns2/internal/inline.db.signed.jnl
|
|
|
|
SYSTEMTESTTOP=..
|
|
. $SYSTEMTESTTOP/conf.sh
|
|
|
|
test -r $RANDFILE || $GENRANDOM 800 $RANDFILE
|
|
|
|
#
|
|
# We remove k1 and k2 as KEYGEN is deterministic when given the
|
|
# same source of "random" data and we want different keys for
|
|
# internal and external instances of inline.
|
|
#
|
|
$KEYGEN -K ns2/internal -r $RANDFILE -a rsasha256 -q inline > /dev/null 2>&1
|
|
$KEYGEN -K ns2/internal -r $RANDFILE -a rsasha256 -qfk inline > /dev/null 2>&1
|
|
k1=`$KEYGEN -K ns2/external -r $RANDFILE -a rsasha256 -q inline 2> /dev/null`
|
|
k2=`$KEYGEN -K ns2/external -r $RANDFILE -a rsasha256 -qfk inline 2> /dev/null`
|
|
$KEYGEN -K ns2/external -r $RANDFILE -a rsasha256 -q inline > /dev/null 2>&1
|
|
$KEYGEN -K ns2/external -r $RANDFILE -a rsasha256 -qfk inline > /dev/null 2>&1
|
|
test -n "$k1" && rm -f ns2/external/$k1.*
|
|
test -n "$k2" && rm -f ns2/external/$k2.*
|