From 2e4b55de858a38c420b369d737c040d75db1b2e2 Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Mon, 9 Mar 2020 10:38:58 +0100 Subject: [PATCH] Add check calls to kasp zsk-retired test The test case for zsk-retired was missing the actual checks. Add them and fix the set_policy call to expect three keys. --- bin/tests/system/kasp/tests.sh | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/bin/tests/system/kasp/tests.sh b/bin/tests/system/kasp/tests.sh index 0b5c8d0dfe..30b82679a3 100644 --- a/bin/tests/system/kasp/tests.sh +++ b/bin/tests/system/kasp/tests.sh @@ -1597,7 +1597,7 @@ set_server "ns3" "10.53.0.3" # Zone: zsk-retired.autosign. # set_zone "zsk-retired.autosign" -set_policy "autosign" "2" "300" +set_policy "autosign" "3" "300" set_server "ns3" "10.53.0.3" # The third key is not yet expected to be signing. set_keyrole "KEY3" "zsk" @@ -1620,6 +1620,12 @@ set_keystate "KEY3" "GOAL" "omnipresent" set_keystate "KEY3" "STATE_DNSKEY" "rumoured" set_keystate "KEY3" "STATE_ZRRSIG" "hidden" +check_keys +check_apex +check_subdomain +dnssec_verify +check_rrsig_refresh + # # Test dnssec-policy inheritance. #