ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

[v9_9] add dnssec-coverage tool

Browse Source 
3528.	[func]		New "dnssec-coverage" command scans the timing
			metadata for a set of DNSSEC keys and reports if a
			lapse in signing coverage has been scheduled
			inadvertently. (Note: This tool depends on python;
			it will not be built or installed on systems that
			do not have a python interpreter.) [RT #28098]
(cherry picked from commit 831f59eb43)
This commit is contained in:
Evan Hunt
2013-03-20 14:42:06 -07:00
parent 9627ae7989
commit 1c363c5ca8
29 changed files with 1328 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
bin/tests/system/coverage/01-ksk-inactive/README Normal file
View File

@@ -0,0 +1,10 @@
This set includes one KSK rollover. The KSK is deactivated prior to
its replacement being activated. Tool output should resemble:
Checking KSK events for zone example.com, algorithm 7:
ERROR: After 2012-31-Jul (20:59:14):
Inactive: example.com/007/45435 (KSK)
No KSK's are active
Checking ZSK events for zone example.com, algorithm 7:
OK