|
|
|
@@ -24,21 +24,21 @@ cd /data/namedb/master
|
|
|
|
|
rm /data/namedb/master/*signed*
|
|
|
|
|
|
|
|
|
|
declare -A ZONE_PEM
|
|
|
|
|
ZONE_PEM=(["ahlawat.com"]="" ["beyondbell.com"]="bb" ["diyit.org"]="diy" ["xflow.org"]="xflow" ["datavpc.com"]="dvpc" ["mydatavpc.com"]="mdvpc" ["rockwoodestates.org"]="rwe" ["rockwoodranch.org"]="rwr" ["scvcc-rental.com"]="scvcc")
|
|
|
|
|
# ZONE_PEM=(["ahlawat.com"]="" ["beyondbell.com"]="bb" ["diyit.org"]="diy" ["xflow.org"]="xflow" ["datavpc.com"]="dvpc" ["mydatavpc.com"]="mdvpc" ["rockwoodestates.org"]="rwe" ["rockwoodranch.org"]="rwr" ["scvcc-rental.com"]="scvcc" ["inseego5g.net"]="i5g" )
|
|
|
|
|
ZONE_PEM=(["ahlawat.com"]="" ["beyondbell.com"]="bb" ["diyit.org"]="diy" ["datavpc.com"]="dvpc" ["mydatavpc.com"]="mdvpc" ["rockwoodestates.org"]="rwe" ["rockwoodranch.org"]="rwr" ["scvcc-rental.com"]="scvcc" ["inseego5g.net"]="i5g" )
|
|
|
|
|
|
|
|
|
|
for ZONE in "${!ZONE_PEM[@]}"
|
|
|
|
|
do
|
|
|
|
|
PEM=${ZONE_PEM[$ZONE]}
|
|
|
|
|
|
|
|
|
|
/usr/local/bin/ldns-dane -c "/mnt/certs/"$PEM"fullchain.pem" create mail.$ZONE 25 3 1 1 > /data/namedb/master/tlsa-$ZONE
|
|
|
|
|
/usr/local/bin/ldns-dane -c "/mnt/certs/"$PEM"fullchain.pem" create mail-backup.$ZONE 25 3 1 1 >> /data/namedb/master/tlsa-$ZONE
|
|
|
|
|
/usr/local/bin/ldns-dane -c "/mnt/certs/"$PEM"fullchain.pem" create $ZONE 443 3 1 1 >> /data/namedb/master/tlsa-$ZONE
|
|
|
|
|
/usr/local/bin/ldns-dane -c "/mnt/certs/"$PEM"fullchain.pem" create www.$ZONE 443 3 1 1 >> /data/namedb/master/tlsa-$ZONE
|
|
|
|
|
/usr/local/bin/ldns-dane -c "/mnt/certs/${PEM}fullchain.pem" create mail.$ZONE 25 3 1 1 > /data/namedb/master/tlsa-$ZONE
|
|
|
|
|
/usr/local/bin/ldns-dane -c "/mnt/certs/${PEM}fullchain.pem" create mail-backup.$ZONE 25 3 1 1 >> /data/namedb/master/tlsa-$ZONE
|
|
|
|
|
/usr/local/bin/ldns-dane -c "/mnt/certs/${PEM}fullchain.pem" create $ZONE 443 3 1 1 >> /data/namedb/master/tlsa-$ZONE
|
|
|
|
|
/usr/local/bin/ldns-dane -c "/mnt/certs/${PEM}fullchain.pem" create www.$ZONE 443 3 1 1 >> /data/namedb/master/tlsa-$ZONE
|
|
|
|
|
done
|
|
|
|
|
|
|
|
|
|
NEW_SERIAL=`date -j +%Y%m%d%H`
|
|
|
|
|
#NEW_SERIAL="2022022635"
|
|
|
|
|
echo $NEW_SERIAL
|
|
|
|
|
|
|
|
|
|
for DBFILE in `ls /data/namedb/master/*.db`
|
|
|
|
|
do
|
|
|
|
@@ -47,6 +47,7 @@ do
|
|
|
|
|
/usr/local/sbin/named-checkzone $ZONE $DBFILE
|
|
|
|
|
SERIAL=`/usr/local/sbin/named-checkzone $ZONE $DBFILE | egrep -ho '[0-9]{10}'`
|
|
|
|
|
echo $SERIAL
|
|
|
|
|
echo $NEW_SERIAL
|
|
|
|
|
sed -i .orig 's/'$SERIAL'/'$(($NEW_SERIAL))'/' $DBFILE
|
|
|
|
|
|
|
|
|
|
#/usr/local/sbin/dnssec-signzone -S -K /data/namedb/master -t -o $ZONE $DBFILE
|
|
|
|
|