ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

3341. [func] New "dnssec-verify" command checks a signed zone

Browse Source 
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
This commit is contained in:
Mark Andrews
2012-06-25 13:57:32 +10:00
parent 8811ab3ca6
commit ad127d839d
26 changed files with 2578 additions and 707 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
bin/tests/system/verify/zones/unsigned.db Normal file
View File

@@ -0,0 +1,17 @@
$TTL 3600
@ SOA . . 0 0 0 2419200 3600 ; 28 day expire
@ NS .
data A 1.2.3.4
dname DNAME data
longttl 2419200 A 1.2.3.4
sub.dname TXT sub.dname
sub.empty TXT sub.empty
sub NS ns.sub
ns.sub A 1.2.3.4
ns.sub AAAA 2002::1.2.3.4
other.sub TXT other.sub
secure NS secure
secure DS 1312 50 100 96EEB2FFD9B00CD4694E78278B5EFDAB0A80446567B69F634DA078F0
secure A 1.2.3.4
secure AAAA 2002::1.2.3.4
out-of-zone. A 1.2.3.4