Add configuration that causes setnsec3param hang

Add a zone to the configuration file that uses NSEC3 with dnssec-policy
and fails to load. This will cause setnsec3param to go into a busy wait
and will cause a hang on shutdown.
This commit is contained in:
Matthijs Mekking
2021-06-23 11:17:02 +02:00
parent 33394f11c3
commit 3631a23c7f
3 changed files with 18 additions and 0 deletions

View File

@@ -117,3 +117,11 @@ zone "nsec3-to-nsec.kasp" {
//dnssec-policy "nsec3";
dnssec-policy "nsec";
};
/* Add a zone that fails to load, should not prevent shutdown. */
zone "nsec3-fails-to-load.kasp" {
type primary;
file "nsec3-fails-to-load.kasp.db";
dnssec-policy "nsec3";
allow-update { any; };
};

View File

@@ -0,0 +1,8 @@
@ IN SOA kasp. nsec3-fails-to-load.kasp. (
1 ; serial
30 ; refresh (30 seconds)
10 ; retry (10 seconds)
3600000 ; expire (5 weeks 6 days 16 hours)
300 ; minimum (5 minutes)
)
NS nsec3-fails-to-load.kasp.

View File

@@ -27,3 +27,5 @@ for zn in nsec-to-nsec3 nsec3 nsec3-other nsec3-change nsec3-to-nsec \
do
setup "${zn}.kasp"
done
cp nsec3-fails-to-load.kasp.db.in nsec3-fails-to-load.kasp.db