ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Check SOA without DNSKEY behaviour

Browse Source
This commit is contained in:
Mark Andrews
2021-12-01 17:03:13 +11:00
committed by Petr Špaček
parent dfe31e61d2
commit 8878adcd61
6 changed files with 54 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
bin/tests/system/synthfromdnssec/ns1/named.conf.in
View File

@@ -62,4 +62,9 @@ zone "minimal" {
file "minimal.db.signed";
};
zone "soa-without-dnskey" {
type primary;
file "soa-without-dnskey.db.signed";
};
include "trusted.conf";

2
bin/tests/system/synthfromdnssec/ns1/root.db.in
View File

@@ -17,3 +17,5 @@ dnamed NS ns1.dnamed
ns1.dnamed A 10.53.0.1
minimal NS ns1.minimal
ns1.minimal A 10.53.0.1
soa-without-dnskey NS ns1.soa-without-dnskey
ns1.soa-without-dnskey A 10.53.0.1

10
bin/tests/system/synthfromdnssec/ns1/sign.sh
View File

@@ -51,6 +51,16 @@ cat "$infile" "$keyname.key" > "$zonefile"
# do not regenerate NSEC chain as there in a minimal NSEC record present
$SIGNER -P -Z nonsecify -o $zone $zonefile > /dev/null
zone=soa-without-dnskey
infile=soa-without-dnskey.db.in
zonefile=soa-without-dnskey.db
keyname=$($KEYGEN -q -a RSASHA256 -b 2048 -n zone $zone)
cat "$infile" "$keyname.key" > "$zonefile"
# do not regenerate NSEC chain as there in a minimal NSEC record present
$SIGNER -P -Z nonsecify -o $zone $zonefile > /dev/null
zone=.
infile=root.db.in
zonefile=root.db

12
bin/tests/system/synthfromdnssec/ns1/soa-without-dnskey.db.in Normal file
View File

@@ -0,0 +1,12 @@
$TTL 3600
soa-without-dnskey. 3600 SOA ns1.soa-without-dnskey. hostmaster.soa-without-dnskey. (
1 ; serial
3600 ; refresh (1 hour)
1200 ; retry (20 minutes)
604800 ; expire (1 week)
3600 ; minimum (1 hour)
)
3600 NS ns1.soa-without-dnskey.
3600 NSEC ns1.soa-without-dnskey. NS SOA RRSIG NSEC
ns1.soa-without-dnskey. 3600 A 10.53.0.1
3600 NSEC soa-without-dnskey. A RRSIG NSEC