]> git.ipfire.org Git - thirdparty/bind9.git/commit
Test manual-mode with KSK/ZSK algorithm rollover
authorMatthijs Mekking <matthijs@isc.org>
Wed, 23 Jul 2025 08:34:07 +0000 (10:34 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Thu, 21 Aug 2025 14:09:55 +0000 (16:09 +0200)
commit6b5c69d4313d7567c83327e07bdc79e06b95f2ff
treec6e101770310cbb374e08c67027d946cd2861a58
parentc000cf70cbf26bbe86c762bd94aad7e0ecb8f564
Test manual-mode with KSK/ZSK algorithm rollover

Similar to the previous commit that tests CSK algorithm rollover.

Parametrize each test case and in case of manual-mode, execute
additional checks. First a keymgr run should not change the existing
key state (with exceptions of timing events such as moving from
RUMOURED to OMNIPRESENT, and from UNRETENTIVE to HIDDEN). Appropriate
messages must be logged.

After enforcing the next step with 'rndc dnssec -step', the key state
should be the same as if the step were to be taken automatically.
bin/tests/system/rollover-algo-ksk-zsk/tests_rollover_algo_ksk_zsk_reconfig.py