Matthijs MekkingandNicki Křížek
2f5c670ce9
kasp-max-types-per-name (named2.conf.in): An unsigned zone with RR type count on a name right below the configured limit. Then sign the zone using KASP. Adding a RRSIG would push it over the RR type limit per name. Signing should fail, but the server should not crash, nor end up in infinite resign-attempt loop. kasp-max-records-per-type-dnskey (named1.conf.in): Test with low max-record-per-rrset limit and a DNSSEC policy requiring more than the limit. Signing should fail. kasp-max-types-per-name (named1.conf.in): Each RRSIG(covered type) is counted as an individual RR type. Test the corner case where a signed zone, which is just below the limit-1, adds a new type - doing so would trigger signing for the new type and thus increase the number of "types" by 2, pushing it over the limit again. (cherry picked from commit 14e5230f897a178221b606c242b8fbcb357704aa)
29 lines
659 B
Plaintext
29 lines
659 B
Plaintext
; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
;
|
|
; SPDX-License-Identifier: MPL-2.0
|
|
;
|
|
; This Source Code Form is subject to the terms of the Mozilla Public
|
|
; License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
; file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
;
|
|
; See the COPYRIGHT file distributed with this work for additional
|
|
; information regarding copyright ownership.
|
|
|
|
$TTL 1D
|
|
|
|
@ IN SOA ns hostmaster (
|
|
1
|
|
3600
|
|
1800
|
|
1814400
|
|
3
|
|
)
|
|
NS ns
|
|
ns A 10.53.0.1
|
|
mx MX 10 mail
|
|
a A 10.53.0.1
|
|
aaaa AAAA 2001:db8::53
|
|
cname CNAME cname-target
|
|
dname DNAME dname-target
|
|
txt TXT "this is text"
|