mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-30 05:57:52 +00:00
Code Issues Releases Wiki Activity

Update autosign system test

Browse Source 
When checking for the number of logs related to DNSKEY key maintenance
events, don't include CDNSKEY is published lines.

Also consider RSASHA1: If not supported, the key maintenance for
the nsec-only zone are not logged.
This commit is contained in:
Matthijs Mekking 2023-07-20 15:34:53 +02:00
parent 6504b563cb
commit f5bf8c1d30
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
bin/tests/system/autosign/tests.sh
View File

@ -1248,7 +1248,7 @@ status=$((status + ret))
echo_i "checking key maintenance events were logged correctly ($n)" echo_i "checking key maintenance events were logged correctly ($n)"
ret=0 ret=0
pub=$(grep "DNSKEY .* is now published" ns2/named.run | wc -l) pub=$(grep "DNSKEY .* is now published" ns2/named.run | grep -v "CDNSKEY" | wc -l)
[ "$pub" -eq 10 ] || ret=1 [ "$pub" -eq 10 ] || ret=1
act=$(grep "DNSKEY .* is now active" ns2/named.run | wc -l) act=$(grep "DNSKEY .* is now active" ns2/named.run | wc -l)
[ "$act" -eq 10 ] || ret=1 [ "$act" -eq 10 ] || ret=1
@ -1258,10 +1258,17 @@ inac=$(grep "DNSKEY .* is now inactive" ns2/named.run | wc -l)
[ "$inac" -eq 0 ] || ret=1 [ "$inac" -eq 0 ] || ret=1
del=$(grep "DNSKEY .* is now deleted" ns2/named.run | wc -l) del=$(grep "DNSKEY .* is now deleted" ns2/named.run | wc -l)
[ "$del" -eq 0 ] || ret=1 [ "$del" -eq 0 ] || ret=1
pub=$(grep "DNSKEY .* is now published" ns3/named.run | wc -l) pub=$(grep "DNSKEY .* is now published" ns3/named.run | grep -v "CDNSKEY" | wc -l)
[ "$pub" -eq 55 ] || ret=1
act=$(grep "DNSKEY .* is now active" ns3/named.run | wc -l) act=$(grep "DNSKEY .* is now active" ns3/named.run | wc -l)
[ "$act" -eq 53 ] || ret=1 if $SHELL ../testcrypto.sh -q RSASHA1
then
# Include two log lines for nsec-only zone.
[ "$pub" -eq 53 ] || ret=1
[ "$act" -eq 53 ] || ret=1
else
[ "$pub" -eq 51 ] || ret=1
[ "$act" -eq 51 ] || ret=1
fi
rev=$(grep "DNSKEY .* is now revoked" ns3/named.run | wc -l) rev=$(grep "DNSKEY .* is now revoked" ns3/named.run | wc -l)
[ "$rev" -eq 0 ] || ret=1 [ "$rev" -eq 0 ] || ret=1
inac=$(grep "DNSKEY .* is now inactive" ns3/named.run | wc -l) inac=$(grep "DNSKEY .* is now inactive" ns3/named.run | wc -l)