This repository has been archived on 2024-02-16. You can view files and clone it, but cannot push or open issues or pull requests.
its-zones/server/knot-gpgv-import
Daniel Gröber 8823b6238f server: Fix gpgv script
We do in fact control the upload order, it's in the makefile. So just
upload the zone first then the sig and then only verify and copy on the sig
upload.
2021-10-28 04:09:19 +02:00

20 lines
344 B
Bash

#!/bin/sh
set -eu
file="$1"
case "$file" in
*.zone.sig) ;;
# Ignore everything else
*) exit 0 ;;
esac
zone=${file%*.sig}
[ -f "$file" ] || exit 1
[ -f "$zone" ] || exit 2
gpgv --keyring $HOME/trustedkeys.kbx "$file" "$zone" || exit 3
cp -t /var/lib/knot "$zone" || exit 4
sudo -u knot knotc zone-reload "$(basename "${zone%*.zone*}")"