b99bfa184b
3550. [func] Unified the internal and export versions of the BIND libraries, allowing external clients to use the same libraries as BIND. [RT #33131]
17 lines
593 B
Bash
17 lines
593 B
Bash
#!/bin/sh
|
|
# Fetch a copy of a current root signing key; used for testing
|
|
# DNSSEC validation in 'sample'.
|
|
#
|
|
# After running this script, "sample `cat sample.key` <args>" will
|
|
# perform a lookup as specified in <args> and validate the result
|
|
# using the root key.
|
|
#
|
|
# (This is NOT a secure method of obtaining the root key; it is
|
|
# included here for testing purposes only.)
|
|
dig +noall +answer dnskey . | perl -n -e '
|
|
local ($dn, $ttl, $class, $type, $flags, $proto, $alg, @rest) = split;
|
|
next if ($flags != 257);
|
|
local $key = join("", @rest);
|
|
print "-a $alg -e -k $dn -K $key\n"
|
|
' > sample.key
|