4 Commits

Author	SHA1	Message	Date
Nicki Křížek	b5633462bf	Remove unused isctest/kasp code	2024-10-16 17:16:02 +02:00
Nicki Křížek	67957d1f54	Rename kasp function to check_* ... If a function is expected to assert / raise on failure (rather than return boolean), its name should start with "check_".	2024-10-16 17:16:02 +02:00
Nicki Křížek	2b0a8fcfb5	Use convenience wrappers for kasp key operations	2024-10-16 17:16:02 +02:00
Matthijs Mekking	a3829990fd	Introduce pytest kasp library ... Write initial pytest kasp library. This contains everything that is required for testing Offline KSK functionality with pytest. This includes: - addtime: adding a value to a timing metadata - get_timing_metdata: retrieve timing metadata from keyfile - get_metadata/get_keystate: retrieve metadata from statefile - get_keytag: retrieve keytag from base keyfile string - get_keyrole: get key role from statefile - dnskey_equals: compare DNSKEY record from file against a string - cds_equals: compare CDS derived from file against a string - zone_is_signed: wait until a zone is completely signed - dnssec_verify: verify a DNSSEC signed zone with dnssec-verify - check_dnssecstatus: check rndc dnssec -status output - check_signatures: check that signatures for a given RRset are correct - check_dnskeys: check that the published DNSKEY RRset is correct - check_cds: check that the published CDS RRset is correct - check_apex: check SOA, DNSKEY, CDNSKEY, and CDS RRset - check_subdomain: check an RRset below the apex	2024-10-16 17:16:02 +02:00