diff --git a/doc/Changelog b/doc/Changelog index ab42d99f3..762d6049a 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,5 +1,6 @@ 5 October 2017: Wouter - Fix trust-anchor-signaling works in libunbound. + - Fix some more crpls in testdata for different signaling default. 5 October 2017: Ralph - Set trust-anchor-signaling default to yes diff --git a/testdata/ipsecmod_bogus_ipseckey.crpl b/testdata/ipsecmod_bogus_ipseckey.crpl index d5e4e5fc7..6066c841a 100644 --- a/testdata/ipsecmod_bogus_ipseckey.crpl +++ b/testdata/ipsecmod_bogus_ipseckey.crpl @@ -8,6 +8,7 @@ server: target-fetch-policy: "0 0 0 0 0" # test that default value of harden-dnssec-stripped is still yes. fake-sha1: yes + trust-anchor-signaling: no access-control: 127.0.0.1 allow_snoop module-config: "ipsecmod validator iterator" ; ../../ is there because the test runs from testdata/03-testbound.dir diff --git a/testdata/ipsecmod_ignore_bogus_ipseckey.crpl b/testdata/ipsecmod_ignore_bogus_ipseckey.crpl index b86468671..0118336b2 100644 --- a/testdata/ipsecmod_ignore_bogus_ipseckey.crpl +++ b/testdata/ipsecmod_ignore_bogus_ipseckey.crpl @@ -8,6 +8,7 @@ server: target-fetch-policy: "0 0 0 0 0" # test that default value of harden-dnssec-stripped is still yes. fake-sha1: yes + trust-anchor-signaling: no access-control: 127.0.0.1 allow_snoop module-config: "ipsecmod validator iterator" ; ../../ is there because the test runs from testdata/03-testbound.dir diff --git a/testdata/subnet_cached.crpl b/testdata/subnet_cached.crpl index ff28b8317..aa0762675 100644 --- a/testdata/subnet_cached.crpl +++ b/testdata/subnet_cached.crpl @@ -4,6 +4,7 @@ server: trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" val-override-date: "20070916134226" + trust-anchor-signaling: no target-fetch-policy: "0 0 0 0 0" send-client-subnet: 1.2.3.4 max-client-subnet-ipv4: 17 diff --git a/testdata/subnet_val_positive.crpl b/testdata/subnet_val_positive.crpl index 57c8b195f..eab5b8453 100644 --- a/testdata/subnet_val_positive.crpl +++ b/testdata/subnet_val_positive.crpl @@ -3,6 +3,7 @@ server: trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" val-override-date: "20070916134226" + trust-anchor-signaling: no target-fetch-policy: "0 0 0 0 0" send-client-subnet: 1.2.3.4 max-client-subnet-ipv4: 17 diff --git a/testdata/subnet_val_positive_client.crpl b/testdata/subnet_val_positive_client.crpl index d6efd13bc..308b9ad34 100644 --- a/testdata/subnet_val_positive_client.crpl +++ b/testdata/subnet_val_positive_client.crpl @@ -4,6 +4,7 @@ server: trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" val-override-date: "20070916134226" + trust-anchor-signaling: no target-fetch-policy: "0 0 0 0 0" send-client-subnet: 1.2.3.4 max-client-subnet-ipv4: 17 diff --git a/testdata/val_ds_gost_downgrade.crpl b/testdata/val_ds_gost_downgrade.crpl index b22b6ecb9..6690530ac 100644 --- a/testdata/val_ds_gost_downgrade.crpl +++ b/testdata/val_ds_gost_downgrade.crpl @@ -5,6 +5,7 @@ server: val-override-date: "20070916134226" target-fetch-policy: "0 0 0 0 0" fake-sha1: yes + trust-anchor-signaling: no harden-algo-downgrade: yes trust-anchor-signaling: no diff --git a/testdata/val_ds_sha2_downgrade.crpl b/testdata/val_ds_sha2_downgrade.crpl index 007cf7800..ab9ef72ac 100644 --- a/testdata/val_ds_sha2_downgrade.crpl +++ b/testdata/val_ds_sha2_downgrade.crpl @@ -6,6 +6,7 @@ server: target-fetch-policy: "0 0 0 0 0" fake-dsa: yes fake-sha1: yes + trust-anchor-signaling: no harden-algo-downgrade: yes trust-anchor-signaling: no diff --git a/testdata/val_ds_sha2_lenient.crpl b/testdata/val_ds_sha2_lenient.crpl index a6bd42d17..e0f633fe7 100644 --- a/testdata/val_ds_sha2_lenient.crpl +++ b/testdata/val_ds_sha2_lenient.crpl @@ -6,6 +6,7 @@ server: target-fetch-policy: "0 0 0 0 0" fake-dsa: yes fake-sha1: yes + trust-anchor-signaling: no harden-algo-downgrade: no trust-anchor-signaling: no