upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-04 10:22:05 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 6

Add inline test related to unsupported algorithms

Browse source 
(cherry picked from commit 924fdad0e5)
This commit is contained in:
Matthijs Mekking 2019-01-14 16:02:30 +01:00
parent 8cef3952b6
commit 469ef284b3
4 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
bin/tests/system/inline/ns3/named.conf.in
View file

@ -168,3 +168,10 @@ zone "removedkeys-secondary" {
auto-dnssec maintain;
file "removedkeys-secondary.bk";
};
zone "unsupported" {
type master;
file "unsupported.db";
inline-signing yes;
auto-dnssec maintain;
};

5
bin/tests/system/inline/ns3/sign.sh
View file

@ -12,6 +12,11 @@
SYSTEMTESTTOP=../..
. $SYSTEMTESTTOP/conf.sh
# Fake an unsupported key
unsupportedkey=$("$KEYGEN" -q -a "$DEFAULT_ALGORITHM" -b "$DEFAULT_BITS" -n zone unsupported)
awk '$3 == "DNSKEY" { $6 = 255 } { print }' ${unsupportedkey}.key > ${unsupportedkey}.tmp
mv ${unsupportedkey}.tmp ${unsupportedkey}.key
zone=bits
rm -f K${zone}.+*+*.key
rm -f K${zone}.+*+*.private

1
bin/tests/system/inline/setup.sh
View file

@ -29,6 +29,7 @@ cp ns2/bits.db.in ns2/retransfer3.db
cp ns3/master.db.in ns3/master.db
cp ns3/master.db.in ns3/dynamic.db
cp ns3/master.db.in ns3/updated.db
cp ns3/master.db.in ns3/unsupported.db
cp ns3/master.db.in ns3/expired.db
cp ns3/master.db.in ns3/nsec3.db
cp ns3/master.db.in ns3/externalkey.db

7
bin/tests/system/inline/tests.sh
View file

@ -27,6 +27,13 @@ do
sleep 1
done
n=`expr $n + 1`
echo_i "checking that an unsupported algorithm is not used for signing ($n)"
ret=0
grep -q "algorithm is unsupported" ns3/named.run || ret=1
if [ $ret != 0 ]; then echo_i "failed"; fi
status=`expr $status + $ret`
n=`expr $n + 1`
echo_i "checking that rrsigs are replaced with ksk only ($n)"
ret=0