ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

4305. [bug] dnssec-signzone was not removing unnecessary rrsigs

Browse Source 
from the zone's apex. [RT #41483]
This commit is contained in:
Mark Andrews
2016-01-28 15:42:34 +11:00
parent 9d85a77382
commit 832ab79d1f
6 changed files with 99 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
bin/tests/system/dnssec/tests.sh
View File

@@ -3217,5 +3217,45 @@ n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I:check that RRSIGs are correctly removed from apex when RRset is removed NSEC ($n)"
ret=0
# generate signed zone with MX and AAAA records at apex.
(
cd signer
$KEYGEN -q -3 -fK remove > /dev/null
$KEYGEN -q -3 remove > /dev/null
echo > remove.db.signed
$SIGNER -S -o remove -D -f remove.db.signed remove.db.in > signer.out.1.$n 2>&1
)
grep -w MX signer/remove.db.signed > /dev/null || { ret=1 ; cp signer/remove.db.signed.pre$n; }
# re-generate signed zone without MX and AAAA records at apex.
(
cd signer
$SIGNER -S -o remove -D -f remove.db.signed remove2.db.in > signer.out.2.$n 2>&1
)
grep -w MX signer/remove.db.signed > /dev/null && { ret=1 ; cp signer/remove.db.signed.post$n; }
n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I:check that RRSIGs are correctly removed from apex when RRset is removed NSEC3k ($n)"
ret=0
# generate signed zone with MX and AAAA records at apex.
(
cd signer
echo > remove.db.signed
$SIGNER -3 - -S -o remove -D -f remove.db.signed remove.db.in > signer.out.1.$n 2>&1
)
grep -w MX signer/remove.db.signed > /dev/null || { ret=1 ; cp signer/remove.db.signed.pre$n; }
# re-generate signed zone without MX and AAAA records at apex.
(
cd signer
$SIGNER -3 - -S -o remove -D -f remove.db.signed remove2.db.in > signer.out.2.$n 2>&1
)
grep -w MX signer/remove.db.signed > /dev/null && { ret=1 ; cp signer/remove.db.signed.post$n; }
n=`expr $n + 1`
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I:exit status: $status"
exit $status