ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

4331. [func] When loading managed signed zones detect if the

Browse Source 
RRSIG's inception time is in the future and regenerate
                        the RRSIG immediately. [RT #41808]
This commit is contained in:
Mark Andrews
2016-03-10 17:01:08 +11:00
parent 33a4294f44
commit 7c52595464
9 changed files with 92 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
bin/tests/system/dnssec/tests.sh
View File

@@ -117,6 +117,7 @@ grep "flags:.*ad.*QUERY" dig.out.ns4.test$n > /dev/null && ret=1
n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I:checking for AD in authoritative answer ($n)"
ret=0
$DIG $DIGOPTS a.example. @10.53.0.2 a > dig.out.ns2.test$n || ret=1
@@ -3265,5 +3266,14 @@ n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I:check that a named managed zone that was signed 'in-the-future' is re-signed when loaded"
ret=0
$DIG $DIGOPTS managed-future.example. @10.53.0.4 a > dig.out.ns4.test$n || ret=1
grep "flags:.*ad.*QUERY" dig.out.ns4.test$n > /dev/null || ret=1
grep "status: NOERROR" dig.out.ns4.test$n > /dev/null || ret=1
n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I:exit status: $status"
exit $status