From 2cd2f82c15ec71d51742aad3ba8d72d54c17a865 Mon Sep 17 00:00:00 2001 From: Michal Nowak Date: Wed, 14 Jan 2026 19:27:47 +0100 Subject: [PATCH] Portions of two dnssec-malformed-dnskey tests need querytrace Without querytrace set, test_malformed_ecdsa and test_multiple_rrsigs fail on the log_validation_failed string. (cherry picked from commit d03b3f5a1d3114b30e9f30a82caf9ccf38c0816b) --- .../tests_malformed_dnskey.py | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/bin/tests/system/dnssec-malformed-dnskey/tests_malformed_dnskey.py b/bin/tests/system/dnssec-malformed-dnskey/tests_malformed_dnskey.py index 57d8479dc3..b83edf1873 100644 --- a/bin/tests/system/dnssec-malformed-dnskey/tests_malformed_dnskey.py +++ b/bin/tests/system/dnssec-malformed-dnskey/tests_malformed_dnskey.py @@ -12,6 +12,7 @@ import base64 from re import compile as Re +import os import pytest pytest.importorskip("cryptography") @@ -117,7 +118,11 @@ def test_malformed_ecdsa(ns3): msg = isctest.query.create("malformed-dnskey.example", "A") openssl_vers = ns3.log.grep(log_openssl_version) - if openssl_vers and int(openssl_vers[0].group(1)) >= 3: + if ( + openssl_vers + and int(openssl_vers[0].group(1)) >= 3 + and os.getenv("FEATURE_QUERYTRACE") == "1" + ): # extra check for OpenSSL 3.0.0+ with ns3.watch_log_from_here() as watcher: res = isctest.query.tcp(msg, "10.53.0.3") @@ -162,7 +167,11 @@ def test_multiple_rrsigs(ns3): pytest.skip("valid RRSIG listed first in response, re-run test") openssl_vers = ns3.log.grep(log_openssl_version) - if openssl_vers and int(openssl_vers[0].group(1)) >= 3: + if ( + openssl_vers + and int(openssl_vers[0].group(1)) >= 3 + and os.getenv("FEATURE_QUERYTRACE") == "1" + ): # extra check for OpenSSL 3.0.0+ with ns3.watch_log_from_here() as watcher: res = isctest.query.tcp(msg, "10.53.0.3")