unkinben/puppet-bind
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use an alternate name for the '.' zone

Browse Source 
The root zone's domain is `.` but this means something special in the
filesystem which causes an error when creating the zone file.
This commit is contained in:
Nate Riffe
2015-12-28 07:31:01 -06:00
parent c024a7fc5d
commit 34478d25da
3 changed files with 19 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
files/dnssec-init
+8 -2
View File
@@ -8,11 +8,17 @@ RANDOM_DEVICE="$5"
NSEC3_SALT="$6"
PATH=/bin:/sbin:/usr/bin:/usr/sbin
if [ "${DOMAIN}" == "." ]; then
ZONE_FILE=root
else
ZONE_FILE="${DOMAIN}"
fi
dnssec-keygen -a RSASHA256 -b 1024 -r "${RANDOM_DEVICE}" -K "${KEY_DIRECTORY}" "${DOMAIN}"
dnssec-keygen -a RSASHA256 -b 2048 -r "${RANDOM_DEVICE}" -f KSK -K "${KEY_DIRECTORY}" "${DOMAIN}"
if [ $NSEC3_SALT != '' ]; then
dnssec-signzone -S -u -3 ${NSEC3_SALT} -d "${CACHEDIR}" -K "${KEY_DIRECTORY}" -o "${DOMAIN}" "${CACHEDIR}/${NAME}/${DOMAIN}"
dnssec-signzone -S -u -3 ${NSEC3_SALT} -d "${CACHEDIR}" -K "${KEY_DIRECTORY}" -o "${DOMAIN}" "${CACHEDIR}/${NAME}/${ZONE_FILE}"
else
dnssec-signzone -S -d "${CACHEDIR}" -K "${KEY_DIRECTORY}" -o "${DOMAIN}" "${CACHEDIR}/${NAME}/${DOMAIN}"
dnssec-signzone -S -d "${CACHEDIR}" -K "${KEY_DIRECTORY}" -o "${DOMAIN}" "${CACHEDIR}/${NAME}/${ZONE_FILE}"
fi