bind/generate-rndc-key.sh

#!/bin/bash

if [ -r /etc/rc.d/init.d/functions ]; then
	. /etc/rc.d/init.d/functions
else
success() {
	echo $" OK "
}

failure() {
	echo -n " "
	echo $"FAILED"
}
fi

# This script generates /etc/rndc.key if doesn't exist AND if there is no rndc.conf

if [ ! -s /etc/rndc.key ] && [ ! -s /etc/rndc.conf ]; then
  echo -n $"Generating /etc/rndc.key:"
  if /usr/sbin/rndc-confgen -a -A hmac-sha256 > /dev/null 2>&1
  then
    chmod 640 /etc/rndc.key
    chown root:named /etc/rndc.key
    [ -x /sbin/restorecon ] && /sbin/restorecon /etc/rndc.key
    success $"/etc/rndc.key generation"
    echo
  else
    rc=$?
    failure $"/etc/rndc.key generation"
    echo
    exit $rc
  fi
fi