license="Custom"
arch=('i686' 'x86_64')
depends=(dnssec-root-zone-trust-anchors perl perl-timedate perl-net-dns perl-net-dns-sec)
-backup=(etc/dnssec-tools/dnsval.conf.head etc/dnssec-tools/dnsval.conf.tail)
+backup=(etc/dnssec-tools/resolv.conf etc/dnssec-tools/root.hints)
install="${pkgname}.install"
-source=("http://www.dnssec-tools.org/download/${pkgname}-${pkgver}.tar.gz" dnsval.conf)
+source=("http://www.dnssec-tools.org/download/${pkgname}-${pkgver}.tar.gz" dnsval.conf resolv.conf)
md5sums=('f3dfe18ae50cf65594936e1684d469d0'
- '05656944ff9caa959591f547cfe25eba')
+ 'aaee6f50ab4abbc183f64b5de013f756'
+ '03ff269fa39d2a7eb6cbe108bcea473a')
build() {
cd ${srcdir}/${pkgname}-${pkgver}/ || return 1
msg2 'configuration files'
cp -r validator/etc/* "${pkgdir}/etc/${pkgname}/"
rm -rf "${pkgdir}/etc/${pkgname}/${pkgname}.conf" #will be generated in post_install
- cp -f "${srcdir}/dnsval.conf" "${pkgdir}/etc/dnssec-tools/"
- touch "${pkgdir}"/etc/dnssec-tools/dnsval.conf.{head,tail}
+ cp -f "${srcdir}"/{dnsval,resolv}.conf "${pkgdir}/etc/dnssec-tools/"
msg2 'license informations'
mkdir -p "${pkgdir}/usr/share/licenses/${pkgname}/"
cp COPYING "${pkgdir}/usr/share/licenses/${pkgname}/"
# Default policies
##################################
-: trust-anchor
- dnssec-tools.org DS 54556 5 2 6B026928292D452A5CC37B3EF327F27F50A29936CB31E664EB066D71A476E282
-;
-
-: zone-security-expectation
- dnssec-tools.org validate
-;
+#: trust-anchor
+# . "974 0 0 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"
+# dnssec-tools.org DS 54556 5 2 6B026928292D452A5CC37B3EF327F27F50A29936CB31E664EB066D71A476E282
+#;
+
+#: zone-security-expectation
+# . validate
+# dnssec-tools.org validate
+#;
: provably-insecure-status
. trusted
--- /dev/null
+#This is list of public DNSSEC validating nameservers
+#it should be replaced with symlink to /etc/resolv.conf
+#when your nameserver will support DNSSEC.
+
+#CZ NIC
+nameserver 217.31.204.130
+nameserver 2001:1488:800:400::130
+nameserver 217.31.204.131
+nameserver 2001:1488:800:400::131
+
+#OARC
+nameserver 149.20.64.20
+nameserver 2001:4f8:3:2bc:1::64:20
+nameserver 149.20.64.21
+nameserver 2001:4f8:3:2bc:1::64:21