upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
bind9/bin/tests/system/dnssec
History
Štěpán Balážik ade2e995a9 Use isctest.asyncserver in the "dnssec" test 
Reimplement the custom server using isctest.asyncserver. Factor most of
the logic out of the server code to two (identical) zones and only
implement the non-standard behavior.

Behavior changes:
- RRSIG Expiration and Inception is now static and covering the whole
  timeline instead of being calculated everytime.
- NXDOMAIN is returned where suitable by standard.
- Returned SOA records have properly set zone names.
2025-10-29 14:20:02 +01:00
..
ans10 Use isctest.asyncserver in the "dnssec" test 2025-10-29 14:20:02 +01:00
ns1 convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
ns2 Various TTL fixes in dnssec tests 2025-07-31 12:55:40 -07:00
ns3 Check disable-algorithms with non-zone names 2025-09-25 11:14:27 +10:00
ns4 remove "bindkeys-file" option 2025-10-12 23:37:49 -07:00
ns5 convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
ns6 tidy up the dnssec test tree 2025-07-31 12:55:40 -07:00
ns9 Split up badkey tests into separate modules 2025-07-31 12:55:40 -07:00
prereq.sh Reformat shell scripts with shfmt 2023-10-26 10:23:50 +02:00
README convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
setup.sh convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
tests_badkey.py Split up badkey tests into separate modules 2025-07-31 12:55:40 -07:00
tests_badkey_broken.py Use bootstrap() in pytest where applicable 2025-10-21 15:07:49 +02:00
tests_badkey_revoked.py Use bootstrap() in pytest where applicable 2025-10-21 15:07:49 +02:00
tests_delv.py Re-enable delv tests with TSAN 2025-09-24 13:34:16 +02:00
tests_policy.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_signing.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_tat.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_validation.py Check disable-algorithms with non-zone names 2025-09-25 11:14:27 +10:00
tests_validation_accept_expired.py Use bootstrap() in pytest where applicable 2025-10-21 15:07:49 +02:00
tests_validation_managed_keys.py Use bootstrap() in pytest where applicable 2025-10-21 15:07:49 +02:00
tests_validation_many_anchors.py Use bootstrap() in pytest where applicable 2025-10-21 15:07:49 +02:00
tests_validation_multiview.py Use bootstrap() in pytest where applicable 2025-10-21 15:07:49 +02:00

README 

Copyright (C) Internet Systems Consortium, Inc. ("ISC")

SPDX-License-Identifier: MPL-2.0

This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0.  If a copy of the MPL was not distributed with this
file, you can obtain one at https://mozilla.org/MPL/2.0/.

See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.

The test setup for the DNSSEC tests has a secure root.

ns1 is the root server.

ns2 and ns3 are authoritative servers for the various test domains.

ns4 is a caching-only server, configured with the correct trusted key
for the root.

ns5 is a caching-only server, configured with the an incorrect trusted
key for the root, or with unsupported and disabled algorithms.  It is used
for testing failure cases.

ns6 is a caching and authoritative server used for testing unusual
server behaviors such as disabled DNSSEC algorithms and non-cacheable
responses. It runs with -T nonearest, -T nosoa, and -T tat=3.

ns9 is a forwarding-only server.