bin/genzone

   1 #!/bin/bash
   2 # NSC -- Zone file generator
   3 # (c) 1997--2019 Martin Mares <mj@ucw.cz>
   4
   5 set -e
   6 . bin/shell-env
   7
   8 if [ $# -lt 2 ] ; then
   9         echo >&2 "Usage: $0 <domain> <source files>"
  10         exit 1
  11 fi
  12 Z=$1
  13 shift
  14
  15 CURRENT_HASH=$($M4 -DHASHING m4/nsc.m4 "$@" | md5sum | cut -d " " -f1)
  16 if [ -f $KEYDIR/$Z.hash ] ; then
  17         CURRENT_HASH=$CURRENT_HASH:$(cat $KEYDIR/$Z.hash)
  18         if [ -f $KEYDIR/resign-stamp ] ; then
  19                 CURRENT_HASH=$CURRENT_HASH:$(stat -c '%Y' $KEYDIR/resign-stamp)
  20         fi
  21 fi
  22
  23 PREV_HASH=$(if [ -s $HASHDIR/$Z ] ; then cat $HASHDIR/$Z ; fi)
  24 if [ "X$CURRENT_HASH" = "X$PREV_HASH" ] ; then
  25         echo "-- $Z: No changes"
  26         touch $ZONEDIR/$Z $HASHDIR/$Z
  27 else
  28         $M4 -DVERS=$VERSDIR/$Z m4/nsc.m4 "$@" >$ZONEDIR/$Z.new
  29         NEWVER="$(sed -e "s/^;;; VERSION: //; t; d" $ZONEDIR/$Z.new)"
  30         if [ -f $KEYDIR/$Z.hash ] ; then
  31                 if ! dnssec-signzone -a -d $DSSDIR -g -K $KEYDIR/$Z $SIGNZONE_OPTIONS -f $ZONEDIR/$Z.signed -o $Z -S -3 - $ZONEDIR/$Z.new &>$ZONEDIR/$Z.tmp ; then
  32                         cat $ZONEDIR/$Z.tmp
  33                         echo >&2 "FATAL: Signing failed"
  34                         exit 1
  35                 fi
  36                 rm -f $ZONEDIR/$Z.tmp
  37                 mv $ZONEDIR/$Z.signed $ZONEDIR/$Z
  38                 SIGNED=" (signed)"
  39         else
  40                 mv $ZONEDIR/$Z.new $ZONEDIR/$Z
  41                 SIGNED=
  42         fi
  43         echo "** $Z: New version $NEWVER$SIGNED"
  44         echo $CURRENT_HASH >$HASHDIR/$Z
  45 fi