168dba163c
The old name "common" clashes with the convention of system test directory naming. It appears as a system test directory, but it only contains helper files. To reduce confusion and to allow automatic detection of issues with possibly missing test files, rename the helper directory to "_common". The leading underscore indicates the directory is different and the its name can no longer be confused with regular system test directories.
61 lines
1.8 KiB
Plaintext
61 lines
1.8 KiB
Plaintext
/*
|
|
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* SPDX-License-Identifier: MPL-2.0
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
*
|
|
* See the COPYRIGHT file distributed with this work for additional
|
|
* information regarding copyright ownership.
|
|
*/
|
|
|
|
/*
|
|
* NS7
|
|
*
|
|
* NOTE: This named instance is used to reproduce a scenario which involves a
|
|
* number of functions getting called in a very specific order which results in
|
|
* an infinite loop while iterating over NSEC3 red-black tree. Ensuring this
|
|
* happens requires carefully setting the number of signing keys, NSEC3
|
|
* parameters (number of iterations and salt value), zone data and named
|
|
* configuration. Changing any of these and/or influencing this instance's
|
|
* behavior (e.g. by sending extra queries to it) might render this test moot
|
|
* as it will no longer be able to reproduce the exact scenario it attempts to.
|
|
*
|
|
* Given the above, please do not use this instance for any other test than the
|
|
* one it was meant for.
|
|
*/
|
|
|
|
include "../../_common/rndc.key";
|
|
|
|
controls {
|
|
inet 10.53.0.7 port @CONTROLPORT@ allow { any; } keys { rndc_key; };
|
|
};
|
|
|
|
options {
|
|
query-source address 10.53.0.7;
|
|
notify-source 10.53.0.7;
|
|
transfer-source 10.53.0.7;
|
|
port @PORT@;
|
|
pid-file "named.pid";
|
|
listen-on { 10.53.0.7; };
|
|
listen-on-v6 { none; };
|
|
recursion no;
|
|
notify no;
|
|
try-tcp-refresh no;
|
|
allow-new-zones yes;
|
|
sig-signing-nodes 100;
|
|
sig-signing-signatures 10;
|
|
};
|
|
|
|
dnssec-policy "nsec3" {
|
|
keys {
|
|
ksk key-directory lifetime unlimited algorithm RSASHA256 2048;
|
|
zsk key-directory lifetime unlimited algorithm RSASHA256 2048;
|
|
zsk key-directory lifetime unlimited algorithm RSASHA256 4096;
|
|
};
|
|
|
|
nsec3param iterations 0 optout no salt-length 0;
|
|
};
|