mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Code Issues Releases Wiki Activity

Add inline test related to unsupported algorithms

Browse Source
This commit is contained in:
Matthijs Mekking
2019-01-14 16:02:30 +01:00
parent dfcf9bb0ed
commit 924fdad0e5
4 changed files with 20 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
bin/tests/system/inline/ns3/named.conf.in
View File

@@ -168,3 +168,10 @@ zone "removedkeys-secondary" {
auto-dnssec maintain;
file "removedkeys-secondary.bk";
};
zone "unsupported" {
type master;
file "unsupported.db";
inline-signing yes;
auto-dnssec maintain;
};

5
bin/tests/system/inline/ns3/sign.sh
View File

@@ -12,6 +12,11 @@
SYSTEMTESTTOP=../..
. $SYSTEMTESTTOP/conf.sh
# Fake an unsupported key
unsupportedkey=$("$KEYGEN" -q -a "$DEFAULT_ALGORITHM" -b "$DEFAULT_BITS" -n zone unsupported)
awk '$3 == "DNSKEY" { $6 = 255 } { print }' ${unsupportedkey}.key > ${unsupportedkey}.tmp
mv ${unsupportedkey}.tmp ${unsupportedkey}.key
zone=bits
rm -f K${zone}.+*+*.key
rm -f K${zone}.+*+*.private

1
bin/tests/system/inline/setup.sh
View File

@@ -27,6 +27,7 @@ cp ns2/bits.db.in ns2/retransfer3.db
cp ns3/master.db.in ns3/master.db
cp ns3/master.db.in ns3/dynamic.db
cp ns3/master.db.in ns3/updated.db
cp ns3/master.db.in ns3/unsupported.db
cp ns3/master.db.in ns3/expired.db
cp ns3/master.db.in ns3/nsec3.db
cp ns3/master.db.in ns3/externalkey.db

7
bin/tests/system/inline/tests.sh
View File

@@ -27,6 +27,13 @@ do
sleep 1
done
n=`expr $n + 1`
echo_i "checking that an unsupported algorithm is not used for signing ($n)"
ret=0
grep -q "algorithm is unsupported" ns3/named.run || ret=1
if [ $ret != 0 ]; then echo_i "failed"; fi
status=`expr $status + $ret`
n=`expr $n + 1`
echo_i "checking that rrsigs are replaced with ksk only ($n)"
ret=0