Commit graph

4 commits

Author SHA1 Message Date
Matthijs Mekking
c501fa900e Test retransfer with NSEC3 policy
If the primary has been updated, but the secondary has not been
notified, the journal will go out of date. An 'rndc retransfer' causes
the zone to force an AXFR, removing and rebuilding zone and journal
files.

This test reproduces a bug that in such scenario, an NSEC3 signed zone
falls back to NSEC.

(cherry picked from commit be3e4c83d0)
2025-11-24 13:23:47 +00:00
Matthijs Mekking
6ae3e00f47 Move check_nsec3_case to common code
With the nsec and nsec3 test cases being nearly identical for all
modules, these can be be unified and moved to common.py.

(cherry picked from commit 7762b2391e)
2025-11-21 14:17:43 +00:00
Matthijs Mekking
9ee45e9817 Improve check_auth_nsec3 salt checking
Since we know the salt after checking the NSEC3PARAM, we might as well
check the NSEC3 records on the NXDOMAIN response that the salt matches.

(cherry picked from commit ba1ffe56e4)
2025-11-21 14:17:42 +00:00
Matthijs Mekking
54fbbc109a Move parts into a common module
Some constants and test functionality are the same for test cases
prior and after reconfiguration. Move these into a common module.

(cherry picked from commit 85eea3db37)
2025-11-21 14:17:42 +00:00