Add configuration that causes setnsec3param hang
Add a zone to the configuration file that uses NSEC3 with dnssec-policy and fails to load. This will cause setnsec3param to go into a busy wait and will cause a hang on shutdown.
This commit is contained in:
@@ -117,3 +117,11 @@ zone "nsec3-to-nsec.kasp" {
|
||||
//dnssec-policy "nsec3";
|
||||
dnssec-policy "nsec";
|
||||
};
|
||||
|
||||
/* Add a zone that fails to load, should not prevent shutdown. */
|
||||
zone "nsec3-fails-to-load.kasp" {
|
||||
type primary;
|
||||
file "nsec3-fails-to-load.kasp.db";
|
||||
dnssec-policy "nsec3";
|
||||
allow-update { any; };
|
||||
};
|
||||
|
||||
@@ -0,0 +1,8 @@
|
||||
@ IN SOA kasp. nsec3-fails-to-load.kasp. (
|
||||
1 ; serial
|
||||
30 ; refresh (30 seconds)
|
||||
10 ; retry (10 seconds)
|
||||
3600000 ; expire (5 weeks 6 days 16 hours)
|
||||
300 ; minimum (5 minutes)
|
||||
)
|
||||
NS nsec3-fails-to-load.kasp.
|
||||
@@ -27,3 +27,5 @@ for zn in nsec-to-nsec3 nsec3 nsec3-other nsec3-change nsec3-to-nsec \
|
||||
do
|
||||
setup "${zn}.kasp"
|
||||
done
|
||||
|
||||
cp nsec3-fails-to-load.kasp.db.in nsec3-fails-to-load.kasp.db
|
||||
|
||||
Reference in New Issue
Block a user