openwrt-packages-dist/net/unbound/files/rootzone.sh

#!/bin/sh
##############################################################################
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2 as
# published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# Copyright (C) 2016 Eric Luehrsen
#
##############################################################################
#
# This component needs to be used within the unbound.sh as an include. It uses
# defaults and UCI scope variables defined there. It will copy root.key back
# to /etc/unbound/ periodically, but avoid ROM flash abuse (UCI option).
#
##############################################################################

rootzone_uci() {
  # TODO: Just structure to real UCI coming soon.
  echo
}

##############################################################################

roothints_update() {
  # TODO: Maybe this will not be implemented.
  echo
}

##############################################################################

rootkey_update() {
  local basekey_date rootkey_date rootkey_age filestuff

  # TODO: Just structure to real UCI coming soon.
  if [ "$UNBOUND_N_ROOT_AGE" -gt 90 -o "$UNBOUND_B_DNSSEC" -lt 1 ] ; then
    # Feature disabled
    return 0
  fi
   
  
  if [ -f /etc/unbound/root.key ] ; then
    basekey_date=$( date -r /etc/unbound/root.key +%s )
    
  else
    # No persistent storage key
    basekey_date=$( date -d 2000-01-01 +%s )
  fi
  
  
  if [ -f "$UNBOUND_KEYFILE" ] ; then
    # Unbound maintains it itself
    rootkey_date=$( date -r $UNBOUND_KEYFILE +%s )
    rootkey_age=$(( (rootkey_date - basekey_date) / 86440 ))
    
  elif [ -x "$UNBOUND_ANCHOR" ] ; then
    # No tmpfs key - use unbound-anchor
    rootkey_date=$( date -I +%s )
    rootkey_age=$(( (rootkey_date - basekey_date) / 86440 )) 
    $UNBOUND_ANCHOR -a $UNBOUND_KEYFILE
    
  else 
    # give up
    rootkey_age=0
  fi


  if [ "$rootkey_age" -gt "$UNBOUND_N_ROOT_AGE" ] ; then
    filestuff=$( cat $UNBOUND_KEYFILE )
    
      
    case "$filestuff" in
      *NOERROR*)
        # Header comment for drill and dig
        logger -t unbound -s "root.key updated after $rootkey_age days"
        cp -p $UNBOUND_KEYFILE /etc/unbound/root.key
        ;;
        
      *"state=2 [  VALID  ]"*)
        # Comment inline to key for unbound-anchor
        logger -t unbound -s "root.key updated after $rootkey_age days"
        cp -p $UNBOUND_KEYFILE /etc/unbound/root.key
        ;;
        
      *) 
        logger -t unbound -s "root.key still $rootkey_age days old" 
        ;;
    esac
  fi
}

##############################################################################

rootzone_update() {
  rootzone_uci
  roothints_update
  rootkey_update
}

##############################################################################