upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Test checkconf NSEC3 and incompatible algorithm

Browse source 
The check code for this already exists, but was untested.
This commit is contained in:
Matthijs Mekking 2022-08-10 15:24:21 +02:00
parent a308418d4a
commit 856c0e78a9
1 changed files with 25 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
bin/tests/system/checkconf/bad-kasp-nsec3-alg.conf Normal file
View file

@ -0,0 +1,25 @@
/*
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
*
* SPDX-License-Identifier: MPL-2.0
*
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
*
* See the COPYRIGHT file distributed with this work for additional
* information regarding copyright ownership.
*/
dnssec-policy "badnsec3alg" {
keys {
csk lifetime unlimited algorithm rsasha1;
};
nsec3param iterations 0 optout 0 salt-length 0;
};
zone "example.net" {
type primary;
file "example.db";
dnssec-policy "badnsec3alg";
};