verify that auto-dnssec maintain generates and signs NSEC3 records with DNAME at the apex

This commit is contained in:
Mark Andrews
2018-11-26 13:46:37 +11:00
parent 06e218c421
commit 6b470bbf42
7 changed files with 37 additions and 4 deletions

View File

@@ -1449,5 +1449,13 @@ n=`expr $n + 1`
if [ $ret != 0 ]; then echo_i "failed"; fi
status=`expr $status + $ret`
echo_i "check that DNAME at apex with NSEC3 is correctly signed (auto-dnssec maintain) ($n)"
ret=0
$DIG $DIGOPTS txt dname-at-apex-nsec3.example @10.53.0.3 > dig.out.ns3.test$n || ret=1
grep "RRSIG NSEC3 7 3 3600" dig.out.ns3.test$n > /dev/null || ret=1
n=`expr $n + 1`
if [ $ret != 0 ]; then echo_i "failed"; fi
status=`expr $status + $ret`
echo_i "exit status: $status"
[ $status -eq 0 ] || exit 1