Remove support for obsoleted and insecure DSA and DSA-NSEC3-SHA1 algorithms

This commit is contained in:
Ondřej Surý
2018-06-06 14:51:08 +02:00
parent 6aadf7c8ab
commit 3994b1f9c2
18 changed files with 12 additions and 1965 deletions

View File

@@ -25,15 +25,6 @@ class PolicyTest(unittest.TestCase):
self.assertEqual(p.constructed(), False)
self.assertEqual(p.validate(), (True, ""))
p = pol.policy('good_dsa.test', novalidate=True)
self.assertEqual(p.get_name(), "good_dsa.test")
self.assertEqual(p.constructed(), False)
self.assertEqual(p.validate(), (True, ""))
p = pol.policy('bad_dsa.test', novalidate=True)
self.assertEqual(p.validate(),
(False, 'ZSK key size 769 not divisible by 64 as required for DSA'))
def test_prepublish(self):
pol = policy.dnssec_policy()
pol.load('test-policies/02-prepublish.pol')