From d376d314af3ef6fc5e527836cea5c39b245daae5 Mon Sep 17 00:00:00 2001
From: Matthijs Mekking <matthijs@isc.org>
Date: Tue, 30 Jul 2024 14:32:31 +0200
Subject: [PATCH] Fix kasp system test

In 9.18, 'inline-signing yes;' must also be configured explicitly for
zones using dnssec-policy without a configured 'allow-update' or
'update-policy'.
---
 bin/tests/system/kasp/ns6/named.conf.in  | 4 ++++
 bin/tests/system/kasp/ns6/named2.conf.in | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/bin/tests/system/kasp/ns6/named.conf.in b/bin/tests/system/kasp/ns6/named.conf.in
index f30445ba27..019893c96e 100644
--- a/bin/tests/system/kasp/ns6/named.conf.in
+++ b/bin/tests/system/kasp/ns6/named.conf.in
@@ -99,23 +99,27 @@ zone example {
 zone longer-lifetime {
 	type primary;
 	file "longer-lifetime.db";
+	inline-signing yes;
 	dnssec-policy short-lifetime;
 };
 
 zone shorter-lifetime {
 	type primary;
 	file "shorter-lifetime.db";
+	inline-signing yes;
 	dnssec-policy long-lifetime;
 };
 
 zone limit-lifetime {
 	type primary;
 	file "limit-lifetime.db";
+	inline-signing yes;
 	dnssec-policy unlimited-lifetime;
 };
 
 zone unlimit-lifetime {
 	type primary;
 	file "unlimit-lifetime.db";
+	inline-signing yes;
 	dnssec-policy short-lifetime;
 };
diff --git a/bin/tests/system/kasp/ns6/named2.conf.in b/bin/tests/system/kasp/ns6/named2.conf.in
index fac2524e04..3762688bdd 100644
--- a/bin/tests/system/kasp/ns6/named2.conf.in
+++ b/bin/tests/system/kasp/ns6/named2.conf.in
@@ -187,23 +187,27 @@ zone example {
 zone longer-lifetime {
 	type primary;
 	file "longer-lifetime.db";
+	inline-signing yes;
 	dnssec-policy long-lifetime;
 };
 
 zone shorter-lifetime {
 	type primary;
 	file "shorter-lifetime.db";
+	inline-signing yes;
 	dnssec-policy short-lifetime;
 };
 
 zone limit-lifetime {
 	type primary;
 	file "limit-lifetime.db";
+	inline-signing yes;
 	dnssec-policy short-lifetime;
 };
 
 zone unlimit-lifetime {
 	type primary;
 	file "unlimit-lifetime.db";
+	inline-signing yes;
 	dnssec-policy unlimited-lifetime;
 };