Wait for DNSKEY records to be signed

This commit is contained in:
Mark Andrews
2020-04-06 13:51:47 +10:00
parent bb87613015
commit 5a4ab3360d

View File

@@ -117,10 +117,14 @@ status=`expr $status + $ret`
echo_i "verifying inline zones work with views"
ret=0
$DIG -p ${PORT} @10.53.0.2 -b 10.53.0.2 +dnssec DNSKEY inline > dig.out.internal
$DIG -p ${PORT} @10.53.0.2 -b 10.53.0.5 +dnssec DNSKEY inline > dig.out.external
grep "ANSWER: 4," dig.out.internal > /dev/null || ret=1
grep "ANSWER: 4," dig.out.external > /dev/null || ret=1
wait_for_signed() {
$DIG -p ${PORT} @10.53.0.2 -b 10.53.0.2 +dnssec DNSKEY inline > dig.out.internal
$DIG -p ${PORT} @10.53.0.2 -b 10.53.0.5 +dnssec DNSKEY inline > dig.out.external
grep "ANSWER: 4," dig.out.internal > /dev/null || return 1
grep "ANSWER: 4," dig.out.external > /dev/null || return 1
return 0
}
retry_quiet 10 wait_for_signed || ret=1
int=`awk '$4 == "DNSKEY" { print $8 }' dig.out.internal | sort`
ext=`awk '$4 == "DNSKEY" { print $8 }' dig.out.external | sort`
test "$int" != "$ext" || ret=1