From 3a6021beb370835c81c90dd356514499ba1b6bec Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Thu, 7 Aug 2025 16:27:32 +1000 Subject: [PATCH] Check that badalg.secure.example resolves Previously, badalg.secure.example would return SERVFAIL because the DS records (from the parent) could not be validated. (cherry picked from commit 21934102d3be19729af78cba08f974984de3488e) --- bin/tests/system/dnssec/tests.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/bin/tests/system/dnssec/tests.sh b/bin/tests/system/dnssec/tests.sh index 3702cf7eb4..a192f5e004 100644 --- a/bin/tests/system/dnssec/tests.sh +++ b/bin/tests/system/dnssec/tests.sh @@ -3771,6 +3771,7 @@ echo_i "checking EDE code 1 for bad alg mnemonic ($n)" ret=0 dig_with_opts @10.53.0.4 badalg.secure.example >dig.out.ns4.test$n || ret=1 grep "; EDE: 1 (Unsupported DNSKEY Algorithm): (ECDSAP256SHA256 badalg.secure.example/A)" dig.out.ns4.test$n >/dev/null || ret=1 +grep "status: NOERROR" dig.out.ns4.test$n >/dev/null || ret=1 grep "flags:.*ad.*QUERY" dig.out.ns4.test$n >/dev/null && ret=1 n=$((n + 1)) test "$ret" -eq 0 || echo_i "failed"