8b0f7f1b8d
When inline signing is enabled for a zone without creating signing keys for it, changes subsequently applied to the raw zone will not be reflected in the secure zone due to the dns_update_signaturesinc() call inside receive_secure_serial() failing. Given that an inline zone will be served (without any signatures) even with no associated signing keys being present, keep applying raw zone deltas to the secure zone until keys become available in an attempt to follow the principle of least astonishment. (cherry picked from commit6acf326969) (cherry picked from commit8a58a60772) (cherry picked from commitfcbdeed802)
60 lines
2.0 KiB
Bash
60 lines
2.0 KiB
Bash
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# Permission to use, copy, modify, and/or distribute this software for any
|
|
# purpose with or without fee is hereby granted, provided that the above
|
|
# copyright notice and this permission notice appear in all copies.
|
|
#
|
|
# THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
|
|
# REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
|
|
# AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
|
|
# INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
|
|
# LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
|
|
# OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
|
|
# PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
SYSTEMTESTTOP=..
|
|
. $SYSTEMTESTTOP/conf.sh
|
|
|
|
$SHELL clean.sh
|
|
|
|
test -r $RANDFILE || $GENRANDOM 400 $RANDFILE
|
|
|
|
cp ns1/root.db.in ns1/root.db
|
|
rm -f ns1/root.db.signed
|
|
|
|
touch ns2/trusted.conf
|
|
cp ns2/bits.db.in ns2/bits.db
|
|
cp ns2/bits.db.in ns2/inactiveksk.db
|
|
cp ns2/bits.db.in ns2/inactivezsk.db
|
|
cp ns2/bits.db.in ns2/nokeys.db
|
|
cp ns2/bits.db.in ns2/removedkeys-secondary.db
|
|
cp ns2/bits.db.in ns2/retransfer.db
|
|
cp ns2/bits.db.in ns2/retransfer3.db
|
|
rm -f ns2/bits.db.jnl
|
|
|
|
cp ns3/master.db.in ns3/master.db
|
|
cp ns3/master.db.in ns3/dynamic.db
|
|
cp ns3/master.db.in ns3/updated.db
|
|
cp ns3/master.db.in ns3/expired.db
|
|
cp ns3/master.db.in ns3/nsec3.db
|
|
cp ns3/master.db.in ns3/externalkey.db
|
|
cp ns3/master.db.in ns3/removedkeys-primary.db
|
|
|
|
mkdir ns3/removedkeys
|
|
|
|
touch ns4/trusted.conf
|
|
cp ns4/noixfr.db.in ns4/noixfr.db
|
|
rm -f ns4/noixfr.db.jnl
|
|
|
|
copy_setports ns1/named.conf.in ns1/named.conf
|
|
copy_setports ns2/named.conf.in ns2/named.conf
|
|
copy_setports ns3/named.conf.in ns3/named.conf
|
|
copy_setports ns4/named.conf.in ns4/named.conf
|
|
copy_setports ns5/named.conf.pre ns5/named.conf
|
|
copy_setports ns6/named.conf.in ns6/named.conf
|
|
copy_setports ns7/named.conf.in ns7/named.conf
|
|
|
|
(cd ns3; $SHELL -e sign.sh)
|
|
(cd ns1; $SHELL -e sign.sh)
|
|
(cd ns7; $SHELL -e sign.sh)
|