bind9/bin/tests/system/dnssec
Ondřej Surý 46f15f4f9d
Add test for mixed unsupported DS records
Add a system test that has one invalid DS record with supported
algorithm and one unsupported DS record.  Both DNSKEY and A queries must
fail with SERVFAIL.
2026-02-23 19:53:48 +01:00
..
ans10 Replace deprecated typing imports 2026-02-20 15:17:32 +01:00
ns1 Enable minimal ANY answers by default 2026-01-28 15:38:18 +01:00
ns2 Enable minimal ANY answers by default 2026-01-28 15:38:18 +01:00
ns3 Enable minimal ANY answers by default 2026-01-28 15:38:18 +01:00
ns4 Enable minimal ANY answers by default 2026-01-28 15:38:18 +01:00
ns5 Enable minimal ANY answers by default 2026-01-28 15:38:18 +01:00
ns6 Enable minimal ANY answers by default 2026-01-28 15:38:18 +01:00
ns9 Enable minimal ANY answers by default 2026-01-28 15:38:18 +01:00
prereq.sh Remove obsolete dnspython prerequisite checks 2025-11-28 11:24:11 +01:00
README convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
setup.sh convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
tests_badkey.py Automatically sort imports in Python code 2026-02-20 15:17:32 +01:00
tests_badkey_broken.py Remove compatibility hacks for dnspython<2.7.0 2026-01-21 16:07:31 +01:00
tests_badkey_revoked.py Remove compatibility hacks for dnspython<2.7.0 2026-01-21 16:07:31 +01:00
tests_delv.py Automatically sort imports in Python code 2026-02-20 15:17:32 +01:00
tests_policy.py Automatically sort imports in Python code 2026-02-20 15:17:32 +01:00
tests_signing.py Make default_algorithm accessible through a fixture and method 2026-02-20 15:17:32 +01:00
tests_tat.py Automatically sort imports in Python code 2026-02-20 15:17:32 +01:00
tests_validation.py Add test for mixed unsupported DS records 2026-02-23 19:53:48 +01:00
tests_validation_accept_expired.py Remove compatibility hacks for dnspython<2.7.0 2026-01-21 16:07:31 +01:00
tests_validation_managed_keys.py Make default_algorithm accessible through a fixture and method 2026-02-20 15:17:32 +01:00
tests_validation_many_anchors.py Automatically sort imports in Python code 2026-02-20 15:17:32 +01:00
tests_validation_multiview.py Make default_algorithm accessible through a fixture and method 2026-02-20 15:17:32 +01:00

Copyright (C) Internet Systems Consortium, Inc. ("ISC")

SPDX-License-Identifier: MPL-2.0

This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0.  If a copy of the MPL was not distributed with this
file, you can obtain one at https://mozilla.org/MPL/2.0/.

See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.

The test setup for the DNSSEC tests has a secure root.

ns1 is the root server.

ns2 and ns3 are authoritative servers for the various test domains.

ns4 is a caching-only server, configured with the correct trusted key
for the root.

ns5 is a caching-only server, configured with the an incorrect trusted
key for the root, or with unsupported and disabled algorithms.  It is used
for testing failure cases.

ns6 is a caching and authoritative server used for testing unusual
server behaviors such as disabled DNSSEC algorithms and non-cacheable
responses. It runs with -T nonearest, -T nosoa, and -T tat=3.

ns9 is a forwarding-only server.