upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-05 04:12:05 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add check calls to kasp zsk-retired test

Browse source 
The test case for zsk-retired was missing the actual checks.  Add
them and fix the set_policy call to expect three keys.
This commit is contained in:
Matthijs Mekking 2020-03-09 10:38:58 +01:00
parent 7e54dd74f9
commit 2e4b55de85
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
bin/tests/system/kasp/tests.sh
View file

@ -1597,7 +1597,7 @@ set_server "ns3" "10.53.0.3"
# Zone: zsk-retired.autosign.
#
set_zone "zsk-retired.autosign"
set_policy "autosign" "2" "300"
set_policy "autosign" "3" "300"
set_server "ns3" "10.53.0.3"
# The third key is not yet expected to be signing.
set_keyrole "KEY3" "zsk"
@ -1620,6 +1620,12 @@ set_keystate "KEY3" "GOAL" "omnipresent"
set_keystate "KEY3" "STATE_DNSKEY" "rumoured"
set_keystate "KEY3" "STATE_ZRRSIG" "hidden"
check_keys
check_apex
check_subdomain
dnssec_verify
check_rrsig_refresh
#
# Test dnssec-policy inheritance.
#