1589. [func] DNSSEC lookaside validation.

enable-dnssec -> dnssec-enable
This commit is contained in:
Mark Andrews
2004-03-10 02:19:58 +00:00
parent fa7ee558e0
commit 50105afc55
33 changed files with 951 additions and 106 deletions

View File

@@ -15,7 +15,7 @@
* PERFORMANCE OF THIS SOFTWARE.
*/
/* $Id: named.conf,v 1.22 2004/03/05 05:00:16 marka Exp $ */
/* $Id: named.conf,v 1.23 2004/03/10 02:19:53 marka Exp $ */
// NS2
@@ -31,7 +31,7 @@ options {
listen-on-v6 { none; };
recursion no;
notify yes;
enable-dnssec yes;
dnssec-enable yes;
};
zone "." {
@@ -39,6 +39,11 @@ zone "." {
file "../../common/root.hint";
};
zone "dlv" {
type master;
file "dlv.db.signed";
};
zone "example" {
type master;
file "example.db.signed";

View File

@@ -15,7 +15,7 @@
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
# PERFORMANCE OF THIS SOFTWARE.
# $Id: sign.sh,v 1.23 2004/03/05 05:00:16 marka Exp $
# $Id: sign.sh,v 1.24 2004/03/10 02:19:53 marka Exp $
SYSTEMTESTTOP=../..
. $SYSTEMTESTTOP/conf.sh
@@ -52,4 +52,17 @@ privkeyname=`$KEYGEN -r $RANDFILE -a RSA -b 768 -n zone $privzone`
cat $privinfile $privkeyname.key >$privzonefile
$SIGNER -g -r $RANDFILE -o $privzone $privzonefile > /dev/null
$SIGNER -g -r $RANDFILE -o $privzone -l dlv $privzonefile > /dev/null
# Sign the DLV secure zone.
dlvzone=dlv.
dlvinfile=dlv.db.in
dlvzonefile=dlv.db
dlvkeyname=`$KEYGEN -r $RANDFILE -a RSA -b 768 -n zone $dlvzone`
cat $dlvinfile $dlvkeyname.key dlvset-$privzone > $dlvzonefile
$SIGNER -g -r $RANDFILE -o $dlvzone $dlvzonefile > /dev/null