bin/sign.sh

   1 #/bin/bash
   2
   3 basedir=$(cd `dirname $0`/..; pwd)
   4 cd $basedir
   5
   6 export PATH=$PATH:/home/davidb/src/jdnssec/jdnssec-tools/bin
   7
   8 KSK1=keys/K.+008+06820
   9 KSK2=keys/K.+008+36326
  10 KSK3=keys/K.+005+57497
  11 ZSK1=keys/K.+008+02998
  12 ZSK2=keys/K.+008+14239
  13 ZSK3=keys/K.+008+23406
  14 ZSK4=keys/K.+008+15799
  15 ZSK5=keys/K.+008+63825
  16 ZSK6=keys/K.+008+01420
  17 RSKSK1=keys/Kroot-servers.net.+005+64321
  18 RSZSK1=keys/Kroot-servers.net.+005+30711
  19 ARPAKSK1=keys/Karpa.+005+52246
  20 ARPAZSK1=keys/Karpa.+005+64611
  21
  22 jdnssec-signzone -k $KSK1 -f root.zone.signed root.zone $ZSK1
  23
  24 jdnssec-signzone -k $ARPAKSK1 -f arpa.zone.signed arpa.zone $ARPAZSK1
  25
  26 jdnssec-signzone -k $RSKSK1 -f root-servers.net.signed \
  27     root-servers.net.zone $RSZSK1