Commit Graph
348 Commits
Author SHA1 Message Date
Michał Kępień a23e9821d6 Replace duplicated code snippet with calls to helper functions
Reduce code duplication by replacing a code snippet repeated throughout
system tests using "trusted-keys" and/or "managed-keys" configuration
sections with calls to keyfile_to_{managed,trusted}_keys() helper
functions.

(cherry picked from commit dce66f7635)
2018-06-13 08:08:25 +02:00
Evan Hunt 7a00ce2e77 ensure we try to validate glue records so RRSIG TTLs will be capped 2018-06-08 11:41:48 -07:00
Mukund SivaramanandMark Andrews 3d62545657 Add system test
(cherry picked from commit 303391ea41)
2018-06-04 01:12:18 -04:00
Ondřej Surý 188526f41c Remove $Id markers, Principal Author and Reviewed tags from the full source tree
(cherry picked from commit 55a10b7acd)
2018-05-11 14:25:15 +02:00
Ondřej Surý 0cbad1b3fc Update tests to not use '>&-' that closes file descriptor, but instead use correct redirection to '>/dev/null'
(cherry picked from commit 3f66b8acb0)
2018-05-11 13:11:20 +02:00
Evan Hunt 09cf48603a update file headers 2018-03-15 18:38:48 -07:00
Evan Hunt 8b205089b7 update file headers to remove copyright years 2018-03-14 16:40:20 -07:00
Evan Hunt 442c1530a3 final cleanup
- update Kyuafiles to match Atffiles
- copyrights
- CHANGES note

(cherry picked from commit 86e00cbb71)
(cherry picked from commit 80834b5b90)
2018-03-09 16:17:56 -08:00
Evan Hunt dbb225d83e migrate tests from bin/tests/dnssec-signzone to bin/tests/system/dnssec
- added tests to the dnssec system test that duplicate the ones
  from bin/tests/dnssec-signzone
- changed cleanall.sh so it doesn't automatically remove all
  key files, because there are now some of those that are part of the
  distribution

(cherry picked from commit ccfe778c01)
(cherry picked from commit d8f8eee381)
2018-03-09 15:30:27 -08:00
Evan Hunt d57e8f6df3 clean up test output
- removed a few remaing places where output wasn't being passed
  through echo_i or cat_i
- added a "digcomp" function to conf.sh.in to send digcomp.pl output
  through cat_i and return the correct exit value
- set SYSTESTDIR when calling echo_i from nsX directories, so that
  the test name will always be printed correctly
- fixed a test name typo in conf.sh.in

(cherry picked from commit 0e52fbd0b3)
2018-02-27 09:52:07 -08:00
Evan Hunt 854f7846d8 tidying up after backport 2018-02-23 13:28:47 -08:00
Evan Hunt 167fa161d1 parallelize most system tests
(cherry picked from commit c032c54dda)
(cherry picked from commit 2b81f322cb)
2018-02-23 13:23:31 -08:00
Mark Andrews 41aef8f068 read dig.out.ns3.test$n rather than dig.out.ns2.test$n
(cherry picked from commit 80739779fc)
2017-10-25 15:03:18 +11:00
Tinderbox User 8ed107eab4 update copyright notice / whitespace 2017-10-24 23:48:58 +00:00
Mark Andrews ba93bc80a7 4783. [test] dnssec: 'check that NOTIFY is sent at the end of
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
2017-10-25 09:21:52 +11:00
Mark Andrews 5f10315828 4782. [test] dnssec: 'checking positive and negative validation
with negative trust anchors' required more time to
                        complete on some machines. [RT #46386]

(cherry picked from commit 6b8e4d6e69)
2017-10-25 09:13:42 +11:00
Mark Andrews 1c8aa38b53 4759. [func] Add logging channel "trust-anchor-telementry" to
record trust-anchor-telementry in incoming requests.
                            Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
                            are logged.  [RT #46124]

    (cherry picked from commit b41c1aacbc)
2017-10-06 13:53:50 +11:00
Tinderbox User 66e599a004 update copyright notice / whitespace 2017-07-28 23:47:00 +00:00
Michał Kępień 11c4e6d8fc [v9_11] Clarify error message printed by dnssec-dsfromkey
4663.	[cleanup]	Clarify error message printed by dnssec-dsfromkey.
			[RT #21731]

(cherry picked from commit c150f68609)
2017-07-28 10:29:54 +02:00
Mark Andrews 250d96dd31 loop waiting for ns4/managed-keys.bind to be written
(cherry picked from commit f7a22ae512)
2017-07-04 15:53:45 +10:00
Evan Hunt 1ca2cf0243 [v9_11] update copyrights that had been missed recently 2017-04-23 17:07:59 -07:00
Tinderbox User d0c3b241e5 update copyright notice / whitespace 2017-04-21 23:46:11 +00:00
Mukund Sivaraman fec9247b8f Validate glue before adding it to the additional section (#45062)
(cherry picked from commit b0dbcba2d2)
2017-04-21 15:46:07 +05:30
Tinderbox User f6b9092741 update copyright notice / whitespace 2017-01-12 23:46:13 +00:00
Mark Andrews 0de20c29f3 remove false positives due to bad grep [RT #44178]
(cherry picked from commit 0c43d50368)
2017-01-12 13:59:24 +11:00
Witold Krecicki cc51cd2d20 4487. [test] Make system tests work on Windows. [RT #42931] 2016-10-19 17:21:13 +02:00
Evan Hunt 67a42ef55c [v9_11] reset ret between NTA tests
(cherry picked from commit af05768c0e)
2016-10-05 21:07:18 -07:00
Mark Andrews b7161f9898 4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
to provide feedback to the trust-anchor administrators
                        about how key rollovers are progressing as per
                        draft-ietf-dnsop-edns-key-tag-02.  This can be
                        disabled using 'trust-anchor-telemetry no;'.
                        [RT #40583]

(cherry picked from commit f20179857a)
2016-07-22 20:03:06 +10:00
Mark Andrews 0c27b3fe77 4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 14:56:38 +10:00
Mark Andrews c1bf332c7c silence rm error message 2016-06-20 14:33:33 +10:00
Mark Andrews eff62988e6 checking that default nta's were lifted due to lifetime were not robust 2016-06-20 14:29:11 +10:00
Mark Andrews 3f0de196f7 report subtest number 2016-06-17 10:50:33 +10:00
Mark Andrews 3635d8f910 do not overflow exit status. [RT #42643] 2016-06-14 13:48:39 +10:00
Evan Hunt 5ecfee97ba [master] copyrights 2016-04-14 19:12:13 -07:00
Evan Hunt 3cd204c4a4 [master] fixed revoked key regression
4436.	[bug]		Fixed a regression introduced in change #4337 which
			caused signed domains with revoked KSKs to fail
			validation. [RT #42147]
2016-04-14 18:52:52 -07:00
Jeremy C. Reed 81780ffd74 use -r $RANDFILE for test using keygen
stops hang
this is for ticket #41898
2016-03-11 09:27:15 -05:00
Tinderbox User 4a7004f3ce update copyright notice / whitespace 2016-03-10 23:45:16 +00:00
Mark Andrews 7c52595464 4331. [func] When loading managed signed zones detect if the
RRSIG's inception time is in the future and regenerate
                        the RRSIG immediately. [RT #41808]
2016-03-10 17:01:08 +11:00
Mark Andrews 08913705e9 specify what to copy
(cherry picked from commit 88624c9c32)
2016-02-05 13:54:47 +11:00
Tinderbox User b7f3400f3b update copyright notice / whitespace 2016-01-28 23:45:29 +00:00
Mark Andrews 832ab79d1f 4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
from the zone's apex. [RT #41483]
2016-01-28 15:42:34 +11:00
Evan Hunt 6b8519147a [master] NTAs did not survive reoad/reconfig
4251.	[bug]		NTAs were deleted when the server was reconfigured
			or reloaded. [RT #41058]
2015-11-04 10:34:28 -08:00
Witold Krecicki f85deb5154 log expired NTA at startup 2015-06-08 13:57:24 +02:00
Tinderbox User 431e5c81db update copyright notice / whitespace 2015-05-28 23:45:24 +00:00
Mark Andrews 598b502695 4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
key as per RFC 7344, Section 4.1. [RT #37215]
2015-05-27 15:25:45 +10:00
Tinderbox User 4e92a74ec4 update copyright notice / whitespace 2015-05-05 23:45:24 +00:00
Evan Hunt d4ed608e0c [master] Allow some tests to run partially if Net::DNS is unavailable 2015-05-05 08:33:09 -07:00
Mark Andrews 2e0d8d74d7 handle daylight savings changes 2015-03-04 15:51:31 +11:00
Mark Andrews 2b4860c4dc rt38571: handle Time::Piece not being supported by perl 2015-02-18 23:49:33 +11:00
Tinderbox User d481ce8bba update copyright notice / whitespace 2015-02-09 23:45:20 +00:00