upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-11 10:59:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Update zonechecks system test

Browse source 
Change test configuration to make use of 'dnssec-policy' instead of
'auto-dnssec'.
This commit is contained in:
Matthijs Mekking 2023-06-29 11:28:01 +02:00
parent 4690e95d29
commit a4b6ff32e9
2 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
bin/tests/system/zonechecks/clean.sh
View file

@ -15,7 +15,7 @@ rm -f *.out
rm -f */named.memstats
rm -f */named.conf
rm -f */named.run
rm -f */*.db */*.db.signed */K*.key */K*.private */*.jnl */dsset-*
rm -f */*.db */*.db.signed */K*.key */K*.private */K*.state */*.jnl */dsset-*
rm -f */signer.err
rm -f rndc.out.*
rm -f ns*/named.lock

9
bin/tests/system/zonechecks/ns1/named.conf.in
View file

@ -35,6 +35,13 @@ controls {
inet 10.53.0.1 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
};
dnssec-policy "zonechecks" {
keys {
ksk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
zsk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
};
};
view unused {
match-clients { none; };
@ -52,7 +59,7 @@ view primary {
file "primary.db";
allow-update { any; };
allow-transfer { any; };
auto-dnssec maintain;
dnssec-policy zonechecks;
};
zone "bigserial.example" {