ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
Files
314b90dfddec4a507a28772e7e43566b89fc5c5b
bind9/bin/tests/system/checkconf
T
History
Matthijs Mekking a50d707fdc Introduce dnssec-policy configuration 
This commit introduces the initial `dnssec-policy` configuration
statement. It has an initial set of options to deal with signature
and key maintenance.

Add some checks to ensure that dnssec-policy is configured at the
right locations, and that policies referenced to in zone statements
actually exist.

Add some checks that when a user adds the new `dnssec-policy`
configuration, it will no longer contain existing DNSSEC
configuration options.  Specifically: `inline-signing`,
`auto-dnssec`, `dnssec-dnskey-kskonly`, `dnssec-secure-to-insecure`,
`update-check-ksk`, `dnssec-update-mode`, `dnskey-sig-validity`,
and `sig-validity-interval`.

Test a good kasp configuration, and some bad configurations.
2019-11-06 22:31:44 +01:00
..
altdb.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
altdlz.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
ancient.conf
Ancient named.conf options are now a fatal configuration error
2019-01-31 11:54:26 +01:00
bad-acl.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-also-notify.conf
Remove $Id markers, Principal Author and Reviewed tags from the full source tree
2018-05-11 13:17:46 +02:00
bad-catz-zone.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-dnskey-validity.conf
new option "dnskey-sig-validity"
2018-04-20 12:12:08 -07:00
bad-dnssec.conf
Remove $Id markers, Principal Author and Reviewed tags from the full source tree
2018-05-11 13:17:46 +02:00
bad-duplicate-key.conf
fail if using both dnssec-keys and managed-keys in the same config
2019-06-05 07:49:57 -07:00
bad-duplicate-root-key.conf
"dnssec-keys" is now a synonym for "managed-keys"
2019-06-05 07:49:57 -07:00
bad-geoip-use-ecs.conf
remove the experimental authoritative ECS support from named
2018-05-25 08:21:25 -07:00
bad-glue-cache-bogus.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-hint.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-in-view-dup.conf
add test configuration where a in-view zone collides with a existing zone
2018-03-08 11:50:09 +11:00
bad-inline-slave.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-interface-interval.conf
Allow TTL values when configuring TTLs and time intervals.
2018-04-13 11:46:06 -07:00
bad-ipv4-prefix2.conf
Detect partial prefixes / incomplete IPv4 address in acls.
2019-10-14 00:28:07 +11:00
bad-ipv4-prefix-dotted1.conf
Detect partial prefixes / incomplete IPv4 address in acls.
2019-10-14 00:28:07 +11:00
bad-ipv4-prefix-dotted2.conf
Detect partial prefixes / incomplete IPv4 address in acls.
2019-10-14 00:28:07 +11:00
bad-kasp1.conf
Introduce dnssec-policy configuration
2019-11-06 22:31:44 +01:00
bad-kasp2.conf
Introduce dnssec-policy configuration
2019-11-06 22:31:44 +01:00
bad-kasp3.conf
Introduce dnssec-policy configuration
2019-11-06 22:31:44 +01:00
bad-kasp4.conf
Introduce dnssec-policy configuration
2019-11-06 22:31:44 +01:00
bad-keep-response-order.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-lifetime.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-lmdb-mapsize-bogus.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-lmdb-mapsize-toolarge.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-lmdb-mapsize-toosmall.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-lmdb-mapsize-unlimited.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-many.conf
Remove genrandom command and all usage of specific random files throughout the system test suite
2018-05-16 09:54:35 +02:00
bad-master-request-ixfr.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-maxcachettl.conf
Allow TTL values when configuring TTLs and time intervals.
2018-04-13 11:46:06 -07:00
bad-maxncachettl-1.conf
Fix the max-ncache-ttl tests
2018-11-14 18:24:53 +01:00
bad-maxncachettl-2.conf
Fix the max-ncache-ttl tests
2018-11-14 18:24:53 +01:00
bad-maxncachettl-3.conf
Fix the max-ncache-ttl tests
2018-11-14 18:24:53 +01:00
bad-maxncachettl-4.conf
Fix the max-ncache-ttl tests
2018-11-14 18:24:53 +01:00
bad-maxttlmap.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-mincachettl.conf
Add min-{n,}cache-ttl tests for checkconf
2018-11-14 18:24:53 +01:00
bad-minncachettl.conf
Add min-{n,}cache-ttl tests for checkconf
2018-11-14 18:24:53 +01:00
bad-mirror-allow-recursion-none.conf
Prevent mirror zones from being used when recursion is disabled
2018-10-24 20:32:55 +02:00
bad-mirror-explicit-notify-yes.conf
Define a default master server list for the root zone
2018-10-24 20:32:55 +02:00
bad-mirror-non-root-zone-without-masters.conf
Define a default master server list for the root zone
2018-10-24 20:32:55 +02:00
bad-mirror-recursion-no.conf
Define a default master server list for the root zone
2018-10-24 20:32:55 +02:00
bad-mirror-zonename.conf
named-checkconf triggered a assertion when a mirror zone had a bad name
2018-12-20 13:19:18 +11:00
bad-noddns.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-options-also-notify.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-printtime.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-acl.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-all-per-second.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-errors-per-second.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-ipv4-prefix-length.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-ipv6-prefix-length.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-max-table-size.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-nodata-per-second.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-nxdomains-per-second.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-qps-scale.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-referrals-per-second.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-responses-per-second.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-slip.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-rate-limit-window.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-root-mixed-key.conf
fail if using both dnssec-keys and managed-keys in the same config
2019-06-05 07:49:57 -07:00
bad-rpz-too-many-zones.conf
Check for more than 64 policy zones
2018-03-18 10:08:22 +00:00
bad-rpz-ttl.conf
Allow TTL values when configuring TTLs and time intervals.
2018-04-13 11:46:06 -07:00
bad-rpz-update.conf
Allow TTL values when configuring TTLs and time intervals.
2018-04-13 11:46:06 -07:00
bad-rpz-zone.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-sharedwritable1.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-sharedwritable2.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-sharedzone1.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-sharedzone2.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-sharedzone3.conf
construct a symtab of valid in-view targets then check that the target exists
2018-06-26 08:23:51 -07:00
bad-sig-validity.conf
new option "dnskey-sig-validity"
2018-04-20 12:12:08 -07:00
bad-stub-masters-dialup.conf
pass the correct object to cfg_obj_log
2018-12-14 16:29:02 +11:00
bad-tsig.conf
Remove $Id markers, Principal Author and Reviewed tags from the full source tree
2018-05-11 13:17:46 +02:00
bad-update-policy1.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy2.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy3.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy4.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy5.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy6.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy7.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy8.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy9.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
bad-update-policy10.conf
add more missing name in update rule checks
2018-09-10 09:55:24 +10:00
bad-update-policy11.conf
add more missing name in update rule checks
2018-09-10 09:55:24 +10:00
bad-update-policy12.conf
add more missing name in update rule checks
2018-09-10 09:55:24 +10:00
bad-update-policy13.conf
add more missing name in update rule checks
2018-09-10 09:55:24 +10:00
bad-update-policy14.conf
add more missing name in update rule checks
2018-09-10 09:55:24 +10:00
bad-update-policy15.conf
add more missing name in update rule checks
2018-09-10 09:55:24 +10:00
bad-validation-auto-key.conf
fail if using both dnssec-keys and managed-keys in the same config
2019-06-05 07:49:57 -07:00
bad-view-also-notify.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-dup-records-fail.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-dup-records.db
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-mixed-keys.conf
fail if using both dnssec-keys and managed-keys in the same config
2019-06-05 07:49:57 -07:00
check-mx-cname-fail.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-mx-cname.db
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-mx-fail.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-mx.db
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-names-fail.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-names.db
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-root-ksk-2010.conf
"dnssec-keys" is now a synonym for "managed-keys"
2019-06-05 07:49:57 -07:00
check-root-ksk-2017.conf
"dnssec-keys" is now a synonym for "managed-keys"
2019-06-05 07:49:57 -07:00
check-root-ksk-both.conf
"dnssec-keys" is now a synonym for "managed-keys"
2019-06-05 07:49:57 -07:00
check-root-static-key.conf
"dnssec-keys" is now a synonym for "managed-keys"
2019-06-05 07:49:57 -07:00
check-root-trusted-key.conf
update key checks in lib/bind9/check.c and fix checkconf test
2019-06-05 07:49:57 -07:00
check-srv-cname-fail.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
check-srv-cname.db
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
clean.sh
Introduce dnssec-policy configuration
2019-11-06 22:31:44 +01:00
deprecated.conf
mark 'dnssec-lookaside' obsolete in parser
2019-08-09 09:18:02 -07:00
dlz-bad.conf
Remove $Id markers, Principal Author and Reviewed tags from the full source tree
2018-05-11 13:17:46 +02:00
dnssec.1
remove "dnssec-enable" from all system tests
2019-03-14 23:30:13 -07:00
dnssec.2
remove "dnssec-enable" from all system tests
2019-03-14 23:30:13 -07:00
dnssec.3
Deprecate dnssec-lookaside option
2019-07-04 14:14:28 +02:00
good-acl.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-allow-update-forwarding-view.conf
don't fail when allow-update{,-forwarding} is used globally
2019-03-21 21:17:49 -07:00
good-allow-update-forwarding.conf
don't fail when allow-update{,-forwarding} is used globally
2019-03-21 21:17:49 -07:00
good-allow-update-view.conf
don't fail when allow-update{,-forwarding} is used globally
2019-03-21 21:17:49 -07:00
good-allow-update.conf
don't fail when allow-update{,-forwarding} is used globally
2019-03-21 21:17:49 -07:00
good-class.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-dnskey-validity-3660.conf
add named-checkconf tests for dnskey-sig-validity at range limits
2019-10-24 23:16:21 +11:00
good-dnskey-validity-zero.conf
add named-checkconf tests for dnskey-sig-validity at range limits
2019-10-24 23:16:21 +11:00
good-dup-managed-key.conf
"dnssec-keys" is now a synonym for "managed-keys"
2019-06-05 07:49:57 -07:00
good-dup-trusted-key.conf
reject the use of trusted-keys and managed-keys for the same name
2019-05-07 22:02:37 -07:00
good-glue-cache.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-interface-interval.conf
Allow TTL values when configuring TTLs and time intervals.
2018-04-13 11:46:06 -07:00
good-kasp.conf
Introduce dnssec-policy configuration
2019-11-06 22:31:44 +01:00
good-lmdb-mapsize-largest.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-lmdb-mapsize-smallest.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-maxcachettl.conf
Allow TTL values when configuring TTLs and time intervals.
2018-04-13 11:46:06 -07:00
good-maxncachettl.conf
Fix the max-ncache-ttl tests
2018-11-14 18:24:53 +01:00
good-mincachettl.conf
Add min-{n,}cache-ttl tests for checkconf
2018-11-14 18:24:53 +01:00
good-minncachettl.conf
Add min-{n,}cache-ttl tests for checkconf
2018-11-14 18:24:53 +01:00
good-mirror-inherited-notify-yes.conf
Define a default master server list for the root zone
2018-10-24 20:32:55 +02:00
good-mirror-root-zone-without-masters.conf
Define a default master server list for the root zone
2018-10-24 20:32:55 +02:00
good-nested.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-options-also-notify.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-printtime.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-response-dot.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-rpz-ttl.conf
Allow TTL values when configuring TTLs and time intervals.
2018-04-13 11:46:06 -07:00
good-rpz-update.conf
Allow TTL values when configuring TTLs and time intervals.
2018-04-13 11:46:06 -07:00
good-update-policy1.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy2.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy3.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy4.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy5.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy6.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy7.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy8.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy9.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy10.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy11.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-update-policy12.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good-view-also-notify.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
good.conf
Deprecate dnssec-lookaside option
2019-07-04 14:14:28 +02:00
good.zonelist
[master] allow primary/secondary as synonyms for master/slave
2017-12-15 01:47:05 -08:00
hint-nofile.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
in-view-good.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
inline-bad.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
inline-good.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
inline-no.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
kasp-and-other-dnssec-options.conf
Introduce dnssec-policy configuration
2019-11-06 22:31:44 +01:00
max-cache-size-good.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
max-ttl.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
maxttl-bad.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
maxttl-bad.db
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
maxttl.db
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
notify.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
portrange-good.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
range.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
setup.sh
Ensure all system tests run clean.sh from setup.sh
2019-03-04 16:26:06 +01:00
shared.example.db
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
tests.sh
Introduce dnssec-policy configuration
2019-11-06 22:31:44 +01:00
view-class-any1.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
view-class-any2.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
view-class-in1.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
view-class-in2.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
warn-dlv-auto.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
warn-dlv-dlv.example.com.conf
mark 'dnssec-lookaside' obsolete in parser
2019-08-09 09:18:02 -07:00
warn-dlv-dlv.isc.org.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
warn-geoip-use-ecs.conf
remove the experimental authoritative ECS support from named
2018-05-25 08:21:25 -07:00
warn-keydir.conf
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00