bind9/bin/tests/system/checkzone
Mark Andrews 8d6e1c1a48
Enforce NSEC3 record consistency
NSEC3 hashes are required to fit within a single DNS label.  Since there
are 5 bits per label byte without pad characters, the maximum hash size
is floor(63*5/8) (39 bytes).

This patch enforces this maximum length for unknown algorithms, while
strictly enforcing the exact expected digest length for known algorithms
like SHA-1.

(cherry picked from commit 3801d0ebbf)
2026-02-24 16:31:33 +01:00
..
zones Enforce NSEC3 record consistency 2026-02-24 16:31:33 +01:00
setup.sh Reformat shell scripts with shfmt 2023-10-26 13:05:00 +02:00
tests.sh Remove leftover test development echo 2025-07-16 10:42:35 +10:00
tests_sh_checkzone.py Replace clean.sh files with extra_artifacts mark 2024-11-11 15:04:52 +01:00