mirror of
https://github.com/isc-projects/bind9.git
synced 2026-03-08 17:20:38 -04:00
Add test that checks NSEC3PARAM TTL
The TTL should be equal to the SOA MINIMUM by default.
This commit is contained in:
parent
9eaa7e7d37
commit
f51901eaca
1 changed files with 8 additions and 0 deletions
|
|
@ -275,6 +275,14 @@ set_nsec3param "0" "0" "0"
|
|||
set_key_default_values "KEY1"
|
||||
echo_i "initial check zone ${ZONE}"
|
||||
check_nsec3
|
||||
# Test that NSEC3PARAM TTL is equal to SOA MINIMUM.
|
||||
n=$((n+1))
|
||||
echo_i "check TTL of NSEC3PARAM in zone $ZONE ($n)"
|
||||
ret=0
|
||||
dig_with_opts +noquestion "@${SERVER}" "$ZONE" NSEC3PARAM > "dig.out.test$n" || ret=1
|
||||
grep "${ZONE}\..*3600.*IN.*NSEC3PARAM" "dig.out.test$n" > /dev/null || ret=1
|
||||
test "$ret" -eq 0 || echo_i "failed"
|
||||
status=$((status+ret))
|
||||
|
||||
# Zone: nsec3-dynamic.kasp.
|
||||
set_zone_policy "nsec3-dynamic.kasp" "nsec3" 1 3600
|
||||
|
|
|
|||
Loading…
Reference in a new issue