ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Add check calls to kasp zsk-retired test

Browse Source 
The test case for zsk-retired was missing the actual checks.  Add
them and fix the set_policy call to expect three keys.

(cherry picked from commit 2e4b55de85)
This commit is contained in:
Matthijs Mekking
2020-03-09 10:38:58 +01:00
parent 44bacf33fc
commit da9a1bc5f3
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
bin/tests/system/kasp/tests.sh
View File

@@ -1597,7 +1597,7 @@ set_server "ns3" "10.53.0.3"
# Zone: zsk-retired.autosign.
#
set_zone "zsk-retired.autosign"
set_policy "autosign" "2" "300"
set_policy "autosign" "3" "300"
set_server "ns3" "10.53.0.3"
# The third key is not yet expected to be signing.
set_keyrole "KEY3" "zsk"
@@ -1620,6 +1620,12 @@ set_keystate "KEY3" "GOAL" "omnipresent"
set_keystate "KEY3" "STATE_DNSKEY" "rumoured"
set_keystate "KEY3" "STATE_ZRRSIG" "hidden"
check_keys
check_apex
check_subdomain
dnssec_verify
check_rrsig_refresh
#
# Test dnssec-policy inheritance.
#