diff --git a/bin/tests/system/inline/ns3/named.conf.in b/bin/tests/system/inline/ns3/named.conf.in index 1dff0b5679..a8c434dc02 100644 --- a/bin/tests/system/inline/ns3/named.conf.in +++ b/bin/tests/system/inline/ns3/named.conf.in @@ -168,3 +168,10 @@ zone "removedkeys-secondary" { auto-dnssec maintain; file "removedkeys-secondary.bk"; }; + +zone "unsupported" { + type master; + file "unsupported.db"; + inline-signing yes; + auto-dnssec maintain; +}; diff --git a/bin/tests/system/inline/ns3/sign.sh b/bin/tests/system/inline/ns3/sign.sh index 15b5424215..621f077683 100755 --- a/bin/tests/system/inline/ns3/sign.sh +++ b/bin/tests/system/inline/ns3/sign.sh @@ -12,6 +12,11 @@ SYSTEMTESTTOP=../.. . $SYSTEMTESTTOP/conf.sh +# Fake an unsupported key +unsupportedkey=$("$KEYGEN" -q -a "$DEFAULT_ALGORITHM" -b "$DEFAULT_BITS" -n zone unsupported) +awk '$3 == "DNSKEY" { $6 = 255 } { print }' ${unsupportedkey}.key > ${unsupportedkey}.tmp +mv ${unsupportedkey}.tmp ${unsupportedkey}.key + zone=bits rm -f K${zone}.+*+*.key rm -f K${zone}.+*+*.private diff --git a/bin/tests/system/inline/setup.sh b/bin/tests/system/inline/setup.sh index 23a9c18dc8..4c207ee22c 100644 --- a/bin/tests/system/inline/setup.sh +++ b/bin/tests/system/inline/setup.sh @@ -27,6 +27,7 @@ cp ns2/bits.db.in ns2/retransfer3.db cp ns3/master.db.in ns3/master.db cp ns3/master.db.in ns3/dynamic.db cp ns3/master.db.in ns3/updated.db +cp ns3/master.db.in ns3/unsupported.db cp ns3/master.db.in ns3/expired.db cp ns3/master.db.in ns3/nsec3.db cp ns3/master.db.in ns3/externalkey.db diff --git a/bin/tests/system/inline/tests.sh b/bin/tests/system/inline/tests.sh index 12c0926b24..60e578371e 100755 --- a/bin/tests/system/inline/tests.sh +++ b/bin/tests/system/inline/tests.sh @@ -27,6 +27,13 @@ do sleep 1 done +n=`expr $n + 1` +echo_i "checking that an unsupported algorithm is not used for signing ($n)" +ret=0 +grep -q "algorithm is unsupported" ns3/named.run || ret=1 +if [ $ret != 0 ]; then echo_i "failed"; fi +status=`expr $status + $ret` + n=`expr $n + 1` echo_i "checking that rrsigs are replaced with ksk only ($n)" ret=0