ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Check that excessive iterations in logged by named when

Browse Source 
loading an existing zone or transfering from the primary.
This commit is contained in:
Mark Andrews
2021-02-17 16:33:49 +11:00
parent 8ec16c378d
commit 46eb21c546
10 changed files with 76 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
bin/tests/system/dnssec/ns2/named.conf.in
View File

@@ -191,4 +191,9 @@ zone "hours-vs-days" {
allow-update { any; };
};
zone "too-many-iterations" {
type master;
file "too-many-iterations.db.signed";
};
include "trusted.conf";

11
bin/tests/system/dnssec/ns2/sign.sh
View File

@@ -318,3 +318,14 @@ key1=$("$KEYGEN" -q -a "$DEFAULT_ALGORITHM" -b "$DEFAULT_BITS" -n zone -f KSK "$
key2=$("$KEYGEN" -q -a "$DEFAULT_ALGORITHM" -b "$DEFAULT_BITS" -n zone "$zone")
$SETTIME -P sync now "$key1" > /dev/null
cat "$infile" > "$zonefile.signed"
#
# Negative result from this zone should come back as insecure.
#
zone=too-many-iterations
infile=too-many-iterations.db.in
zonefile=too-many-iterations.db
key1=$("$KEYGEN" -q -a "$DEFAULT_ALGORITHM" -b "$DEFAULT_BITS" -n zone -f KSK "$zone")
key2=$("$KEYGEN" -q -a "$DEFAULT_ALGORITHM" -b "$DEFAULT_BITS" -n zone "$zone")
cat "$infile" "$key1.key" "$key2.key" > "$zonefile"
"$SIGNER" -P -3 - -H too-many -g -o "$zone" "$zonefile" > /dev/null 2>&1

25
bin/tests/system/dnssec/ns2/too-many-iterations.db.in Normal file
View File

@@ -0,0 +1,25 @@
; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
;
; This Source Code Form is subject to the terms of the Mozilla Public
; License, v. 2.0. If a copy of the MPL was not distributed with this
; file, You can obtain one at http://mozilla.org/MPL/2.0/.
;
; See the COPYRIGHT file distributed with this work for additional
; information regarding copyright ownership.
$TTL 30 ; 5 minutes
@ IN SOA mname1. . (
2000042407 ; serial
20 ; refresh (20 seconds)
20 ; retry (20 seconds)
1814400 ; expire (3 weeks)
30 ; minimum (1 hour)
)
NS ns2
ns2 A 10.53.0.2
ns3 A 10.53.0.3
a A 10.0.0.1
*.a A 10.0.0.3
b A 10.0.0.2
d A 10.0.0.4