Change isctest.kasp.dnssec_verify to take FQDN

This is required to AXFR and verify the root zone and it makes no
difference for non-root zones (dnssec-verify takes FQDN or makes the
provided name absolute).
This commit is contained in:
Matthijs Mekking 2026-04-30 10:20:43 +02:00 committed by Ondřej Surý
parent 9e9af18e4a
commit 1ce7cf2dd2

View file

@ -935,7 +935,7 @@ def check_dnssec_verify(server, zone, tsig=None):
file.write(rr.to_text())
file.write("\n")
verify_command = [os.environ.get("VERIFY"), "-z", "-o", zone, zonefile]
verify_command = [os.environ.get("VERIFY"), "-z", "-o", fqdn, zonefile]
verified = isctest.run.cmd(verify_command, raise_on_exception=False)
if verified.rc == 0:
return