show-signed

#!/bin/bash

# Copyright 2014-2015 Richard Russon (FlatCap)
# Licensed under the GPLv3

PATH="/var/named/bin:/usr/bin:/usr/sbin"
source log.sh

export TZ="UTC"

set -o errexit	# set -e
set -o nounset	# set -u

renice --priority 19 --pid $$ > /dev/null
ionice --class 3     --pid $$ > /dev/null

shopt -s nullglob

function finish()
{
	local RETVAL=$?
	[ $RETVAL = 0 ] || log_error "${0##*/} failed: $RETVAL"
}

trap finish EXIT

cd /var/named

for i in *.db.signed; do
	SERIAL=$(grep -o "\<[[:digit:]]\{10\}\>[[:space:]]*;[[:space:]]*serial" "$i")
	SERIAL=${SERIAL:0:10}
	ZONE=${i%.db.signed}
	RECORDS=$(grep -cwh "RRSIG" "$i")
	log_info "Signed zone: $ZONE"
	echo -e "\tSerial:  $SERIAL"
	echo -e "\tRecords: $RECORDS"
	echo
done