bind9/bin
Matthijs Mekking 4895b10884 Create keys with pkcs11-tool --id
The keyfromlabel system ECDSA tests sometimes fail. When this happens
the ZSK and KSK key id values differ by 1, which is an indication that
the same key is used for both DNSKEY records.

When the private key is retrieved with 'ENGINE_load_private_key()', the
public key is already set. But sometimes that key differs from the key
which was retrieved with 'ENGINE_load_public_key()'.

The libp11 source code uses id to find the key and without IDs all the
keys are "equal", so it is returning the first key in the array of the
enumerated keys instead of the matching key. In our test we didn't use
'--id', just '--label'. With this change, the system test should no
longer fail intermittently.

Note this is only an issue for ECDSA keys, not RSA keys.

(cherry picked from commit 0af8bbd49b)
2022-01-27 12:23:22 +01:00
..
check Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
confgen Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
delv Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
dig Fix spelling of "DNS over HTTPS" & "DNS over TLS" 2022-01-20 15:40:37 +01:00
dnssec Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
named Improve the view configuration error handling and reverting logic 2022-01-26 12:05:53 +00:00
nsupdate Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
plugins Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
rndc rndc: prevent crashing after receiving a signal 2022-01-19 14:30:17 +01:00
tests Create keys with pkcs11-tool --id 2022-01-27 12:23:22 +01:00
tools Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
Makefile.am Remove native PKCS#11 support 2021-09-09 15:35:39 +02:00