ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

[master] allow dnssec options in inline-signing slaves

Browse Source 
3408.	[bug]		Some DNSSEC-related options (update-check-ksk,
			dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
			are now legal in slave zones as long as
			inline-signing is in use. [RT #31078]
This commit is contained in:
Evan Hunt
2012-10-26 16:14:59 -07:00
parent 57c3a831c5
commit f46168b879
5 changed files with 91 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
bin/tests/system/checkconf/tests.sh
View File

@@ -93,5 +93,16 @@ done
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I: checking options allowed in inline-signing slaves"
ret=0
n=`$CHECKCONF bad-dnssec.conf 2>&1 | grep "dnssec-dnskey-kskonly.*requires inline" | wc -l`
[ $n -eq 1 ] || ret=1
n=`$CHECKCONF bad-dnssec.conf 2>&1 | grep "dnssec-loadkeys-interval.*requires inline" | wc -l`
[ $n -eq 1 ] || ret=1
n=`$CHECKCONF bad-dnssec.conf 2>&1 | grep "update-check-ksk.*requires inline" | wc -l`
[ $n -eq 1 ] || ret=1
if [ $ret != 0 ]; then echo "I:failed"; fi
status=`expr $status + $ret`
echo "I:exit status: $status"
exit $status