ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

explicitly set dnssec-validation in system tests

Browse Source 
the default value of dnssec-validation is 'auto', which causes
a server to send a key refresh query to the root zone when starting
up. this is undesirable behavior in system tests, so this commit
sets dnssec-validation to either 'yes' or 'no' in all tests where
it had not previously been set.

this change had the mostly-harmless side effect of changing the cached
trust level of unvalidated answer data from 'answer' to 'authanswer',
which caused a few test cases in which dumped cache data was examined in
the serve-stale system test to fail. those test cases have now been
updated to expect 'authanswer'.

(cherry picked from commit 0b09ee8cdc)
This commit is contained in:
Evan Hunt
2023-06-01 17:14:49 -07:00
parent f6ee78c61a
commit a31dd61b0f
202 changed files with 205 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
bin/tests/system/dnssec/ns5/named2.conf.in
View File

@@ -31,6 +31,7 @@ options {
listen-on { 10.53.0.5; 127.0.0.1; };
listen-on-v6 { none; };
recursion yes;
dnssec-validation yes;
};
view root {