|
@@ -14,21 +14,16 @@ filename=/tmp/`date -Ins`_$ZONE.log
|
|
touch $filename
|
|
touch $filename
|
|
chmod 640 $filename
|
|
chmod 640 $filename
|
|
|
|
|
|
-echo "sign, post-update $ZONE"
|
|
|
|
-pdnsutil secure-zone $ZONE; pdnsutil set-nsec3 $ZONE "1 0 10 $SALT" && `dirname $0`/domain_post_update.sh $ZONE || exit 2
|
|
|
|
|
|
+echo "signing $ZONE and updating serial"
|
|
|
|
+pdnsutil secure-zone $ZONE && pdnsutil set-nsec3 $ZONE "1 0 10 $SALT" && pdnsutil increase-serial $ZONE || exit 2
|
|
|
|
|
|
-echo "getting DS records for $ZONE"
|
|
|
|
|
|
+echo "Setting DS records for $ZONE and put them in parent zone"
|
|
DATA='{"rrsets": [ {"name": "'"$ZONE".'", "type": "DS", "ttl": 60, "changetype": "REPLACE", "records": '
|
|
DATA='{"rrsets": [ {"name": "'"$ZONE".'", "type": "DS", "ttl": 60, "changetype": "REPLACE", "records": '
|
|
DATA+=`curl -sS -X GET -H "X-API-Key: $APITOKEN" http://127.0.0.1:8081/api/v1/servers/localhost/zones/$ZONE/cryptokeys \
|
|
DATA+=`curl -sS -X GET -H "X-API-Key: $APITOKEN" http://127.0.0.1:8081/api/v1/servers/localhost/zones/$ZONE/cryptokeys \
|
|
| jq -c '[.[] | select(.active == true) | {content: .ds[]?, disabled: false}]'`
|
|
| jq -c '[.[] | select(.active == true) | {content: .ds[]?, disabled: false}]'`
|
|
DATA+=" } ] }"
|
|
DATA+=" } ] }"
|
|
echo $DATA >> $filename
|
|
echo $DATA >> $filename
|
|
-
|
|
|
|
-echo "Setting DS records in parent zone $PARENT"
|
|
|
|
curl -sSv -X PATCH --data "$DATA" -H "X-API-Key: $APITOKEN" http://127.0.0.1:8081/api/v1/servers/localhost/zones/$PARENT &>> $filename || exit 3
|
|
curl -sSv -X PATCH --data "$DATA" -H "X-API-Key: $APITOKEN" http://127.0.0.1:8081/api/v1/servers/localhost/zones/$PARENT &>> $filename || exit 3
|
|
|
|
|
|
-echo "post-update $PARENT"
|
|
|
|
-`dirname $0`/domain_post_update.sh $PARENT || exit 4
|
|
|
|
-
|
|
|
|
echo -n "This was $0: "
|
|
echo -n "This was $0: "
|
|
date
|
|
date
|