upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Fix kasp system test

Browse source 
In 9.18, 'inline-signing yes;' must also be configured explicitly for
zones using dnssec-policy without a configured 'allow-update' or
'update-policy'.
This commit is contained in:
Matthijs Mekking 2024-07-30 14:32:31 +02:00
parent 8ec554e3de
commit d376d314af
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
bin/tests/system/kasp/ns6/named.conf.in
View file

@ -99,23 +99,27 @@ zone example {
zone longer-lifetime {
type primary;
file "longer-lifetime.db";
inline-signing yes;
dnssec-policy short-lifetime;
};
zone shorter-lifetime {
type primary;
file "shorter-lifetime.db";
inline-signing yes;
dnssec-policy long-lifetime;
};
zone limit-lifetime {
type primary;
file "limit-lifetime.db";
inline-signing yes;
dnssec-policy unlimited-lifetime;
};
zone unlimit-lifetime {
type primary;
file "unlimit-lifetime.db";
inline-signing yes;
dnssec-policy short-lifetime;
};

4
bin/tests/system/kasp/ns6/named2.conf.in
View file

@ -187,23 +187,27 @@ zone example {
zone longer-lifetime {
type primary;
file "longer-lifetime.db";
inline-signing yes;
dnssec-policy long-lifetime;
};
zone shorter-lifetime {
type primary;
file "shorter-lifetime.db";
inline-signing yes;
dnssec-policy short-lifetime;
};
zone limit-lifetime {
type primary;
file "limit-lifetime.db";
inline-signing yes;
dnssec-policy short-lifetime;
};
zone unlimit-lifetime {
type primary;
file "unlimit-lifetime.db";
inline-signing yes;
dnssec-policy unlimited-lifetime;
};