mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-25 02:47:54 -04:00
Fix views system test
This test case enables DNSSEC and has a mismatch in policy. Fix the policy so that it matches the existing key set, and adjust the expected answer count because no longer a new key is generated.
This commit is contained in:
parent
b19871f8a2
commit
67ea0e656b
3 changed files with 4 additions and 4 deletions
|
|
@ -37,7 +37,7 @@ controls {
|
|||
dnssec-policy "views" {
|
||||
keys {
|
||||
ksk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
|
||||
csk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
|
||||
zsk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
|
||||
};
|
||||
};
|
||||
|
||||
|
|
|
|||
|
|
@ -37,7 +37,7 @@ controls {
|
|||
dnssec-policy "views" {
|
||||
keys {
|
||||
ksk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
|
||||
csk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
|
||||
zsk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
|
||||
};
|
||||
};
|
||||
|
||||
|
|
|
|||
|
|
@ -137,8 +137,8 @@ ret=0
|
|||
wait_for_signed() {
|
||||
"$DIG" -p "${PORT}" @10.53.0.2 -b 10.53.0.2 +dnssec DNSKEY inline >dig.out.internal
|
||||
"$DIG" -p "${PORT}" @10.53.0.2 -b 10.53.0.5 +dnssec DNSKEY inline >dig.out.external
|
||||
grep "ANSWER: 4," dig.out.internal >/dev/null || return 1
|
||||
grep "ANSWER: 4," dig.out.external >/dev/null || return 1
|
||||
grep "ANSWER: 3," dig.out.internal >/dev/null || return 1
|
||||
grep "ANSWER: 3," dig.out.external >/dev/null || return 1
|
||||
return 0
|
||||
}
|
||||
retry_quiet 10 wait_for_signed || ret=1
|
||||
|
|
|
|||
Loading…
Reference in a new issue