ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Fix kasp system test

Browse Source 
In 9.18, 'inline-signing yes;' must also be configured explicitly for
zones using dnssec-policy without a configured 'allow-update' or
'update-policy'.
This commit is contained in:
Matthijs Mekking
2024-07-30 14:32:31 +02:00
parent 8ec554e3de
commit d376d314af
2 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
bin/tests/system/kasp/ns6/named.conf.in
View File

@@ -99,23 +99,27 @@ zone example {
zone longer-lifetime {
type primary;
file "longer-lifetime.db";
inline-signing yes;
dnssec-policy short-lifetime;
};
zone shorter-lifetime {
type primary;
file "shorter-lifetime.db";
inline-signing yes;
dnssec-policy long-lifetime;
};
zone limit-lifetime {
type primary;
file "limit-lifetime.db";
inline-signing yes;
dnssec-policy unlimited-lifetime;
};
zone unlimit-lifetime {
type primary;
file "unlimit-lifetime.db";
inline-signing yes;
dnssec-policy short-lifetime;
};

4
bin/tests/system/kasp/ns6/named2.conf.in
View File

@@ -187,23 +187,27 @@ zone example {
zone longer-lifetime {
type primary;
file "longer-lifetime.db";
inline-signing yes;
dnssec-policy long-lifetime;
};
zone shorter-lifetime {
type primary;
file "shorter-lifetime.db";
inline-signing yes;
dnssec-policy short-lifetime;
};
zone limit-lifetime {
type primary;
file "limit-lifetime.db";
inline-signing yes;
dnssec-policy short-lifetime;
};
zone unlimit-lifetime {
type primary;
file "unlimit-lifetime.db";
inline-signing yes;
dnssec-policy unlimited-lifetime;
};