mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-23 10:37:43 -04:00
e620b29e35
There is no difference, so we are going to make it consistent. This will make it easier to add a chain of trust for these zones (to be done in a future commit).
46 lines
1.3 KiB
Python
46 lines
1.3 KiB
Python
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
# pylint: disable=redefined-outer-name,unused-import
|
|
|
|
import isctest
|
|
from rollover.common import (
|
|
pytestmark,
|
|
alg,
|
|
size,
|
|
CDSS,
|
|
DEFAULT_CONFIG,
|
|
)
|
|
|
|
|
|
def test_dynamic2inline(alg, size, ns3, templates):
|
|
config = DEFAULT_CONFIG
|
|
policy = "default"
|
|
zone = "dynamic2inline.kasp"
|
|
|
|
isctest.kasp.wait_keymgr_done(ns3, zone)
|
|
|
|
step = {
|
|
"zone": zone,
|
|
"cdss": CDSS,
|
|
"keyprops": [
|
|
f"csk unlimited {alg} {size} goal:omnipresent dnskey:rumoured krrsig:rumoured zrrsig:rumoured ds:hidden",
|
|
],
|
|
"nextev": None,
|
|
}
|
|
|
|
isctest.kasp.check_rollover_step(ns3, config, policy, step)
|
|
|
|
templates.render("ns3/named.conf", {"change_lifetime": True})
|
|
ns3.reconfigure()
|
|
isctest.kasp.wait_keymgr_done(ns3, zone, reconfig=True)
|
|
|
|
isctest.kasp.check_rollover_step(ns3, config, policy, step)
|