Use trust anchors with 'dnssec-validation yes' in system tests

Explicitly use an empty 'trust-anchors' statement in the system
tests where it was used implicitly before.

In resolver/ns5/named.conf.in use the trust anchor in 'trusted.conf',
which was supposed to be used there.

bin/tests/system/additional/ns3/named.conf.in

@@ -26,6 +26,8 @@ options {
 	minimal-responses no;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hint";

bin/tests/system/cacheclean/ns2/named.conf.in

@@ -25,6 +25,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/chain/ns1/named.conf.in

@@ -24,4 +24,6 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 zone "." { type primary; file "root.db"; };

bin/tests/system/chain/ns7/named.conf.in

@@ -30,6 +30,8 @@ options {
 	};
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/checknames/ns2/named.conf.in

@@ -25,6 +25,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hints";

bin/tests/system/checknames/ns3/named.conf.in

@@ -25,6 +25,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hints";

bin/tests/system/checknames/ns4/named.conf.in

@@ -26,6 +26,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hints";

bin/tests/system/checknames/ns5/named.conf.in

@@ -26,6 +26,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hints";

bin/tests/system/cipher-suites/ns1/named.conf.in

@@ -69,6 +69,8 @@ options {
 	transfers-out 100;
 };
 
+trust-anchors { };
+
 zone "." {
 	type primary;
 	file "root.db";

bin/tests/system/cipher-suites/ns2/named.conf.in

@@ -39,6 +39,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/cipher-suites/ns3/named.conf.in

@@ -39,6 +39,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/cipher-suites/ns4/named.conf.in

@@ -39,6 +39,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/cipher-suites/ns5/named.conf.in

@@ -39,6 +39,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/cookie/ns1/named.conf.in

@@ -49,6 +49,8 @@ options {
 	nocookie-udp-size 512;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hint";

bin/tests/system/cookie/ns3/named.conf.in

@@ -41,6 +41,8 @@ options {
 	require-server-cookie yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hint";

bin/tests/system/cookie/ns4/named.conf.in

@@ -35,6 +35,8 @@ options {
 	require-server-cookie yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hint";

bin/tests/system/cookie/ns5/named.conf.in

@@ -36,6 +36,8 @@ options {
 	require-server-cookie yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hint";

bin/tests/system/cookie/ns6/named.conf.in

@@ -35,6 +35,8 @@ options {
 	require-server-cookie yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.hint";

bin/tests/system/cookie/ns8/named.conf.in

@@ -33,6 +33,8 @@ options {
 	require-server-cookie yes;
 };
 
+trust-anchors { };
+
 server 10.53.0.7 { require-cookie yes; };
 
 zone "example" {

bin/tests/system/database/ns1/named1.conf.in

@@ -35,6 +35,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "database" {
 	type primary;
 	database "_builtin empty localhost. hostmaster.isc.org.";

bin/tests/system/database/ns1/named2.conf.in

@@ -35,6 +35,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "database" {
 	type primary;
 	database "_builtin empty localhost. marka.isc.org.";

bin/tests/system/dns64/ns1/named.conf1.in

@@ -42,6 +42,8 @@ options {
 	};
 };
 
+trust-anchors { };
+
 zone "." {
 	type primary;
 	file "root.db";

bin/tests/system/dns64/ns1/named.conf2.in

@@ -45,6 +45,8 @@ options {
 	};
 };
 
+trust-anchors { };
+
 zone "." {
 	type primary;
 	file "root.db";

bin/tests/system/dns64/ns1/named.conf3.in

@@ -34,6 +34,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type primary;
 	file "root.db";

bin/tests/system/dns64/ns2/named.conf.in

@@ -60,6 +60,8 @@ options {
 	response-policy { zone "rpz"; };
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/dns64/ns3/named.conf.in

@@ -40,6 +40,8 @@ options {
 	};
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "hints";

bin/tests/system/dns64/ns4/named.conf.in

@@ -30,6 +30,8 @@ options {
 	recursion no;
 };
 
+trust-anchors { };
+
 zone "." {
 	type master;
 	file "root.db";

bin/tests/system/dnstap/ns1/named.conf.in

@@ -32,6 +32,8 @@ options {
 	qname-minimization disabled;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/dnstap/ns2/named.conf.in

@@ -32,6 +32,8 @@ options {
 	qname-minimization disabled;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/dnstap/ns3/named.conf.in

@@ -33,6 +33,8 @@ options {
 	qname-minimization disabled;
 };
 
+trust-anchors { };
+
 server 10.53.0.1 { tcp-only yes; };
 
 key rndc_key {

bin/tests/system/dnstap/ns4/named.conf.in

@@ -32,6 +32,8 @@ options {
 	qname-minimization disabled;
 };
 
+trust-anchors { };
+
 server 10.53.0.1 { tcp-only yes; };
 
 key rndc_key {

bin/tests/system/doth/ns1/named.conf.in

@@ -100,6 +100,8 @@ options {
 	transfers-out 100;
 };
 
+trust-anchors { };
+
 zone "." {
 	type primary;
 	file "root.db";

bin/tests/system/doth/ns2/named.conf.in

@@ -53,6 +53,8 @@ options {
 	transfers-out 100;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/doth/ns3/named.conf.in

@@ -46,6 +46,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/doth/ns4/named.conf.in

@@ -54,6 +54,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/doth/ns5/named.conf.in

@@ -42,6 +42,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/fetchlimit/ns3/named1.conf.in

@@ -28,6 +28,8 @@ options {
 	fetches-per-server 400;
 };
 
+trust-anchors { };
+
 server 10.53.0.4 {
 	edns no;
 };

bin/tests/system/fetchlimit/ns3/named2.conf.in

@@ -26,6 +26,8 @@ options {
 	fetches-per-zone 40;
 };
 
+trust-anchors { };
+
 server 10.53.0.4 {
 	edns no;
 };

bin/tests/system/fetchlimit/ns3/named3.conf.in

@@ -26,6 +26,8 @@ options {
 	recursive-clients 400;
 };
 
+trust-anchors { };
+
 server 10.53.0.4 {
 	edns no;
 };

bin/tests/system/fetchlimit/ns5/named1.conf.in

@@ -27,6 +27,8 @@ options {
 	max-clients-per-query 10;
 };
 
+trust-anchors { };
+
 server 10.53.0.4 {
 	edns no;
 };

bin/tests/system/fetchlimit/ns5/named2.conf.in

@@ -30,6 +30,8 @@ options {
 	max-clients-per-query 10;
 };
 
+trust-anchors { };
+
 server 10.53.0.4 {
 	edns no;
 };

bin/tests/system/filter-aaaa/ns1/named1.conf.in

@@ -25,6 +25,8 @@ options {
 	minimal-responses no;
 };
 
+trust-anchors { };
+
 acl filterees { 10.53.0.1; };
 
 plugin query "../../../../plugins/.libs/filter-aaaa.so" {

bin/tests/system/filter-aaaa/ns1/named2.conf.in

@@ -25,6 +25,8 @@ options {
 	minimal-responses no;
 };
 
+trust-anchors { };
+
 plugin query "../../../../plugins/.libs/filter-aaaa.so" {
 	filter-aaaa-on-v6 yes;
 	filter-aaaa { fd92:7065:b8e:ffff::1; };

bin/tests/system/forward/ns3/named1.conf.in

@@ -27,6 +27,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/forward/ns4/named.conf.in

@@ -27,6 +27,8 @@ options {
 	minimal-responses yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.db";

bin/tests/system/forward/ns5/named.conf.in

@@ -25,6 +25,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.db";

bin/tests/system/forward/ns7/named.conf.in

@@ -24,6 +24,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.db";

bin/tests/system/forward/ns8/named.conf.in

@@ -24,6 +24,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "root.db";

bin/tests/system/hooks/ns1/named.conf.in

@@ -24,6 +24,8 @@ options {
 	minimal-responses no;
 };
 
+trust-anchors { };
+
 plugin query "../driver/.libs/test-async.so";
 
 key rndc_key {

bin/tests/system/legacy/ns1/named1.conf.in

@@ -23,6 +23,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/masterfile/ns2/named.conf.in

@@ -26,6 +26,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/mkeys/ns1/named1.conf.in

@@ -32,6 +32,8 @@ options {
 	allow-query { allowed; };
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/mkeys/ns1/named2.conf.in

@@ -32,6 +32,8 @@ options {
 	allow-query { allowed; };
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/mkeys/ns1/named3.conf.in

@@ -26,6 +26,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/nsupdate/ns3/named.conf.in

@@ -26,6 +26,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/pipelined/ns2/named.conf.in

@@ -24,6 +24,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/pipelined/ns3/named.conf.in

@@ -24,6 +24,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/pipelined/ns4/named.conf.in

@@ -25,6 +25,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/proxy/ns1/named.conf.in

@@ -54,6 +54,8 @@ options {
 	tcp-initial-timeout 1200;
 };
 
+trust-anchors { };
+
 zone "example0" {
 	type primary;
 	file "example.db";

bin/tests/system/proxy/ns3/named.conf.in

@@ -49,6 +49,8 @@ options {
 	tcp-initial-timeout 1200;
 };
 
+trust-anchors { };
+
 zone "example" {
 	type primary;
 	file "example.db";

bin/tests/system/reclimit/ns3/named1.conf.in

@@ -27,6 +27,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/reclimit/ns3/named2.conf.in

@@ -27,6 +27,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/reclimit/ns3/named3.conf.in

@@ -28,6 +28,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/reclimit/ns3/named4.conf.in

@@ -28,6 +28,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/redirect/ns1/named.conf.in

@@ -28,6 +28,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type primary;
 	file "root.db";
@@ -53,5 +55,3 @@ zone "." {
 	file "redirect.db";
 	allow-query { !10.53.0.2; !10.53.0.4; any; };
 };
-
-// include "trusted.conf";

bin/tests/system/redirect/ns2/named.conf.in

@@ -31,6 +31,8 @@ options {
 
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/redirect/ns3/named.conf.in

@@ -26,6 +26,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type primary;
 	file "root.db";
@@ -50,5 +52,3 @@ zone "redirect" {
 	type primary;
 	file "redirect.db";
 };
-
-// include "trusted.conf";

bin/tests/system/redirect/ns4/named.conf.in

@@ -31,6 +31,8 @@ options {
 	nxdomain-redirect "redirect";
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/resolver/ns1/named.conf.in

@@ -31,6 +31,8 @@ options {
 	attach-cache "globalcache";
 };
 
+trust-anchors { };
+
 server 10.53.0.3 {
 	tcp-only yes;
 };

bin/tests/system/resolver/ns5/named.conf.in

@@ -27,6 +27,8 @@ options {
 	prefetch 4 10;
 };
 
+include "trusted.conf";
+
 server 10.53.0.7 {
 	edns-version 0;
 };

bin/tests/system/resolver/ns7/named1.conf.in

@@ -34,6 +34,8 @@ options {
 	edns-udp-size 4096;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/resolver/ns7/named2.conf.in

@@ -34,6 +34,8 @@ options {
 	edns-udp-size 4096;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/resolver/ns9/named.conf.in

@@ -24,6 +24,8 @@ options {
 	qname-minimization off;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/rndc/ns4/named.conf.in

@@ -20,6 +20,8 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 view normal {
 	match-clients { any; };
 

bin/tests/system/rpz/ns3/named.conf.in

@@ -64,6 +64,8 @@ options {
 	notify-delay 0;
 };
 
+trust-anchors { };
+
 logging { category rpz { default_debug; }; };
 
 key rndc_key {

bin/tests/system/rpz/ns8/named.conf.in

@@ -46,6 +46,8 @@ options {
 	notify-delay 0;
 };
 
+trust-anchors { };
+
 logging { category rpz { default_debug; }; };
 
 key rndc_key {

bin/tests/system/rpz/ns9/named.conf.in

@@ -40,6 +40,8 @@ options {
 	notify-delay 0;
 };
 
+trust-anchors { };
+
 logging { category rpz { default_debug; }; };
 
 key rndc_key {

bin/tests/system/rpzrecurse/ns2/named.conf.header.in

@@ -30,6 +30,8 @@ options {
 	include "../dnsrps.conf";
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/rpzrecurse/ns3/named1.conf.in

@@ -36,6 +36,8 @@ options {
 	include "../dnsrps.conf";
 };
 
+trust-anchors { };
+
 zone "policy" { type primary; file "policy.db"; };
 
 zone "example.tld" { type primary; file "example.db"; };

bin/tests/system/rpzrecurse/ns3/named2.conf.in

@@ -35,6 +35,8 @@ options {
 	include "../dnsrps.conf";
 };
 
+trust-anchors { };
+
 zone "policy" { type primary; file "policy.db"; };
 
 zone "example.tld" { type primary; file "example.db"; };

bin/tests/system/rpzrecurse/ns3/named3.conf.in

@@ -33,6 +33,8 @@ options {
 	include "../dnsrps.conf";
 };
 
+trust-anchors { };
+
 zone "policy" { type primary; file "policy.db"; };
 
 zone "example.tld" { type primary; file "example.db"; };

bin/tests/system/rrl/ns1/named.conf.in

@@ -25,4 +25,6 @@ options {
 	dnssec-validation yes;
 };
 
+trust-anchors { };
+
 zone "." {type primary; file "root.db";};

bin/tests/system/rrl/ns2/named.conf.in

@@ -36,6 +36,8 @@ options {
 	};
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/rrl/ns3/named.conf.in

@@ -43,6 +43,8 @@ options {
 
 };
 
+trust-anchors { };
+
 zone "." { type hint; file "hints"; };
 
 zone "tld3."{ type primary; file "tld3.db"; };

bin/tests/system/rrl/ns4/named.conf.in

@@ -38,6 +38,8 @@ options {
 	};
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/rrsetorder/ns3/named.conf.in

@@ -32,6 +32,8 @@ options {
 	};
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/rrsetorder/ns4/named.conf.in

@@ -28,6 +28,8 @@ options {
 
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/rrsetorder/ns5/named.conf.in

@@ -24,6 +24,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 zone "." {
 	type hint;
 	file "../../_common/root.hint";

bin/tests/system/statistics/ns2/named.conf.in

@@ -24,6 +24,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 statistics-channels {
 	inet 10.53.0.2 port @EXTRAPORT1@ allow { any; };
 };

bin/tests/system/statistics/ns3/named.conf.in

@@ -27,6 +27,8 @@ options {
 	zone-statistics yes;
 };
 
+trust-anchors { };
+
 statistics-channels {
 	inet 10.53.0.3 port @EXTRAPORT1@ allow { any; };
 };

bin/tests/system/stress/ns3/named.conf.in

@@ -26,6 +26,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 key rndc_key {
 	secret "1234abcd8765";
 	algorithm @DEFAULT_HMAC@;

bin/tests/system/stress/ns4/named.conf.in

@@ -26,6 +26,8 @@ options {
 	notify yes;
 };
 
+trust-anchors { };
+
 zone "zone000000.example" {
 	type secondary;
 	file "zone000000.example.bk";

bin/tests/system/transport-acl/ns1/named.conf.in

@@ -68,6 +68,8 @@ options {
 	tcp-initial-timeout 1200;
 };
 
+trust-anchors { };
+
 zone "example0" {
 	type primary;
 	file "example.db";

bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in

@@ -40,6 +40,8 @@ options {
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
+trust-anchors { };
+
 zone "example" {
 	type primary;
 	file "example.db";

bin/tests/system/transport-change/ns1/named-http-plain.conf.in

@@ -40,6 +40,8 @@ options {
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
+trust-anchors { };
+
 zone "example" {
 	type primary;
 	file "example.db";

bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in

@@ -40,6 +40,8 @@ options {
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
+trust-anchors { };
+
 zone "example" {
 	type primary;
 	file "example.db";

bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in

@@ -40,6 +40,8 @@ options {
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
+trust-anchors { };
+
 zone "example" {
 	type primary;
 	file "example.db";

bin/tests/system/transport-change/ns1/named-https.conf.in

@@ -40,6 +40,8 @@ options {
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
+trust-anchors { };
+
 zone "example" {
 	type primary;
 	file "example.db";

bin/tests/system/transport-change/ns1/named-proxy.conf.in

@@ -40,6 +40,8 @@ options {
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
+trust-anchors { };
+
 zone "example" {
 	type primary;
 	file "example.db";

bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in

@@ -40,6 +40,8 @@ options {
 	allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
+trust-anchors { };
+
 zone "example" {
 	type primary;
 	file "example.db";