ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
27,156 Commits 589 Branches 805 Tags
af021f136e277a4eec00a1a31d159a17f3e3cd85
Commit Graph
363 Commits
Author SHA1 Message Date
Evan Hunt e5acb97c8a add properly-formatted -D options to named.args files 
this prevents servers that use arguments specified in named.args
from appearing different in 'ps' output from servers run with arguments
from start.pl

(cherry picked from commit 175d6e9bfb)
 2019-01-28 21:21:33 -08:00
Evan Hunt be8dfc7421 fix dnssec test 
- work around CR issues
- use UTC for time comparisons
- use $DIFF instead of cmp
 2019-01-25 15:38:50 -08:00
Evan Hunt e947cdfd27 use $DIFF instead of diff 2019-01-25 15:38:48 -08:00
Evan Hunt 3b367ef3cb b/t/s/dnssec/tests.sh: Cleanup showprivate() function 
(cherry picked from commit b241dc58ec)
 2019-01-14 13:23:36 -08:00
Evan Hunt d653989a1e fix testing errors 
- the checkprivate function in the dnssec test set ret=0, erasing
  results from previous tests and making the test appear to have passed
  when it shouldn't have
- checkprivate needed a delay loop to ensure there was time for all
  private signing records to be updated before the test

(cherry picked from commit 82e83d5dc7)
 2019-01-13 21:34:35 -05:00
Matthijs Mekking bb2c242c39 Remove dig_with_opts 2018-12-20 15:23:07 +01:00
Matthijs MekkingandOndřej Surý 0e9a8da68c Replace DSA with Reserved algorithm 
(cherry picked from commit 17cdde1e56)
 2018-12-20 04:50:08 -05:00
Matthijs MekkingandOndřej Surý 9f81119c02 Add dnssec-signzone tests with unsupported alg 
dnssec-signzone should sign a zonefile that contains a DNSKEY record
with an unsupported algorithm.

(cherry picked from commit 6d976b37c1)
(cherry picked from commit 8619318a1e6207e487438a93bd7a620967091347)
 2018-12-20 04:50:08 -05:00
Mark Andrews 637e3c4c4b check that DNSKEY and other occluded data are excluded from the delegating bitmap 
(cherry picked from commit 7e4b82103b)
 2018-12-14 14:44:18 +11:00
Mark Andrews ccac107ded verify that auto-dnssec maintain generates and signs NSEC3 records with DNAME at the apex 
(cherry picked from commit 6b470bbf42)
 2018-12-10 17:48:17 +11:00
Mark Andrews 4731ee6ae1 verify that dnssec-signzone generates NSEC3 records with DNAME at the apex 
(cherry picked from commit 06e218c421)
 2018-12-10 17:29:29 +11:00
Ondřej Surý 0c384a76cd Make calls to the start.pl always use the test name instead of '.' 
(cherry picked from commit 16b95157e8)
(cherry picked from commit e8f38da2df)
 2018-12-03 20:39:13 +01:00
Evan Hunt b407e80d00 better system test entropy 
- use genrandom to get 4k of data instead of 800 bytes
- set this value as RANDOMSIZE in conf.sh

(cherry picked from commit 19aaecafeb)
 2018-11-16 23:54:39 -08:00
Evan Hunt 731f27e77e set inactive date in keygen instead of settime 2018-11-16 11:56:19 -08:00
Evan Hunt a37f21fdcf increase the entropy allocated by genrandom 2018-11-16 11:56:19 -08:00
Michał Kępień a23e9821d6 Replace duplicated code snippet with calls to helper functions 
Reduce code duplication by replacing a code snippet repeated throughout
system tests using "trusted-keys" and/or "managed-keys" configuration
sections with calls to keyfile_to_{managed,trusted}_keys() helper
functions.

(cherry picked from commit dce66f7635)
 2018-06-13 08:08:25 +02:00
Evan Hunt 7a00ce2e77 ensure we try to validate glue records so RRSIG TTLs will be capped 2018-06-08 11:41:48 -07:00
Mukund SivaramanandMark Andrews 3d62545657 Add system test 
(cherry picked from commit 303391ea41)
 2018-06-04 01:12:18 -04:00
Ondřej Surý 188526f41c Remove $Id markers, Principal Author and Reviewed tags from the full source tree 
(cherry picked from commit 55a10b7acd)
 2018-05-11 14:25:15 +02:00
Ondřej Surý 0cbad1b3fc Update tests to not use '>&-' that closes file descriptor, but instead use correct redirection to '>/dev/null' 
(cherry picked from commit 3f66b8acb0)
 2018-05-11 13:11:20 +02:00
Evan Hunt 09cf48603a update file headers 2018-03-15 18:38:48 -07:00
Evan Hunt 8b205089b7 update file headers to remove copyright years 2018-03-14 16:40:20 -07:00
Evan Hunt 442c1530a3 final cleanup 
- update Kyuafiles to match Atffiles
- copyrights
- CHANGES note

(cherry picked from commit 86e00cbb71)
(cherry picked from commit 80834b5b90)
 2018-03-09 16:17:56 -08:00
Evan Hunt dbb225d83e migrate tests from bin/tests/dnssec-signzone to bin/tests/system/dnssec 
- added tests to the dnssec system test that duplicate the ones
  from bin/tests/dnssec-signzone
- changed cleanall.sh so it doesn't automatically remove all
  key files, because there are now some of those that are part of the
  distribution

(cherry picked from commit ccfe778c01)
(cherry picked from commit d8f8eee381)
 2018-03-09 15:30:27 -08:00
Evan Hunt d57e8f6df3 clean up test output 
- removed a few remaing places where output wasn't being passed
  through echo_i or cat_i
- added a "digcomp" function to conf.sh.in to send digcomp.pl output
  through cat_i and return the correct exit value
- set SYSTESTDIR when calling echo_i from nsX directories, so that
  the test name will always be printed correctly
- fixed a test name typo in conf.sh.in

(cherry picked from commit 0e52fbd0b3)
 2018-02-27 09:52:07 -08:00
Evan Hunt 854f7846d8 tidying up after backport 2018-02-23 13:28:47 -08:00
Evan Hunt 167fa161d1 parallelize most system tests 
(cherry picked from commit c032c54dda)
(cherry picked from commit 2b81f322cb)
 2018-02-23 13:23:31 -08:00
Mark Andrews 41aef8f068 read dig.out.ns3.test$n rather than dig.out.ns2.test$n 
(cherry picked from commit 80739779fc)
 2017-10-25 15:03:18 +11:00
Tinderbox User 8ed107eab4 update copyright notice / whitespace 2017-10-24 23:48:58 +00:00
Mark Andrews ba93bc80a7 4783. [test] dnssec: 'check that NOTIFY is sent at the end of 
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
 2017-10-25 09:21:52 +11:00
Mark Andrews 5f10315828 4782. [test] dnssec: 'checking positive and negative validation 
with negative trust anchors' required more time to
                        complete on some machines. [RT #46386]

(cherry picked from commit 6b8e4d6e69)
 2017-10-25 09:13:42 +11:00
Mark Andrews 1c8aa38b53 4759. [func] Add logging channel "trust-anchor-telementry" to 
record trust-anchor-telementry in incoming requests.
                            Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
                            are logged.  [RT #46124]

    (cherry picked from commit b41c1aacbc)
 2017-10-06 13:53:50 +11:00
Tinderbox User 66e599a004 update copyright notice / whitespace 2017-07-28 23:47:00 +00:00
Michał Kępień 11c4e6d8fc [v9_11] Clarify error message printed by dnssec-dsfromkey 
4663.	[cleanup]	Clarify error message printed by dnssec-dsfromkey.
			[RT #21731]

(cherry picked from commit c150f68609)
 2017-07-28 10:29:54 +02:00
Mark Andrews 250d96dd31 loop waiting for ns4/managed-keys.bind to be written 
(cherry picked from commit f7a22ae512)
 2017-07-04 15:53:45 +10:00
Evan Hunt 1ca2cf0243 [v9_11] update copyrights that had been missed recently 2017-04-23 17:07:59 -07:00
Tinderbox User d0c3b241e5 update copyright notice / whitespace 2017-04-21 23:46:11 +00:00
Mukund Sivaraman fec9247b8f Validate glue before adding it to the additional section (#45062) 
(cherry picked from commit b0dbcba2d2)
 2017-04-21 15:46:07 +05:30
Tinderbox User f6b9092741 update copyright notice / whitespace 2017-01-12 23:46:13 +00:00
Mark Andrews 0de20c29f3 remove false positives due to bad grep [RT #44178] 
(cherry picked from commit 0c43d50368)
 2017-01-12 13:59:24 +11:00
Witold Krecicki cc51cd2d20 4487. [test] Make system tests work on Windows. [RT #42931] 2016-10-19 17:21:13 +02:00
Evan Hunt 67a42ef55c [v9_11] reset ret between NTA tests 
(cherry picked from commit af05768c0e)
 2016-10-05 21:07:18 -07:00
Mark Andrews b7161f9898 4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries 
to provide feedback to the trust-anchor administrators
                        about how key rollovers are progressing as per
                        draft-ietf-dnsop-edns-key-tag-02.  This can be
                        disabled using 'trust-anchor-telemetry no;'.
                        [RT #40583]

(cherry picked from commit f20179857a)
 2016-07-22 20:03:06 +10:00
Mark Andrews 0c27b3fe77 4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 14:56:38 +10:00
Mark Andrews c1bf332c7c silence rm error message 2016-06-20 14:33:33 +10:00
Mark Andrews eff62988e6 checking that default nta's were lifted due to lifetime were not robust 2016-06-20 14:29:11 +10:00
Mark Andrews 3f0de196f7 report subtest number 2016-06-17 10:50:33 +10:00
Mark Andrews 3635d8f910 do not overflow exit status. [RT #42643] 2016-06-14 13:48:39 +10:00
Evan Hunt 5ecfee97ba [master] copyrights 2016-04-14 19:12:13 -07:00
Evan Hunt 3cd204c4a4 [master] fixed revoked key regression 
4436.	[bug]		Fixed a regression introduced in change #4337 which
			caused signed domains with revoked KSKs to fail
			validation. [RT #42147]
 2016-04-14 18:52:52 -07:00