ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

dnssec: Check validation with short RSA key size FIPS mode

Browse Source 
use a pregenerated zone signed with RSASHA1 keys at 1024 bits.
This commit is contained in:
Mark Andrews
2022-01-11 18:44:23 +11:00
parent ed7750be56
commit 333693ddf5
9 changed files with 147 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
bin/tests/system/dnssec/ns2/example.db.in
View File

@@ -171,4 +171,7 @@ ns.revkey A 10.53.0.3
rsasha1 NS ns.rsasha1
ns.rsasha1 A 10.53.0.3
rsasha1-1024 NS ns.rsasha1-1024
ns.rsasha1-1024 A 10.53.0.3
dname-at-apex-nsec3 NS ns3

2
bin/tests/system/dnssec/ns2/sign.sh
View File

@@ -63,7 +63,7 @@ for subdomain in secure badds bogus dynamic keyless nsec3 optout \
ttlpatch split-dnssec split-smart expired expiring upper lower \
dnskey-unknown dnskey-unsupported dnskey-unsupported-2 \
dnskey-nsec3-unknown managed-future revkey \
dname-at-apex-nsec3 occluded rsasha1
dname-at-apex-nsec3 occluded rsasha1 rsasha1-1024
do
cp "../ns3/dsset-$subdomain.example." .
done