ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Add nsec3 system test that transfers in NSEC3

Browse Source 
Similar to an attempt to add NSEC through dynamic update, add a test
case that tries to add NSEC3 through zone transfer.
This commit is contained in:
Matthijs Mekking
2022-10-11 15:17:53 +02:00
parent 4cd8e8e9c3
commit ef1cb9935c
6 changed files with 117 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
bin/tests/system/nsec3/tests.sh
View File

@@ -339,6 +339,14 @@ set_key_default_values "KEY1"
echo_i "initial check zone ${ZONE}"
check_nsec3
# Zone: nsec3-xfr-inline.kasp.
# This is a secondary zone, where the primary is signed with NSEC3 but
# the dnssec-policy dictates NSEC.
set_zone_policy "nsec3-xfr-inline.kasp" "nsec" 1 3600
set_key_default_values "KEY1"
echo_i "initial check zone ${ZONE}"
check_nsec
# Zone: nsec3-dynamic-update-inline.kasp.
set_zone_policy "nsec3-dynamic-update-inline.kasp" "nsec" 1 3600
set_key_default_values "KEY1"