Links

Ben Laurie blathering


DNSSEC: Update

I’ve had feedback since I wrote about DNSSEC that my makefile didn’t work on many platforms. Why Linux and FreeBSD have to use different versions of make I have no idea, but at least it is possible to write makefiles that work on either, if you’re careful. So, I’ve updated the tarball with a version that should work most places. Give it a try.

For the geeky, here’s a diff:

iff -r 94acb807ca7c -r d4a50f0d790c Makefile
--- a/Makefile  Sat Mar 07 16:41:39 2009 +0000
+++ b/Makefile  Sat Mar 07 16:49:37 2009 +0000
@@ -1,4 +1,6 @@
 all: run
+
+.PHONY: named.root anchors.xml isc-dlv.conf
 
 push: dnssec.tgz
        scp dnssec.tgz www.links.org:files
@@ -6,7 +8,7 @@
 run: named.root rndc.key itar-trusted-keys.conf force-dnssec.conf isc-dlv.conf
        named -c named.conf -d 10 -g
 
-named.root!
+named.root:
        rm -f named.root
        wget ftp://ftp.rs.internic.net/domain/named.root
 
@@ -17,7 +19,7 @@
        ./anchors2keys < anchors.xml > /tmp/itar-trusted-keys
        mv /tmp/itar-trusted-keys itar-trusted-keys.conf
 
-anchors.xml! iana-pgp-keys
+anchors.xml: iana-pgp-keys
 # appears to break without -v!
        rsync -v rsync.iana.org::itar/anchors.xml rsync.iana.org::itar/anchors.xml.sig .
        gpg --no-default-keyring --keyring ./iana-pgp-keys --verify anchors.xml.sig anchors.xml
@@ -46,7 +48,7 @@
        gpg --export 1BC91E6C | gpg --no-default-keyring --keyring ./isc-pgp-keys --import
        rm isc-key.tmp* 363
 
-isc-dlv.conf! isc-pgp-keys
+isc-dlv.conf: isc-pgp-keys
        rm -f dlv.isc.org.named.conf*
        wget http://ftp.isc.org/www/dlv/dlv.isc.org.named.conf http://ftp.isc.org/www/dlv/dlv.isc.org.named.conf.asc
        gpg --no-default-keyring --keyring ./isc-pgp-keys --verify dlv.isc.org.named.conf.asc dlv.isc.org.named.conf

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.

Powered by WordPress