mirror of
https://github.com/isc-projects/bind9.git
synced 2026-03-01 13:01:40 -05:00
c9accfde28
Make ns3 mirror the "root" zone from ns1 and query the former for a properly signed record below the root. Ensure ns1 is not queried during resolution and that the AD bit is set in the response.
26 lines
892 B
Bash
26 lines
892 B
Bash
#!/bin/sh -e
|
|
#
|
|
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
SYSTEMTESTTOP=..
|
|
. $SYSTEMTESTTOP/conf.sh
|
|
|
|
$SHELL clean.sh
|
|
|
|
copy_setports ns1/named.conf.in ns1/named.conf
|
|
copy_setports ns2/named.conf.in ns2/named.conf
|
|
copy_setports ns3/named.conf.in ns3/named.conf
|
|
|
|
( cd ns1 && $SHELL -e sign.sh )
|
|
|
|
cat ns2/verify-axfr.db.bad.signed > ns2/verify-axfr.db.signed
|
|
cat ns2/verify-ixfr.db.original.signed > ns2/verify-ixfr.db.signed
|
|
cat ns2/verify-load.db.bad.signed > ns3/verify-load.db.mirror
|
|
cat ns2/verify-untrusted.db.original.signed > ns2/verify-untrusted.db.signed
|