]> git.ipfire.org Git - thirdparty/bind9.git/commit
Convert kasp multi-signer tests to pytest
authorMatthijs Mekking <matthijs@isc.org>
Tue, 18 Mar 2025 07:41:02 +0000 (08:41 +0100)
committerMatthijs Mekking <matthijs@isc.org>
Mon, 2 Jun 2025 09:21:06 +0000 (09:21 +0000)
commit8ee02190a5f924517b4350e1f985e5df773420fb
tree05f281a850c0870ddb6ff9648089db7cd460b65c
parent4d08ec50d14deccb8d09eba8b56d7b7396144aac
Convert kasp multi-signer tests to pytest

Move the multi-signer test scenarios to the rollover directory and
convert tests to pytest.

- If the KeyProperties set the "legacy" to True, don't set expected
  key times, nor check them. Also, when a matching key is found, set
  key.external to True.
- External keys don't show up in the 'rndc dnssec -status' output so
  skip them in the 'check_dnssecstatus' function. External keys never
  sign RRsets, so also skip those keys in the '_check_signatures'
  function.
- Key properties strings now can set expected key tag ranges, and if
  KeyProperties have tag ranges set, they are checked.
bin/tests/system/isctest/kasp.py
bin/tests/system/kasp/ns3/named-fips.conf.in
bin/tests/system/kasp/ns3/policies/kasp-fips.conf.in
bin/tests/system/kasp/ns3/setup.sh
bin/tests/system/kasp/tests.sh
bin/tests/system/rollover/ns3/kasp.conf.j2
bin/tests/system/rollover/ns3/named.conf.j2
bin/tests/system/rollover/ns3/setup.sh
bin/tests/system/rollover/tests_rollover.py