dnserr.in, utils.m4: IPv6 address for blackhole.

[dnserr] / Makefile

diff --git a/Makefile b/Makefile
index d623e188fc0941b97d59d518e73f2272d9e3f9f4..7a397d16e64d4e05fca18f660b28e6e6eb2f5a34 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -57,15 +57,27 @@ dnserr.zone.sigold: dnserr.zone key/$(ZONE).stamp
 
 TARGETS                        += dnserr.zone.sig
 OLDSIGMATCH             = $$1 == "expired-rrsig.$(ZONE)." && \
-                               $$4 == "RRSIG" && $$5 == "A"
+                               $$4 == "RRSIG" && ($$5 == "A" || $$5 == "AAAA")
 BADSIGMATCH             = $$1 == "invalid-rrsig.$(ZONE)." && \
-                               $$4 == "RRSIG" && $$5 == "A"
+                               $$4 == "RRSIG" && ($$5 == "A" || $$5 == "AAAA")
 CLEAN                  += t.oldsig
 dnserr.zone.sig: dnserr.zone.sigold dnserr.zone.signew
        awk '$(OLDSIGMATCH) { print; }' \
                dnserr.zone.sigold >t.oldsig
-       awk '$(OLDSIGMATCH) { system("cat t.oldsig"); next; } \
-               { gsub(/invalid-rrsigx/, "invalid-rrsig"); print; }' \
+       awk '$(OLDSIGMATCH) { \
+               if (!doneoldsig) { system("cat t.oldsig"); doneoldsig = 1; } \
+               next; \
+            } \
+            $(BADSIGMATCH) { \
+               s = $$13; \
+               for (i = length(s)/2; i >= 0; i--) { \
+                 c = substr(s, i, 1); \
+                 if (c != tolower(c)) { c = tolower(c); break; } \
+                 else if (c != toupper(c)) { c = toupper(c); break; } \
+               } \
+               $$13 = substr(s, 0, i) c substr(s, i + 1); \
+            } \
+            { print; }' \
                dnserr.zone.signew >$@.new
        rm t.oldsig
        mv $@.new $@