X-Git-Url: https://git.distorted.org.uk/~mdw/dnserr/blobdiff_plain/b846721dbd13217a837669159755b781125e521c..4ee49a0e5e42fe3995ad42f872c270d118a23c6c:/Makefile

diff --git a/Makefile b/Makefile
index 81b88c1..d1c6653 100644
--- a/Makefile
+++ b/Makefile
@@ -3,7 +3,7 @@
 BASE			 = distorted.org.uk
 ZONE			 = dnserr.$(BASE)
 
-KEYGEN			 = dnssec-keygen -aRSASHA256 -b1024 -Kkey/
+KEYGEN			 = dnssec-keygen -aRSASHA256 -b1024 -r/dev/urandom -Kkey/
 SIGNZONE		 = dnssec-signzone -S -Kkey/ -dds/
 SIGVALID		 = -s20000101000000 -e20300101000000
 SIGOLD			 = -s20000101000000 -e20010101000000
@@ -64,9 +64,13 @@ CLEAN			+= t.oldsig
 dnserr.zone.sig: dnserr.zone.sigold dnserr.zone.signew
 	awk '$(OLDSIGMATCH) { print; }' \
 		dnserr.zone.sigold >t.oldsig
-	awk '$(OLDSIGMATCH) { system("cat t.oldsig"); next; } \
+	awk '$(OLDSIGMATCH) { \
+		if (!doneoldsig) { system("cat t.oldsig"); doneoldsig = 1; } \
+		next; \
+	     } \
 		{ gsub(/invalid-rrsigx/, "invalid-rrsig"); print; }' \
-	dnserr.zone.signew >$@.new
+		dnserr.zone.signew >$@.new
+	rm t.oldsig
 	mv $@.new $@
 
 CLEAN			+= $(TARGETS)