From: Mark Andrews Date: Thu, 31 Oct 2024 21:42:41 +0000 (+1100) Subject: Add missing $FEATURETEST --have-fips-dh X-Git-Tag: v9.21.3~48^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4f7e3e29a7907dada00ed8a4002eecb669214646;p=thirdparty%2Fbind9.git Add missing $FEATURETEST --have-fips-dh Notify over TLS only works if FIPS DH is supported. Skip the system tests parts that depend on it. --- diff --git a/bin/tests/system/notify/tests.sh b/bin/tests/system/notify/tests.sh index 22a50eeb42a..7cb1266e8f1 100644 --- a/bin/tests/system/notify/tests.sh +++ b/bin/tests/system/notify/tests.sh @@ -119,17 +119,19 @@ grep 'notify from 10.53.0.2#[0-9][0-9]*: serial 2$' ns3/named.run >/dev/null || grep 'refused notify from non-primary: fd92:7065:b8e:ffff::2#[0-9][0-9]*$' ns3/named.run >/dev/null || ret=1 test_end -test_start "checking notify over TLS successful" -grep "zone tls-x1/IN: notify to 10.53.0.2#${TLSPORT} successful" ns3/named.run >/dev/null || ret=1 -grep "zone tls-x2/IN: notify to 10.53.0.2#${EXTRAPORT1} successful" ns3/named.run >/dev/null || ret=1 -grep "zone tls-x3/IN: notify to 10.53.0.2#${EXTRAPORT1} successful" ns3/named.run >/dev/null || ret=1 -grep "zone tls-x5/IN: notify to 10.53.0.2#${EXTRAPORT3} successful" ns3/named.run >/dev/null || ret=1 -test_end - -test_start "checking notify over TLS failed" -grep "zone tls-x4/IN: notify to 10.53.0.2#${EXTRAPORT1} failed: TLS peer certificate verification failed" ns3/named.run >/dev/null || ret=1 -grep "zone tls-x6/IN: notify to 10.53.0.2#${EXTRAPORT4} failed: TLS peer certificate verification failed" ns3/named.run >/dev/null || ret=1 -test_end +if $FEATURETEST --have-fips-dh; then + test_start "checking notify over TLS successful" + grep "zone tls-x1/IN: notify to 10.53.0.2#${TLSPORT} successful" ns3/named.run >/dev/null || ret=1 + grep "zone tls-x2/IN: notify to 10.53.0.2#${EXTRAPORT1} successful" ns3/named.run >/dev/null || ret=1 + grep "zone tls-x3/IN: notify to 10.53.0.2#${EXTRAPORT1} successful" ns3/named.run >/dev/null || ret=1 + grep "zone tls-x5/IN: notify to 10.53.0.2#${EXTRAPORT3} successful" ns3/named.run >/dev/null || ret=1 + test_end + + test_start "checking notify over TLS failed" + grep "zone tls-x4/IN: notify to 10.53.0.2#${EXTRAPORT1} failed: TLS peer certificate verification failed" ns3/named.run >/dev/null || ret=1 + grep "zone tls-x6/IN: notify to 10.53.0.2#${EXTRAPORT4} failed: TLS peer certificate verification failed" ns3/named.run >/dev/null || ret=1 + test_end +fi test_start "checking example2 loaded" dig_plus_opts a.example. @10.53.0.2 a >dig.out.ns2.test$n || ret=1