From 797ec13904fdd64e085c1ed73578e88b8528ca1e Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Tue, 9 Jan 2024 12:22:21 +1100 Subject: [PATCH] Add regression test data for [GL #4517] An obscured DNSKEY RRset at a delegation was incorrectly added to the NSEC/NSEC3 type bit map leading to zone verification failures. This adds such a RRset to the test zone. (cherry picked from commit 122111f75e1c3d76b8620e3c3009be2a78e55424) --- bin/tests/system/verify/zones/unsigned.db | 2 ++ 1 file changed, 2 insertions(+) diff --git a/bin/tests/system/verify/zones/unsigned.db b/bin/tests/system/verify/zones/unsigned.db index 1e7cd2b677..7febeefc33 100644 --- a/bin/tests/system/verify/zones/unsigned.db +++ b/bin/tests/system/verify/zones/unsigned.db @@ -26,4 +26,6 @@ secure NS secure secure DS 1312 50 100 96EEB2FFD9B00CD4694E78278B5EFDAB0A80446567B69F634DA078F0 secure A 1.2.3.4 secure AAAA 2002::1.2.3.4 +; obscured DNSKEY, regression test for [GL #4517] +secure DNSKEY 256 3 3 VGhpcyBzaG9ydCBzbmlwcGV0IG9mIHRleHQgaXMgc2FkIGFuZCBtZWFuaW5nbGVzcy4K out-of-zone. A 1.2.3.4