diff options
| author | Daniel Baumann <daniel.baumann@open-infrastructure.net> | 2022-09-06 13:52:53 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@open-infrastructure.net> | 2022-09-06 13:53:57 +0000 |
| commit | e96382cba10d54c4759cecc4da59650a5061ce4f (patch) | |
| tree | f5a977e3d5fea5ec6e86d20026138d08afe543cd | |
| parent | Improving wording of TSIG lookup hierarchy in dehydrated-nsupdate.1. (diff) | |
| download | service-tools-e96382cba10d54c4759cecc4da59650a5061ce4f.tar.xz service-tools-e96382cba10d54c4759cecc4da59650a5061ce4f.zip | |
Temporarily passing tsig string to bind as it requires a different keyfile format as knot.
Signed-off-by: Daniel Baumann <daniel.baumann@open-infrastructure.net>
| -rwxr-xr-x | dehydrated/bin/dehydrated-nsupdate | 24 |
1 files changed, 21 insertions, 3 deletions
diff --git a/dehydrated/bin/dehydrated-nsupdate b/dehydrated/bin/dehydrated-nsupdate index 05027ab..f6f40e6 100755 --- a/dehydrated/bin/dehydrated-nsupdate +++ b/dehydrated/bin/dehydrated-nsupdate @@ -59,16 +59,26 @@ fi if command -v knsupdate > /dev/null 2>&1 then # knot-dnsutils - NSUPDATE="knsupdate" + NSUPDATE_VARIANT="knot" elif command -v nsupdate > /dev/null 2>&1 then # bind-dnsutils - NSUPDATE="nsupdate" + NSUPDATE_VARIANT="bind" else echo "'${HOOK}': need nsupdate from bind-dnsutils or knot-dnsutils" >&2 exit 1 fi +case "${NSUPDATE_VARIANT}" in + knot) + NSUPDATE="knsupdate" + ;; + + bind) + NSUPDATE="nsupdate" + ;; +esac + # config for FILE in /etc/default/dehydrated-nsupdate /etc/default/dehydrated-nsupdate.d/* do @@ -168,7 +178,15 @@ do if [ -n "${KEY}" ] && [ -n "${TSIG}" ] then - NSUPDATE_OPTIONS="-k ${KEY}" + case "${NSUPDATE_VARIANT}" in + knot) + NSUPDATE_OPTIONS="-k ${KEY}" + ;; + + bind) + NSUPDATE_OPTIONS="-y $(cat ${KEY})" + ;; + esac fi echo -n " + sending '${HOOK_ACTION}' for ${TXT_RECORD} to ${NAMESERVER}..." |