upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-04-22 06:37:42 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/bin/tests/system/mkeys/README

28 lines
1.1 KiB
Text
Raw Normal View History

update file headers
2018-03-15 21:32:45 -04:00
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 00:56:38 -04:00
update file headers
2018-03-15 21:32:45 -04:00
See COPYRIGHT in the source root or http://isc.org/copyright.html for terms.
Update license headers to not include years in copyright in all applicable files
2018-02-23 03:53:12 -05:00
"dnssec-keys" is now a synonym for "managed-keys" - managed-keys is now deprecated as well as trusted-keys, though it continues to work as a synonym for dnssec-keys - references to managed-keys have been updated throughout the code. - tests have been updated to use dnssec-keys format - also the trusted-keys entries have been removed from the generated bind.keys.h file and are no longer generated by bindkeys.pl.
2018-10-05 15:00:42 -04:00
This is for testing RFC 5011 Automated Updates of DNSSEC Trust Anchors.
[master] 5011 tests and fixes 4056. [bug] Expanded automatic testing of trust anchor management and fixed several small bugs including a memory leak and a possible loss of key state information. [RT #38458] 4055. [func] "rndc managed-keys" can be used to check status of trust anchors or to force keys to be refreshed, Also, the managed keys data file has easier-to-read comments. [RT #38458]
2015-02-05 20:18:15 -05:00
ns1 is the root server that offers new KSKs and hosts one record for
testing. The TTL for the zone's records is 2 seconds.
"dnssec-keys" is now a synonym for "managed-keys" - managed-keys is now deprecated as well as trusted-keys, though it continues to work as a synonym for dnssec-keys - references to managed-keys have been updated throughout the code. - tests have been updated to use dnssec-keys format - also the trusted-keys entries have been removed from the generated bind.keys.h file and are no longer generated by bindkeys.pl.
2018-10-05 15:00:42 -04:00
ns2 is a validator that uses managed keys. "-T mkeytimers=2/20/40"
[master] make writable directory and managed-keys directory mandatory 4769. [bug] The working directory and managed-keys directory has to be writeable (and seekable). [RT #46077]
2017-10-10 21:28:34 -04:00
is used so it will attempt do automated updates frequently. "-T tat=1"
is used so it will send TAT queries once per second.
[master] 5011 tests and fixes 4056. [bug] Expanded automatic testing of trust anchor management and fixed several small bugs including a memory leak and a possible loss of key state information. [RT #38458] 4055. [func] "rndc managed-keys" can be used to check status of trust anchors or to force keys to be refreshed, Also, the managed keys data file has easier-to-read comments. [RT #38458]
2015-02-05 20:18:15 -05:00
"dnssec-keys" is now a synonym for "managed-keys" - managed-keys is now deprecated as well as trusted-keys, though it continues to work as a synonym for dnssec-keys - references to managed-keys have been updated throughout the code. - tests have been updated to use dnssec-keys format - also the trusted-keys entries have been removed from the generated bind.keys.h file and are no longer generated by bindkeys.pl.
2018-10-05 15:00:42 -04:00
ns3 is a validator with a broken initializing key in dnssec-keys.
[master] 5011 tests and fixes 4056. [bug] Expanded automatic testing of trust anchor management and fixed several small bugs including a memory leak and a possible loss of key state information. [RT #38458] 4055. [func] "rndc managed-keys" can be used to check status of trust anchors or to force keys to be refreshed, Also, the managed keys data file has easier-to-read comments. [RT #38458]
2015-02-05 20:18:15 -05:00
[master] tag initializing keys 4798. [func] Keys specified in "managed-keys" statements are tagged as "initializing" until they have been updated by a key refresh query. If initialization fails it will be visible from "rndc secroots". [RT #46267]
2017-10-27 18:45:18 -04:00
ns4 is a validator with a deliberately broken managed-keys.bind and
managed-keys.jnl, causing RFC 5011 initialization to fail.
[master] 5011 tests and fixes 4056. [bug] Expanded automatic testing of trust anchor management and fixed several small bugs including a memory leak and a possible loss of key state information. [RT #38458] 4055. [func] "rndc managed-keys" can be used to check status of trust anchors or to force keys to be refreshed, Also, the managed keys data file has easier-to-read comments. [RT #38458]
2015-02-05 20:18:15 -05:00
[master] tag initializing keys 4798. [func] Keys specified in "managed-keys" statements are tagged as "initializing" until they have been updated by a key refresh query. If initialization fails it will be visible from "rndc secroots". [RT #46267]
2017-10-27 18:45:18 -04:00
ns5 is a validator which is prevented from getting a response from the
root server, causing key refresh queries to fail.
Add tests for mkeys with unsupported algorithm These tests check if a key with an unsupported algorithm in managed-keys is ignored and when seeing an algorithm rollover to an unsupported algorithm, the new key will be ignored too.
2018-12-19 12:45:43 -05:00
ns6 is a validator which has unsupported algorithms, one at start up,
one because of an algorithm rollover.
reject the use of trusted-keys and managed-keys for the same name
2019-02-07 18:10:41 -05:00
ns7 is a validator with multiple views configured. It is used for
testing per-view rndc commands and checking interactions between options
related to and potentially affecting RFC 5011 processing.
Reference in a new issue Copy permalink