upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-11 05:00:00 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Tweak kasp system test script

Browse source 
The retry 3 times when checking signatures did not make sense because
at this point the input file does not change.

Raise the number of retries when checking the apex DNSKEY response to
reduce the number of intermittent failures due to unexpected delays.

(cherry picked from commit 6ef0417274)
This commit is contained in:
Matthijs Mekking 2022-11-09 14:45:06 +01:00
parent e1b7db99e2
commit ba2ef65483
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
bin/tests/system/kasp.sh
View file

@ -1107,7 +1107,7 @@ _check_apex_dnskey() {
test "$_checksig" -eq 0 && return 0
retry_quiet 3 _check_signatures "DNSKEY" "dig.out.$DIR.test$n" "KSK" || return 1
_check_signatures "DNSKEY" "dig.out.$DIR.test$n" "KSK" || return 1
return 0
}
@ -1120,11 +1120,11 @@ check_apex() {
n=$((n+1))
echo_i "check DNSKEY rrset is signed correctly for zone ${ZONE} ($n)"
ret=0
retry_quiet 3 _check_apex_dnskey || ret=1
retry_quiet 10 _check_apex_dnskey || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
# We retry the DNSKEY query for at most three seconds to avoid test
# We retry the DNSKEY query for at most ten seconds to avoid test
# failures due to timing issues. If the DNSKEY query check passes this
# means the zone is resigned and further apex checks (SOA, CDS, CDNSKEY)
# don't need to be retried quietly.