bind9

Files

T

Evan Hunt 762dc8b871 [master] rndc managed-keys destroy

4750.	[func]		"rndc managed-keys destroy" shuts down RFC 5011 key
			maintenance and deletes the managed-keys database.
			If followed by "rndc reconfig" or a server restart,
			key maintenance is reinitialized from scratch.
			This is primarily intended for testing. [RT #32456]

2017-10-03 01:05:46 -07:00

ns1

update copyright notice / whitespace

2017-09-01 23:45:56 +00:00

ns2

4477. [test] Fix mkeys test timing issues. [RT #41028 ]

2016-10-05 13:42:53 +02:00

ns3

4477. [test] Fix mkeys test timing issues. [RT #41028 ]

2016-10-05 13:42:53 +02:00

clean.sh

…

prereq.sh

…

README

…

setup.sh

[master] update copyrights that had been missed recently

2017-04-23 17:06:00 -07:00

tests.sh

[master] rndc managed-keys destroy

2017-10-03 01:05:46 -07:00

README

Copyright (C) 2015, 2016  Internet Systems Consortium, Inc. ("ISC")

This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, You can obtain one at http://mozilla.org/MPL/2.0/.

This is for testing managed-keys, in particular with problems
with RFC 5011 Automated Updates of DNSSEC Trust Anchors.

ns1 is the root server that offers new KSKs and hosts one record for
testing. The TTL for the zone's records is 2 seconds.

ns2 is a validator uses managed-keys.
"named -T rfc5011holddown=4" switch is used so it will attempt to do
the automated updates frequently.

ns3 is a validator with a broken key in managed-keys.

Tests TODO:

- initial working KSK

TODO: test using delv with new trusted key too

- introduce a REVOKE bit

- later remove a signature

- corrupt a signature

TODO: also same things with dlv auto updates of trust anchor