Add two more nsec3 system tests

Add one more case that tests reconfiguring a zone to turn off
inline-signing. It should still be a valid DNSSEC zone and the NSEC3
parameters should not change.

Add another test to ensure that you cannot update the zone with a
NSEC3 record.
This commit is contained in:
Matthijs Mekking
2022-10-11 11:15:34 +02:00
parent 57ea9e08c6
commit 4cd8e8e9c3
5 changed files with 63 additions and 5 deletions

View File

@@ -26,7 +26,8 @@ setup() {
for zn in nsec-to-nsec3 nsec3 nsec3-other nsec3-change nsec3-to-nsec \
nsec3-to-optout nsec3-from-optout nsec3-dynamic \
nsec3-dynamic-change nsec3-dynamic-to-inline
nsec3-dynamic-change nsec3-dynamic-to-inline \
nsec3-inline-to-dynamic nsec3-dynamic-update-inline
do
setup "${zn}.kasp"
done