Check unsigned serial number in signed zone files
All signed zone files present in bin/tests/system/inline/ns8 should contain the unsigned serial number in the raw-format header. Add a check to ensure that is the case. Extend the dnssec-signzone command line in ns8/sign.sh with the -L option to allow the zones initially signed there to pass the newly added check. Add another zone to the configuration for the ns8 named instance to ensure the check also passes when multiple zones are inline-signed by a single named instance.
This commit is contained in:
committed by
Ondřej Surý
parent
b65b5dbade
commit
ab49205af3
@@ -426,6 +426,7 @@
|
||||
./bin/tests/system/inline/ns8/sign.sh SH 2020,2021,2022
|
||||
./bin/tests/system/inline/setup.sh SH 2011,2012,2013,2014,2016,2017,2018,2019,2020,2021,2022
|
||||
./bin/tests/system/inline/tests.sh SH 2011,2012,2013,2014,2016,2017,2018,2019,2020,2021,2022
|
||||
./bin/tests/system/inline/tests_signed_zone_files.py PYTHON 2022
|
||||
./bin/tests/system/integrity/clean.sh SH 2017,2018,2019,2020,2021,2022
|
||||
./bin/tests/system/integrity/setup.sh SH 2018,2019,2020,2021,2022
|
||||
./bin/tests/system/integrity/tests.sh SH 2017,2018,2019,2020,2021,2022
|
||||
|
||||
Reference in New Issue
Block a user