bind/new_key.pl

81 lines
2.7 KiB
Perl
Raw Permalink Normal View History

#!/usr/bin/perl -W
#----------------------------------------------------------------------
# copyright (C) 2001 Florin Grad
#
# This is a really silly program that is supposed to generate a new key
# and update the existing one in /etc/rndc.conf or /etc/named.conf
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#------------------------------------------------------------------------
my $key ="";
#generate the key
system ("dns-keygen > /etc/rndc.key") ;
open (KEY, "< /etc/rndc.key") or die "Can't open the/etc/rdnc.key_file file for reading";
while (<KEY>) {
chomp($_);
my @list = $_;
$key = $list[0];
}
close(KEY);
system ("rm -rf /etc/rndc.key");
#update the /etc/rndc.conf file
my $conf_file = "/etc/rndc.conf";
my $conf_file_backup = $conf_file.".backup";
open (CONF, "< $conf_file") or die "Can't open the $conf_file file for reading";
open (CONF_new, "> $conf_file_backup") or die "Can't open the $conf_file_backup file for writing";
while (<CONF>) {
chomp($_);
my @line = split (/\s+|\t+/,$_) ;
if ($line[1] && ($line[1] eq "secret") && $line[2] && ($line[2] ne "must")) {
print CONF_new "\tsecret \"".$key."\";\n";
next;
};
print CONF_new "$_\n";
};
close (CONF_new);
close (CONF);
rename ("$conf_file","$conf_file".".orig");
rename ("$conf_file_backup","$conf_file");
#update the /etc/.named file
$conf_file = "/etc/named.conf";
$conf_file_backup = $conf_file.".backup";
open (CONF, "< $conf_file") or die "Can't open the $conf_file file for reading";
open (CONF_new, "> $conf_file_backup") or die "Can't open the $conf_file_backup file for writing";
while (<CONF>) {
chomp($_);
my @line = split (/\s+|\t+/,$_) ;
if ($line[1] && ($line[1] eq "secret") && $line[2] && ($line[2] ne "must")) {
print CONF_new "\tsecret \"".$key."\";\n";
next;
};
print CONF_new "$_\n";
};
close (CONF_new);
close (CONF);
rename ("$conf_file","$conf_file".".orig");
rename ("$conf_file_backup","$conf_file");
#fix permissions
system "chmod 0600 /etc/rndc.conf /etc/named.conf";
system "chown named.named /etc/rndc.conf /etc/named.conf";