mirror of
https://github.com/isc-projects/bind9.git
synced 2026-03-24 03:13:38 -04:00
0b9a9f9955
Add a test case for a server that uses a resolver as an parental-agent. We need two root servers, ns1 and ns10, one that delegates to the 'checkds' tld with the DS published (ns2), and one that delegates to the 'checkds' tld with the DS removed (ns5). Both root zones are being setup in the 'ns1/setup.sh' script. We also need two resolvers, ns3 and ns8, that use different root hints (one uses ns1 address as a hint, the other uses ns10). Then add the checks to test_checkds.py is similar to the existing tests. Update 'types' because for zones that have the DS withdrawn (or to be withdrawn), the CDS and CDNSKEY records should not be published and thus should not be in the NSEC bitmap.
36 lines
1.2 KiB
Bash
36 lines
1.2 KiB
Bash
#!/bin/sh -e
|
|
|
|
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
# shellcheck source=conf.sh
|
|
. ../../conf.sh
|
|
|
|
echo_i "ns2/setup.sh"
|
|
|
|
for subdomain in dspublished reference missing-dspublished bad-dspublished \
|
|
multiple-dspublished incomplete-dspublished bad2-dspublished \
|
|
resolver-dspublished \
|
|
dswithdrawn missing-dswithdrawn bad-dswithdrawn \
|
|
multiple-dswithdrawn incomplete-dswithdrawn bad2-dswithdrawn \
|
|
resolver-dswithdrawn
|
|
do
|
|
cp "../ns9/dsset-$subdomain.checkds." .
|
|
done
|
|
|
|
zone="checkds"
|
|
infile="checkds.db.infile"
|
|
zonefile="checkds.db"
|
|
|
|
CSK=$($KEYGEN -k default $zone 2> keygen.out.$zone)
|
|
cat template.db.in "${CSK}.key" > "$infile"
|
|
private_type_record $zone $DEFAULT_ALGORITHM_NUMBER "$CSK" >> "$infile"
|
|
$SIGNER -S -g -z -x -s now-1h -e now+30d -o $zone -O full -f $zonefile $infile > signer.out.$zone 2>&1
|