From a68f8c7cf0f5b0cd3cd2e210a11d06156c47fcf8 Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Tue, 30 Jan 2024 17:21:34 +0100 Subject: [PATCH] Fix dnssec system test iterations too high After we have changed the maximum allowed iterations to 51 for signing, the NSEC3 chain has changed and requires one more NSEC to be returned in the answer (plus corresponding RRSIG). So the expected number or records in the authority section is now 8. --- bin/tests/system/dnssec/tests.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bin/tests/system/dnssec/tests.sh b/bin/tests/system/dnssec/tests.sh index 1bd0386b7a..db91fae310 100644 --- a/bin/tests/system/dnssec/tests.sh +++ b/bin/tests/system/dnssec/tests.sh @@ -4396,7 +4396,7 @@ dig_with_opts @10.53.0.4 does-not-exist.too-many-iterations >dig.out.ns4.test$n digcomp dig.out.ns2.test$n dig.out.ns4.test$n || ret=1 grep "flags: qr rd ra;" dig.out.ns4.test$n >/dev/null || ret=1 grep "status: NXDOMAIN" dig.out.ns4.test$n >/dev/null || ret=1 -grep "ANSWER: 0, AUTHORITY: 6" dig.out.ns4.test$n >/dev/null || ret=1 +grep "ANSWER: 0, AUTHORITY: 8" dig.out.ns4.test$n >/dev/null || ret=1 n=$((n + 1)) test "$ret" -eq 0 || echo_i "failed" status=$((status + ret))