DNSSEC: Complete support for key delegations to sub-domains

[nsc-5.git] / bin / key-update

diff --git a/bin/key-update b/bin/key-update
index 3820ef510c6eb6eacb0c686622354cc79cb73215..e7efe3626343d09a79946337767329d4282b610b 100755 (executable)
--- a/bin/key-update
+++ b/bin/key-update
@@ -7,7 +7,7 @@ shopt -s nullglob
 . bin/shell-env
 
 if [ $# -gt 1 ] ; then
 . bin/shell-env
 
 if [ $# -gt 1 ] ; then

-       echo >&2 "Usage: $0 [<domain>]"
+       echo >&2 "Usage: $0 [<zone>]"

        exit 1
 fi
 
        exit 1
 fi
 


@@ -15,8 +15,8 @@ update ()
 {
        local D=$1
        local K=keys/$D
 {
        local D=$1
        local K=keys/$D

-       local H=$K.hash
-       cat $K/*.key | sha1sum | cut -f1 -d' ' >$H.new
+       local H=khash/$D
+       cat /dev/null $K/*.key | sha1sum | cut -f1 -d' ' >$H.new

        if [ ! -f $H ] || ! cmp -s $H $H.new ; then
                echo "** $D: New key hash"
                mv $H.new $H
        if [ ! -f $H ] || ! cmp -s $H $H.new ; then
                echo "** $D: New key hash"
                mv $H.new $H


@@ -32,8 +32,8 @@ if [ -z "$1" ] ; then
                        update $(basename $DD)
                fi
        done
                        update $(basename $DD)
                fi
        done

-       for H in keys/*.hash ; do
-               B=$(basename $H .hash)
+       for H in khash/* ; do
+               B=$(basename $H)

                if [ ! -d keys/$B ] ; then
                        echo "## $B: Deleted obsolete hash"
                        rm $H
                if [ ! -d keys/$B ] ; then
                        echo "## $B: Deleted obsolete hash"
                        rm $H