Nicki Křížek a2b9dcff54 Add dnssec_py/tests_sibling_ds: reject DS for sibling zones in referrals ... Add a system test that verifies the resolver rejects DS records whose owner name does not match the delegation (NS) name in a referral response. A custom authoritative server (ans4) serves the parent zone sibling-ds. from zone file with delegations for child and sibling subzones. Its DomainHandler injects a DS record for sibling.sibling-ds into referrals for child.sibling-ds. The resolver must detect the mismatch, log "DS doesn't match referral (NS)", and return SERVFAIL. Assisted-by: Claude:claude-opus-4-8		2026-06-25 15:21:00 +10:00
..
startperf	Reformat shell scripts with shfmt	2023-10-26 10:23:50 +02:00
system	Add dnssec_py/tests_sibling_ds: reject DS for sibling zones in referrals	2026-06-25 15:21:00 +10:00
testdata/wire	move all optional tests from bin/tests to bin/tests/optional	2018-03-09 14:12:47 -08:00
.gitignore	Move environment variables from conf.sh to pytest	2024-05-09 17:08:08 +02:00
meson.build	replace the build system with meson	2025-06-11 10:30:12 +03:00
test_client.c	Add and use global memory context called isc_g_mctx	2025-08-04 11:29:26 +02:00
test_server.c	Add and use global memory context called isc_g_mctx	2025-08-04 11:29:26 +02:00