Change isctest.kasp.dnssec_verify to take FQDN

This is required to AXFR and verify the root zone and it makes no
difference for non-root zones (dnssec-verify takes FQDN or makes the
provided name absolute).

(cherry picked from commit 1ce7cf2dd2)
This commit is contained in:
Matthijs Mekking 2026-04-30 10:20:43 +02:00
parent 930641be01
commit 6987064e65

View file

@ -852,7 +852,7 @@ def check_dnssec_verify(server, zone, tsig=None):
file.write(rr.to_text())
file.write("\n")
verify_command = [os.environ.get("VERIFY"), "-z", "-o", zone, zonefile]
verify_command = [os.environ.get("VERIFY"), "-z", "-o", fqdn, zonefile]
verified = isctest.run.cmd(verify_command, raise_on_exception=False)
if verified.rc == 0:
return