Reset the callback sources, so keyboard input will be prompted for each

time it's needed.

diff --git a/bin/dnssec/dnssec-makekeyset.c b/bin/dnssec/dnssec-makekeyset.c
index 9152e61a04cfbc2738d7cf1d546a4347e12d77cd..86edeebce2755505f355cfbb2e2c2e27f9743bd5 100644 (file)
--- a/bin/dnssec/dnssec-makekeyset.c
+++ b/bin/dnssec/dnssec-makekeyset.c
@@ -343,6 +343,7 @@ main(int argc, char *argv[]) {
                result = dns_dnssec_sign(domain, &rdataset, keynode->key,
                                         &starttime, &endtime, mctx, &b,
                                         rdata);
+               isc_entropy_stopcallbacksources(ectx);
                if (result != ISC_R_SUCCESS)
                        fatal("failed to sign keyset with key %s/%s/%d: %s",
                              nametostr(dst_key_name(keynode->key)),

diff --git a/bin/dnssec/dnssec-signkey.c b/bin/dnssec/dnssec-signkey.c
index 64dd987cee7cd7602340b19916fbb549869fd0ae..559e65ef91e31a4db13392e25198436331dcfad5 100644 (file)
--- a/bin/dnssec/dnssec-signkey.c
+++ b/bin/dnssec/dnssec-signkey.c
@@ -325,6 +325,7 @@ main(int argc, char *argv[]) {
                result = dns_dnssec_sign(domain, &rdataset, key,
                                         &sig.timesigned, &sig.timeexpire,
                                         mctx, &b, rdata);
+               isc_entropy_stopcallbacksources(ectx);
                if (result != ISC_R_SUCCESS)
                        fatal("key '%s/%s/%d' failed to sign data: %s",
                              nametostr(dst_key_name(key)),

diff --git a/bin/dnssec/dnssec-signzone.c b/bin/dnssec/dnssec-signzone.c
index c9ec16125c339721ca1bd70665f5281e4660a4f7..4e2bb94dcb89a90b1c23a5fb855c7efbc8031b17 100644 (file)
--- a/bin/dnssec/dnssec-signzone.c
+++ b/bin/dnssec/dnssec-signzone.c
@@ -99,6 +99,7 @@ signwithkey(dns_name_t *name, dns_rdataset_t *rdataset, dns_rdata_t *rdata,
        dns_rdata_init(rdata);
        result = dns_dnssec_sign(name, rdataset, key, &starttime, &endtime,
                                 mctx, b, rdata);
+       isc_entropy_stopcallbacksources(ectx);
        if (result != ISC_R_SUCCESS)
                fatal("key '%s/%s/%d' failed to sign data: %s",
                      nametostr(dst_key_name(key)), algtostr(dst_key_alg(key)),