ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

update system tests so validation won't fail when using IANA key

Browse Source 
- all tests with "recursion yes" now also specify "dnssec-validation yes",
  and all tests with "recursion no" also specify "dnssec-validation no".
  this must be maintained in all new tests, or else validation will fail
  when we use local root zones for testing.
- clean.sh has been modified where necessary to remove managed-keys.bind
  and viewname.mkeys files.
This commit is contained in:
Evan Hunt
2018-05-16 11:51:06 -07:00
committed by Ondřej Surý
parent bef18ecac6
commit a7a2fa296a
223 changed files with 251 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
bin/tests/system/resolver/clean.sh
View File

@@ -34,3 +34,4 @@ rm -f resolve.out.*.test*
rm -f .digrc
rm -f ns*/named.lock
rm -f ns5/trusted.conf
rm -f ns*/managed-keys.bind* ns*/*.mkeys*

1
bin/tests/system/resolver/ns1/named.conf.in
View File

@@ -18,6 +18,7 @@ options {
listen-on { 10.53.0.1; };
listen-on-v6 { none; };
recursion yes;
dnssec-validation yes;
deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
except-from { "example.org"; };
deny-answer-aliases { "example.org"; }

2
bin/tests/system/resolver/ns4/named.conf.in
View File

@@ -20,7 +20,7 @@ options {
listen-on { 10.53.0.4; };
listen-on-v6 { none; };
recursion no;
// minimal-responses yes;
dnssec-validation no;
/* test that named loads with root-delegation-only */
root-delegation-only;
};

1
bin/tests/system/resolver/ns5/named.conf.in
View File

@@ -20,6 +20,7 @@ options {
listen-on { 10.53.0.5; };
listen-on-v6 { none; };
recursion yes;
dnssec-validation yes;
querylog yes;
};

2
bin/tests/system/resolver/ns6/named.conf.in
View File

@@ -20,7 +20,7 @@ options {
listen-on { 10.53.0.6; };
listen-on-v6 { none; };
recursion no;
// minimal-responses yes;
dnssec-validation no;
querylog yes;
/*
* test that named loads with root-delegation-only that

1
bin/tests/system/resolver/ns7/named1.conf.in
View File

@@ -20,6 +20,7 @@ options {
listen-on { 10.53.0.7; };
listen-on-v6 { none; };
recursion yes;
dnssec-validation yes;
empty-zones-enable yes;
disable-empty-zone 20.172.in-addr.arpa;
/*

1
bin/tests/system/resolver/ns7/named2.conf.in
View File

@@ -20,6 +20,7 @@ options {
listen-on { 10.53.0.7; };
listen-on-v6 { none; };
recursion yes;
dnssec-validation yes;
empty-zones-enable yes;
disable-empty-zone 20.172.in-addr.arpa;
/*