From d2c5a11ae8509803c9517c3af38c52c726f7496e Mon Sep 17 00:00:00 2001 From: Tom Krizek Date: Mon, 8 Jan 2024 18:13:47 +0100 Subject: [PATCH] Turn off dnssec-validation in nsec&tsig system tests This is a followup for !8063, which backported !7999. The configuration file layout for these files have changed (main branch has named-fips.conf), which is probably why these bits were missed during a backport. --- bin/tests/system/nsec3/ns3/named.conf.in | 1 + bin/tests/system/nsec3/ns3/named2.conf.in | 1 + bin/tests/system/tsig/ns1/named.conf.in | 1 + 3 files changed, 3 insertions(+) diff --git a/bin/tests/system/nsec3/ns3/named.conf.in b/bin/tests/system/nsec3/ns3/named.conf.in index de097744ba..022e9421bc 100644 --- a/bin/tests/system/nsec3/ns3/named.conf.in +++ b/bin/tests/system/nsec3/ns3/named.conf.in @@ -46,6 +46,7 @@ options { listen-on-v6 { none; }; allow-transfer { any; }; recursion no; + dnssec-validation no; }; key rndc_key { diff --git a/bin/tests/system/nsec3/ns3/named2.conf.in b/bin/tests/system/nsec3/ns3/named2.conf.in index 084bba3f0b..4e6d644a3d 100644 --- a/bin/tests/system/nsec3/ns3/named2.conf.in +++ b/bin/tests/system/nsec3/ns3/named2.conf.in @@ -46,6 +46,7 @@ options { listen-on-v6 { none; }; allow-transfer { any; }; recursion no; + dnssec-validation no; }; key rndc_key { diff --git a/bin/tests/system/tsig/ns1/named.conf.in b/bin/tests/system/tsig/ns1/named.conf.in index de16ccf493..120cd9062f 100644 --- a/bin/tests/system/tsig/ns1/named.conf.in +++ b/bin/tests/system/tsig/ns1/named.conf.in @@ -20,6 +20,7 @@ options { listen-on { 10.53.0.1; }; listen-on-v6 { none; }; recursion yes; + dnssec-validation no; notify no; };