Disable DNSSEC validation instead of enabling it with empty TAs in tests

There are many system tests where we set `dnssec-validation yes;` only
to also set `trust-anchors { };` which effectively disables the
validation.

This commit replaces this convoluted setup with just
`dnssec-validation no;`.

diff --git a/bin/tests/system/additional/ns3/named.conf.in b/bin/tests/system/additional/ns3/named.conf.in
index f47a3806289fd386e9a55e23d88ca15d9b1c7e24..96c5badefac109a71f76f152aa5d62ccc2110325 100644 (file)
--- a/bin/tests/system/additional/ns3/named.conf.in
+++ b/bin/tests/system/additional/ns3/named.conf.in
@@ -22,11 +22,10 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        minimal-responses no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cacheclean/ns2/named.conf.j2 b/bin/tests/system/cacheclean/ns2/named.conf.j2
index 418209cf04dd6a393dd041ec0612609101c0713f..c7613457d6749dd9add172fa29b47f6742404164 100644 (file)
--- a/bin/tests/system/cacheclean/ns2/named.conf.j2
+++ b/bin/tests/system/cacheclean/ns2/named.conf.j2
@@ -22,10 +22,9 @@ options {
        notify yes;
        disable-empty-zone 127.IN-ADDR.ARPA;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/chain/ns1/named.conf.in b/bin/tests/system/chain/ns1/named.conf.in
index 95ccf892063cb2efe83e002d7e72aa07ac77c2d6..9eb96b61c45484f156fac9311a1fc3473d961d98 100644 (file)
--- a/bin/tests/system/chain/ns1/named.conf.in
+++ b/bin/tests/system/chain/ns1/named.conf.in
@@ -20,10 +20,9 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
 };
 
-trust-anchors { };
 
 zone "." { type primary; file "root.db"; };

diff --git a/bin/tests/system/chain/ns7/named.conf.in b/bin/tests/system/chain/ns7/named.conf.in
index 751521ba0cbcc2f91c4beb9dda3ac49185ff0805..1d5a49ad80a497f00ef5bde155b0dc3f525e3ac0 100644 (file)
--- a/bin/tests/system/chain/ns7/named.conf.in
+++ b/bin/tests/system/chain/ns7/named.conf.in
@@ -22,7 +22,7 @@ options {
        listen-on-v6 { fd92:7065:b8e:ffff::7; };
        recursion yes;
        allow-recursion { any; };
-       dnssec-validation yes;
+       dnssec-validation no;
        deny-answer-aliases {
                "example";
        } except-from {
@@ -31,7 +31,6 @@ options {
        qname-minimization disabled;  // Regression test for GL #4652
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/checknames/ns2/named.conf.j2 b/bin/tests/system/checknames/ns2/named.conf.j2
index 105a88dd5f24f1d7eca10cc9a0ca3ac1c43e94f3..3fff4fc06ebd9158782d2ddde538c21a4187570a 100644 (file)
--- a/bin/tests/system/checknames/ns2/named.conf.j2
+++ b/bin/tests/system/checknames/ns2/named.conf.j2
@@ -20,12 +20,11 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        check-names response warn;
        notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/checknames/ns3/named.conf.j2 b/bin/tests/system/checknames/ns3/named.conf.j2
index 487cecca282e60ccc4b8836367afec63f17ae61b..738a06bf3adbc3641c44000e3e95117183b2358e 100644 (file)
--- a/bin/tests/system/checknames/ns3/named.conf.j2
+++ b/bin/tests/system/checknames/ns3/named.conf.j2
@@ -20,12 +20,11 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        check-names response fail;
        notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/checknames/ns4/named.conf.j2 b/bin/tests/system/checknames/ns4/named.conf.j2
index 7b121fe634059299a6782d6952b6f2f20b4bda94..15c2db829b2469e9596e5db8616e780592c1ac1c 100644 (file)
--- a/bin/tests/system/checknames/ns4/named.conf.j2
+++ b/bin/tests/system/checknames/ns4/named.conf.j2
@@ -21,13 +21,12 @@ options {
        listen-on-v6 { none; };
        allow-transfer { any; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        check-names primary ignore;
        check-names secondary ignore;
        notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/checknames/ns5/named.conf.j2 b/bin/tests/system/checknames/ns5/named.conf.j2
index 62c870bf7c187d15700b4ac03d3daafb1a9dc2c6..489e3a5e1c8141bc461ccc8d91f891bad1f2120d 100644 (file)
--- a/bin/tests/system/checknames/ns5/named.conf.j2
+++ b/bin/tests/system/checknames/ns5/named.conf.j2
@@ -21,13 +21,12 @@ options {
        listen-on-v6 { none; };
        allow-transfer { any; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        check-names master ignore;
        check-names slave ignore;
        notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cipher-suites/ns1/named.conf.in b/bin/tests/system/cipher-suites/ns1/named.conf.in
index 8de44d1cb48e07f500a3169bb8d902abe9bc1a28..312f48908b9a29819c2987d40715570e043f47b3 100644 (file)
--- a/bin/tests/system/cipher-suites/ns1/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns1/named.conf.in
@@ -63,13 +63,12 @@ options {
        notify explicit;
        also-notify { 10.53.0.2 port @PORT@; };
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        transfers-in 100;
        transfers-out 100;
 };
 
-trust-anchors { };
 
 zone "." {
        type primary;

diff --git a/bin/tests/system/cipher-suites/ns2/named.conf.in b/bin/tests/system/cipher-suites/ns2/named.conf.in
index c81429c90258f43ae72a387c79c299a4479fb12e..61a396575190cf5548aea49733dccbca4dd9cb74 100644 (file)
--- a/bin/tests/system/cipher-suites/ns2/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns2/named.conf.in
@@ -36,10 +36,9 @@ options {
        notify no;
        ixfr-from-differences yes;
        check-integrity no;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cipher-suites/ns3/named.conf.in b/bin/tests/system/cipher-suites/ns3/named.conf.in
index ab642f92cef5784ceab6978dddd7f29151d4aaf1..4e368a7dd517d09fd3b7d6c8deff71e288ae1950 100644 (file)
--- a/bin/tests/system/cipher-suites/ns3/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns3/named.conf.in
@@ -36,10 +36,9 @@ options {
        notify no;
        ixfr-from-differences yes;
        check-integrity no;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cipher-suites/ns4/named.conf.in b/bin/tests/system/cipher-suites/ns4/named.conf.in
index a690cf5c783ab486f9d6ad8494a7aaa91284aa11..e60be884432e592c384f743f85532de7a8d84dd5 100644 (file)
--- a/bin/tests/system/cipher-suites/ns4/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns4/named.conf.in
@@ -36,10 +36,9 @@ options {
        notify no;
        ixfr-from-differences yes;
        check-integrity no;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cipher-suites/ns5/named.conf.in b/bin/tests/system/cipher-suites/ns5/named.conf.in
index c36b374a19ec5cf3825697acfa8516a6e85a74e5..fcbc2afec177afe8a766131e58ae88389c98c569 100644 (file)
--- a/bin/tests/system/cipher-suites/ns5/named.conf.in
+++ b/bin/tests/system/cipher-suites/ns5/named.conf.in
@@ -36,10 +36,9 @@ options {
        notify no;
        ixfr-from-differences yes;
        check-integrity no;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cookie/ns1/named.conf.j2 b/bin/tests/system/cookie/ns1/named.conf.j2
index 0bd93c93de15a809b6250d6714ba2c3d60fb1155..6d42d94f586bbdba0b201e8bac6b4447e8986a2c 100644 (file)
--- a/bin/tests/system/cookie/ns1/named.conf.j2
+++ b/bin/tests/system/cookie/ns1/named.conf.j2
@@ -38,7 +38,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
                 except-from { "example.org"; };
        deny-answer-aliases { "example.org"; }
@@ -49,7 +49,6 @@ options {
        nocookie-udp-size 512;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cookie/ns3/named.conf.j2 b/bin/tests/system/cookie/ns3/named.conf.j2
index cbebd0743317fe051c9ac301454fbd9e9c63b502..7f8c32536de1e63c27e46260c5002c40677b1674 100644 (file)
--- a/bin/tests/system/cookie/ns3/named.conf.j2
+++ b/bin/tests/system/cookie/ns3/named.conf.j2
@@ -29,7 +29,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
                 except-from { "example.org"; };
        deny-answer-aliases { "example.org"; }
@@ -41,7 +41,6 @@ options {
        require-server-cookie yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cookie/ns4/named.conf.j2 b/bin/tests/system/cookie/ns4/named.conf.j2
index 592be13ed072e6a2fcba01340f16729b4fd88894..06da09e6e214450facc4ecd84113a930232b35b1 100644 (file)
--- a/bin/tests/system/cookie/ns4/named.conf.j2
+++ b/bin/tests/system/cookie/ns4/named.conf.j2
@@ -29,13 +29,12 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        cookie-algorithm siphash24;
        cookie-secret "569d36a6cc27d6bf55502183302ba352";
        require-server-cookie yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cookie/ns5/named.conf.j2 b/bin/tests/system/cookie/ns5/named.conf.j2
index 2f51e1be944145c33763e604d35f94b9356537c8..535e8ef62f5a4bf52d2a0063c2cee6567965406b 100644 (file)
--- a/bin/tests/system/cookie/ns5/named.conf.j2
+++ b/bin/tests/system/cookie/ns5/named.conf.j2
@@ -29,14 +29,13 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        cookie-algorithm siphash24;
        cookie-secret "569d36a6cc27d6bf55502183302ba352";
        cookie-secret "6b300e27a0db46d4b046e4189790fa7d";
        require-server-cookie yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cookie/ns6/named.conf.j2 b/bin/tests/system/cookie/ns6/named.conf.j2
index 56c5e048579f9595abe3a0f5f50dcd37d31f9ad8..ca4abec7b8639e2a0059443b26f82136d9fd5d49 100644 (file)
--- a/bin/tests/system/cookie/ns6/named.conf.j2
+++ b/bin/tests/system/cookie/ns6/named.conf.j2
@@ -29,13 +29,12 @@ options {
        listen-on { 10.53.0.6; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        cookie-algorithm siphash24;
        cookie-secret "6b300e27a0db46d4b046e4189790fa7d";
        require-server-cookie yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/cookie/ns8/named.conf.j2 b/bin/tests/system/cookie/ns8/named.conf.j2
index 36f052b8e40d2d9a4b567f677f8c4db1faf3f040..540bc07af6b0e0839a375b3deb23956d3d62edf6 100644 (file)
--- a/bin/tests/system/cookie/ns8/named.conf.j2
+++ b/bin/tests/system/cookie/ns8/named.conf.j2
@@ -28,12 +28,11 @@ options {
        pid-file "named.pid";
        listen-on { 10.53.0.8; };
        listen-on-v6 { none; };
-       dnssec-validation yes;
+       dnssec-validation no;
        rate-limit {};
        require-server-cookie yes;
 };
 
-trust-anchors { };
 
 server 10.53.0.7 { require-cookie yes; };
 

diff --git a/bin/tests/system/database/ns1/named.conf.j2 b/bin/tests/system/database/ns1/named.conf.j2
index 059a15563dbbd3297c2b0ea31ce5762b22c2f32d..9a84d79551da8c1c904e174b14b5eaf0f2d6fdac 100644 (file)
--- a/bin/tests/system/database/ns1/named.conf.j2
+++ b/bin/tests/system/database/ns1/named.conf.j2
@@ -32,10 +32,9 @@ options {
        listen-on-v6 { none; };
        recursion no;
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "database" {
        type primary;

diff --git a/bin/tests/system/dns64/ns1/named.conf1.in b/bin/tests/system/dns64/ns1/named.conf1.in
index bc6c2d23661a446da8b2c974e43afd4a2b3166a1..8a9aee2058038684e1d6d7de74fe2ba019460d01 100644 (file)
--- a/bin/tests/system/dns64/ns1/named.conf1.in
+++ b/bin/tests/system/dns64/ns1/named.conf1.in
@@ -31,7 +31,7 @@ options {
        listen-on-v6 { none; };
        allow-recursion { 10.53.0.1; };
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 
        dns64 2001:bbbb::/96 {
                clients { any; };
@@ -42,8 +42,6 @@ options {
        };
 };
 
-trust-anchors { };
-
 zone "." {
        type primary;
        file "root.db";

diff --git a/bin/tests/system/dns64/ns1/named.conf2.in b/bin/tests/system/dns64/ns1/named.conf2.in
index d7a6d1f80a490abba4a4d0b638db4ede097ec73b..422f2840a8fe71854fb7bbf1d90401177f2f23cc 100644 (file)
--- a/bin/tests/system/dns64/ns1/named.conf2.in
+++ b/bin/tests/system/dns64/ns1/named.conf2.in
@@ -31,7 +31,7 @@ options {
        listen-on-v6 { none; };
        allow-recursion { 10.53.0.1; };
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 
        dns64 2001:bbbb::/96 {
                clients { any; };
@@ -45,8 +45,6 @@ options {
        };
 };
 
-trust-anchors { };
-
 zone "." {
        type primary;
        file "root.db";

diff --git a/bin/tests/system/dns64/ns1/named.conf3.in b/bin/tests/system/dns64/ns1/named.conf3.in
index 393e623b366f8c70e5a317907ecca0296abec3ae..94a7f3f5640ca038ba803e103ba8f27b9ff80bce 100644 (file)
--- a/bin/tests/system/dns64/ns1/named.conf3.in
+++ b/bin/tests/system/dns64/ns1/named.conf3.in
@@ -31,11 +31,9 @@ options {
        listen-on-v6 { none; };
        allow-recursion { 10.53.0.1; };
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
-
 zone "." {
        type primary;
        file "root.db";

diff --git a/bin/tests/system/dns64/ns2/named.conf.in b/bin/tests/system/dns64/ns2/named.conf.in
index 49299aaf997e7b8b85ee4bf8dc791cc7c0b41250..203c18b82c5749233add02badb1154ce53767cca 100644 (file)
--- a/bin/tests/system/dns64/ns2/named.conf.in
+++ b/bin/tests/system/dns64/ns2/named.conf.in
@@ -25,7 +25,7 @@ options {
        listen-on-v6 { none; };
        recursion yes;
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 
        dns64 2001:aaaa::/96 {
                clients { 10.53.0.2; };
@@ -60,7 +60,6 @@ options {
        response-policy { zone "rpz"; };
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/dns64/ns3/named.conf.in b/bin/tests/system/dns64/ns3/named.conf.in
index a86686bdb0e86b59c62b3c4a7341eabd5ad8bb5c..1de08a56d5bbbf2ff49c364ca10c7e10fb8def73 100644 (file)
--- a/bin/tests/system/dns64/ns3/named.conf.in
+++ b/bin/tests/system/dns64/ns3/named.conf.in
@@ -29,7 +29,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { fd92:7065:b8e:ffff::3; };
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        allow-recursion { any; };
        resolver-use-dns64 yes;
 
@@ -40,7 +40,6 @@ options {
        };
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/dns64/ns4/named.conf.in b/bin/tests/system/dns64/ns4/named.conf.in
index 485cdc82f92a908e64e3e354d66983dbbd3b5357..2cb233686392a5cc3372ae589be9862611291c12 100644 (file)
--- a/bin/tests/system/dns64/ns4/named.conf.in
+++ b/bin/tests/system/dns64/ns4/named.conf.in
@@ -26,11 +26,10 @@ options {
        listen-on port @PORT@ { 10.53.0.4; };   // for start.pl
        listen-on-v6 { fd92:7065:b8e:fffe::10.53.0.4; };
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        recursion no;
 };
 
-trust-anchors { };
 
 zone "." {
        type master;

diff --git a/bin/tests/system/dnstap/ns1/named.conf.j2 b/bin/tests/system/dnstap/ns1/named.conf.j2
index daaf88731a3b350ef61feab1965a8a266820ab1f..fa96be906f919308289c29071af894cc0e92311f 100644 (file)
--- a/bin/tests/system/dnstap/ns1/named.conf.j2
+++ b/bin/tests/system/dnstap/ns1/named.conf.j2
@@ -28,11 +28,10 @@ options {
        dnstap { all; };
        send-cookie no;
        require-server-cookie no;
-       dnssec-validation yes;
+       dnssec-validation no;
        qname-minimization disabled;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/dnstap/ns2/named.conf.j2 b/bin/tests/system/dnstap/ns2/named.conf.j2
index 12ae86322d6a4d91ea8d33878563f5b38b538382..cc3e33a0cc181baa3ae3eb73b40fbd32649eb8f4 100644 (file)
--- a/bin/tests/system/dnstap/ns2/named.conf.j2
+++ b/bin/tests/system/dnstap/ns2/named.conf.j2
@@ -28,11 +28,10 @@ options {
        dnstap { all; };
        send-cookie no;
        require-server-cookie no;
-       dnssec-validation yes;
+       dnssec-validation no;
        qname-minimization disabled;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/dnstap/ns3/named.conf.j2 b/bin/tests/system/dnstap/ns3/named.conf.j2
index d443c3818ab8f4767eb6a0da91a3d9e8f4e55c03..23b6614e039f1cefb181ce65d89db0d308817d07 100644 (file)
--- a/bin/tests/system/dnstap/ns3/named.conf.j2
+++ b/bin/tests/system/dnstap/ns3/named.conf.j2
@@ -29,11 +29,10 @@ options {
        send-cookie no;
        require-server-cookie no;
        minimal-responses no;
-       dnssec-validation yes;
+       dnssec-validation no;
        qname-minimization disabled;
 };
 
-trust-anchors { };
 
 server 10.53.0.1 { tcp-only yes; };
 

diff --git a/bin/tests/system/dnstap/ns4/named.conf.j2 b/bin/tests/system/dnstap/ns4/named.conf.j2
index 18c4da1100bcfceaa92fd6c3c8eb9e8f4567dcda..6607dc4928712b88b064ed587d8180e5c95f1d51 100644 (file)
--- a/bin/tests/system/dnstap/ns4/named.conf.j2
+++ b/bin/tests/system/dnstap/ns4/named.conf.j2
@@ -28,11 +28,10 @@ options {
        dnstap { all; };
        send-cookie no;
        require-server-cookie no;
-       dnssec-validation yes;
+       dnssec-validation no;
        qname-minimization disabled;
 };
 
-trust-anchors { };
 
 server 10.53.0.1 { tcp-only yes; };
 

diff --git a/bin/tests/system/doth/ns1/named.conf.in b/bin/tests/system/doth/ns1/named.conf.in
index df9a25daa7ed445e2b4f3475148884b81692e8f7..2d697ad130fb410118aa72d6545e7dc66ea0c02b 100644 (file)
--- a/bin/tests/system/doth/ns1/named.conf.in
+++ b/bin/tests/system/doth/ns1/named.conf.in
@@ -94,14 +94,13 @@ options {
        notify explicit;
        also-notify { 10.53.0.2 port @PORT@; };
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        transfers-in 100;
        transfers-out 100;
        max-records-per-type 0;
 };
 
-trust-anchors { };
 
 zone "." {
        type primary;

diff --git a/bin/tests/system/doth/ns2/named.conf.in b/bin/tests/system/doth/ns2/named.conf.in
index a7b09611d1c2cfcd2c4fdbd8638bec6af61ece53..57bc6c9f82e29feb7590416fd325abeb7a91a3d2 100644 (file)
--- a/bin/tests/system/doth/ns2/named.conf.in
+++ b/bin/tests/system/doth/ns2/named.conf.in
@@ -51,13 +51,12 @@ options {
        notify no;
        ixfr-from-differences yes;
        check-integrity no;
-       dnssec-validation yes;
+       dnssec-validation no;
        max-records-per-type 0;
        transfers-in 100;
        transfers-out 100;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/doth/ns3/named.conf.in b/bin/tests/system/doth/ns3/named.conf.in
index daf31646430db8af987878f17d7bd73a7f9b5ff3..0dfa27429e65e25899799f7af1f1319f21b216c8 100644 (file)
--- a/bin/tests/system/doth/ns3/named.conf.in
+++ b/bin/tests/system/doth/ns3/named.conf.in
@@ -43,11 +43,10 @@ options {
        notify no;
        ixfr-from-differences yes;
        check-integrity no;
-       dnssec-validation yes;
+       dnssec-validation no;
        max-records-per-type 0;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/doth/ns4/named.conf.in b/bin/tests/system/doth/ns4/named.conf.in
index d637a9c9ed4e74f3a5fae125ca9b667f32db53ee..feff457aaec103d074d5d464d852ae576684dd7e 100644 (file)
--- a/bin/tests/system/doth/ns4/named.conf.in
+++ b/bin/tests/system/doth/ns4/named.conf.in
@@ -51,11 +51,10 @@ options {
        notify no;
        ixfr-from-differences yes;
        check-integrity no;
-       dnssec-validation yes;
+       dnssec-validation no;
        max-records-per-type 0;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/doth/ns5/named.conf.in b/bin/tests/system/doth/ns5/named.conf.in
index 7aa3757cdb0ea692f1623d6379209930bc5f591e..7390944a43c90bf6cfce7769b1e083f96f16ebf9 100644 (file)
--- a/bin/tests/system/doth/ns5/named.conf.in
+++ b/bin/tests/system/doth/ns5/named.conf.in
@@ -39,11 +39,10 @@ options {
        notify no;
        ixfr-from-differences yes;
        check-integrity no;
-       dnssec-validation yes;
+       dnssec-validation no;
        max-records-per-type 0;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/fetchlimit/ns3/named1.conf.in b/bin/tests/system/fetchlimit/ns3/named1.conf.in
index da1661d920f54c3bc1e7545be4a19b13e456c5bf..335a4ecfd97d3923c0e76a47fd321c8b690ec04e 100644 (file)
--- a/bin/tests/system/fetchlimit/ns3/named1.conf.in
+++ b/bin/tests/system/fetchlimit/ns3/named1.conf.in
@@ -23,12 +23,11 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        fetches-per-server 400;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
        edns no;

diff --git a/bin/tests/system/fetchlimit/ns3/named2.conf.in b/bin/tests/system/fetchlimit/ns3/named2.conf.in
index d354dfd39fb9fd4e935c181ba7bd8e97efc51dcc..573d5fbc607379ceb98152b0a92a8d02d504c714 100644 (file)
--- a/bin/tests/system/fetchlimit/ns3/named2.conf.in
+++ b/bin/tests/system/fetchlimit/ns3/named2.conf.in
@@ -21,12 +21,11 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        fetches-per-zone 40;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
        edns no;

diff --git a/bin/tests/system/fetchlimit/ns3/named3.conf.in b/bin/tests/system/fetchlimit/ns3/named3.conf.in
index db32409ed30947d6576cc7c2460bd2af7e76184f..63e6e5fa787ff178a44459614be527a35d6d9416 100644 (file)
--- a/bin/tests/system/fetchlimit/ns3/named3.conf.in
+++ b/bin/tests/system/fetchlimit/ns3/named3.conf.in
@@ -21,12 +21,11 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        recursive-clients 400;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
        edns no;

diff --git a/bin/tests/system/fetchlimit/ns5/named1.conf.in b/bin/tests/system/fetchlimit/ns5/named1.conf.in
index f26b8a19413b05b5798f4b8978ef14ae6886c853..18e8bb55fa27b086719d44354b60f2fa3adb7d31 100644 (file)
--- a/bin/tests/system/fetchlimit/ns5/named1.conf.in
+++ b/bin/tests/system/fetchlimit/ns5/named1.conf.in
@@ -21,13 +21,12 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        clients-per-query 5;
        max-clients-per-query 10;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
        edns no;

diff --git a/bin/tests/system/fetchlimit/ns5/named2.conf.in b/bin/tests/system/fetchlimit/ns5/named2.conf.in
index 32b281d79ae467f7be167d389d1305d567c05ea0..8b64bde59e7662e63dba369acfd5b836b710a1c9 100644 (file)
--- a/bin/tests/system/fetchlimit/ns5/named2.conf.in
+++ b/bin/tests/system/fetchlimit/ns5/named2.conf.in
@@ -21,7 +21,7 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        stale-answer-enable yes;
        stale-cache-enable yes;
@@ -30,7 +30,6 @@ options {
        max-clients-per-query 10;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
        edns no;

diff --git a/bin/tests/system/fetchlimit/ns5/named3.conf.in b/bin/tests/system/fetchlimit/ns5/named3.conf.in
index 7fb1bafd80bccda52623567b24aee83dc338d82a..2b68d1baeffcd30210e194cb50295f454a66a036 100644 (file)
--- a/bin/tests/system/fetchlimit/ns5/named3.conf.in
+++ b/bin/tests/system/fetchlimit/ns5/named3.conf.in
@@ -21,7 +21,7 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        stale-answer-enable yes;
        stale-cache-enable yes;
@@ -31,7 +31,6 @@ options {
        max-clients-per-query 5;
 };
 
-trust-anchors { };
 
 server 10.53.0.4 {
        edns no;

diff --git a/bin/tests/system/filter-aaaa/ns1/named1.conf.in b/bin/tests/system/filter-aaaa/ns1/named1.conf.in
index 2098420352feceb55c45ad75ef73baf85a42843e..3a7338c58020e36f4ab2111cc58aef6af908faab 100644 (file)
--- a/bin/tests/system/filter-aaaa/ns1/named1.conf.in
+++ b/bin/tests/system/filter-aaaa/ns1/named1.conf.in
@@ -20,12 +20,11 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { fd92:7065:b8e:ffff::1; };
        recursion no;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        minimal-responses no;
 };
 
-trust-anchors { };
 
 acl filterees { 10.53.0.1; };
 

diff --git a/bin/tests/system/filter-aaaa/ns1/named2.conf.in b/bin/tests/system/filter-aaaa/ns1/named2.conf.in
index 87910becd54776e66ef86558a74d7e3ffd182aeb..6b421159ca5b920cbebed40795d30553bc7b2e51 100644 (file)
--- a/bin/tests/system/filter-aaaa/ns1/named2.conf.in
+++ b/bin/tests/system/filter-aaaa/ns1/named2.conf.in
@@ -20,12 +20,11 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { fd92:7065:b8e:ffff::1; };
        recursion no;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        minimal-responses no;
 };
 
-trust-anchors { };
 
 plugin query "@TOP_BUILDDIR@/filter-aaaa.so" {
        filter-aaaa-on-v6 yes;

diff --git a/bin/tests/system/forward/ns3/named1.conf.in b/bin/tests/system/forward/ns3/named1.conf.in
index 91de8f854035fac9129fccc48e59d52a8ca55091..e9830be4d73a1ffa803e0c92d6ceff5512216498 100644 (file)
--- a/bin/tests/system/forward/ns3/named1.conf.in
+++ b/bin/tests/system/forward/ns3/named1.conf.in
@@ -24,10 +24,9 @@ options {
        listen-on-v6 { fd92:7065:b8e:ffff::3; };
        forwarders { fd92:7065:b8e:ffff::2; };
        forward first;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/forward/ns4/named.conf.in b/bin/tests/system/forward/ns4/named.conf.in
index 5777c0de5168880d0810856e4ff87f5c36541fa2..cd7c5000d9a6e8f9b33f5304e24514b9ab21cd24 100644 (file)
--- a/bin/tests/system/forward/ns4/named.conf.in
+++ b/bin/tests/system/forward/ns4/named.conf.in
@@ -23,11 +23,10 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        minimal-responses yes;
 };
 
-trust-anchors { };
 
 statistics-channels { inet 10.53.0.4 port @EXTRAPORT1@ allow { localhost; }; };
 

diff --git a/bin/tests/system/forward/ns5/named.conf.in b/bin/tests/system/forward/ns5/named.conf.in
index 15b89dd0e7c3d14765737ff6fd7dc04ae1b6afed..b3e5e32b870d4ebb8cbfd53bba5cf01c68547e3f 100644 (file)
--- a/bin/tests/system/forward/ns5/named.conf.in
+++ b/bin/tests/system/forward/ns5/named.conf.in
@@ -22,10 +22,9 @@ options {
        forward only;
        forwarders { 10.53.0.4; };
        deny-answer-aliases { "rebind"; };
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/forward/ns7/named.conf.in b/bin/tests/system/forward/ns7/named.conf.in
index c6e55a89bc1dde3ef81aa349436399cd2090a2ec..592422f93dd48411e909e05a7612c69ea9a4e9fe 100644 (file)
--- a/bin/tests/system/forward/ns7/named.conf.in
+++ b/bin/tests/system/forward/ns7/named.conf.in
@@ -21,10 +21,9 @@ options {
        listen-on-v6 { none; };
        forwarders { 10.53.0.4; };
        forward first;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/forward/ns8/named.conf.in b/bin/tests/system/forward/ns8/named.conf.in
index 13c38594e090a70ba0f80714db1bbec71b95facf..cd106972b8860919a763cdd25bb6c348c9b39d04 100644 (file)
--- a/bin/tests/system/forward/ns8/named.conf.in
+++ b/bin/tests/system/forward/ns8/named.conf.in
@@ -21,10 +21,9 @@ options {
        listen-on-v6 { none; };
        forwarders { 10.53.0.2; };      // returns referrals
        forward first;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/hooks/ns1/named.conf.j2 b/bin/tests/system/hooks/ns1/named.conf.j2
index 5055a00c53e304df5234c100860d96d8768a47e9..500ede379d0b09b4f62e6f9cce7cc15415342620 100644 (file)
--- a/bin/tests/system/hooks/ns1/named.conf.j2
+++ b/bin/tests/system/hooks/ns1/named.conf.j2
@@ -19,12 +19,11 @@ options {
        pid-file "named.pid";
        listen-on { 10.53.0.1; };
        recursion no;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        minimal-responses no;
 };
 
-trust-anchors { };
 
 plugin query "@TOP_BUILDDIR@/testlib-driver-async.so";
 

diff --git a/bin/tests/system/legacy/ns1/named1.conf.in b/bin/tests/system/legacy/ns1/named1.conf.in
index bada7eb63076dd7f868b01143e22a70dc5005147..1441674f402aebeec34e7fa99a8fb286576e9151 100644 (file)
--- a/bin/tests/system/legacy/ns1/named1.conf.in
+++ b/bin/tests/system/legacy/ns1/named1.conf.in
@@ -20,10 +20,9 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/masterfile/ns2/named.conf.j2 b/bin/tests/system/masterfile/ns2/named.conf.j2
index 4e66b4f1c0a557ff11e96c94bf9b85d7cbf28fe0..aafa398ae0e1d8fa8e3acdda3bf68acecb95cec0 100644 (file)
--- a/bin/tests/system/masterfile/ns2/named.conf.j2
+++ b/bin/tests/system/masterfile/ns2/named.conf.j2
@@ -24,10 +24,9 @@ options {
        allow-transfer { any; };
        recursion no;
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/mkeys/ns1/named1.conf.in b/bin/tests/system/mkeys/ns1/named1.conf.in
index d45e98d768c91ca7ac4a7f64c9fb3fee1d6dd1a9..874fefebfd712e07a1d5778fa021848d5b14c577 100644 (file)
--- a/bin/tests/system/mkeys/ns1/named1.conf.in
+++ b/bin/tests/system/mkeys/ns1/named1.conf.in
@@ -28,11 +28,10 @@ options {
        listen-on-v6 { none; };
        recursion no;
        notify no;
-       dnssec-validation yes;
+       dnssec-validation no;
        allow-query { allowed; };
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/mkeys/ns1/named2.conf.in b/bin/tests/system/mkeys/ns1/named2.conf.in
index d45e98d768c91ca7ac4a7f64c9fb3fee1d6dd1a9..874fefebfd712e07a1d5778fa021848d5b14c577 100644 (file)
--- a/bin/tests/system/mkeys/ns1/named2.conf.in
+++ b/bin/tests/system/mkeys/ns1/named2.conf.in
@@ -28,11 +28,10 @@ options {
        listen-on-v6 { none; };
        recursion no;
        notify no;
-       dnssec-validation yes;
+       dnssec-validation no;
        allow-query { allowed; };
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/mkeys/ns1/named3.conf.in b/bin/tests/system/mkeys/ns1/named3.conf.in
index 12b8c71c54689e1f168d13624d44fd3f9a4b6ce4..3709b17a977b635d042d43f7b32a4ed75da138c8 100644 (file)
--- a/bin/tests/system/mkeys/ns1/named3.conf.in
+++ b/bin/tests/system/mkeys/ns1/named3.conf.in
@@ -23,10 +23,9 @@ options {
        listen-on-v6 { none; };
        recursion no;
        notify no;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/nsupdate/ns3/named.conf.in b/bin/tests/system/nsupdate/ns3/named.conf.in
index 180ce700bf593d526e6f96f43160623b7e3db905..9405b5b685414abe9929d896f14a681e7a14d0ce 100644 (file)
--- a/bin/tests/system/nsupdate/ns3/named.conf.in
+++ b/bin/tests/system/nsupdate/ns3/named.conf.in
@@ -23,10 +23,9 @@ options {
        listen-on-v6 { none; };
        recursion no;
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/pipelined/ns2/named.conf.j2 b/bin/tests/system/pipelined/ns2/named.conf.j2
index 8cb605c8bd93e633e760c9763785b4bacac4f246..16f8821e6ff5ccac4e719146ed2bbad13653f94e 100644 (file)
--- a/bin/tests/system/pipelined/ns2/named.conf.j2
+++ b/bin/tests/system/pipelined/ns2/named.conf.j2
@@ -20,11 +20,10 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/pipelined/ns3/named.conf.j2 b/bin/tests/system/pipelined/ns3/named.conf.j2
index 96a9a92b6cb44cf20bc68a026a2d9a965d915c28..3a4acb6090e527aa34f5328a5c94fe2f3db75b32 100644 (file)
--- a/bin/tests/system/pipelined/ns3/named.conf.j2
+++ b/bin/tests/system/pipelined/ns3/named.conf.j2
@@ -20,11 +20,10 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/pipelined/ns4/named.conf.j2 b/bin/tests/system/pipelined/ns4/named.conf.j2
index 3a187bf9350247ae4c333e3888bfbf88327168e8..666816e2b460acd8c34390ed62fa6648dcd0d620 100644 (file)
--- a/bin/tests/system/pipelined/ns4/named.conf.j2
+++ b/bin/tests/system/pipelined/ns4/named.conf.j2
@@ -21,11 +21,10 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/proxy/ns1/named.conf.in b/bin/tests/system/proxy/ns1/named.conf.in
index 4e2c620cd7a8ba6e3de01848487e87a24080df62..08999512aaf5ca99413545b65ec181da9bbb5cec 100644 (file)
--- a/bin/tests/system/proxy/ns1/named.conf.in
+++ b/bin/tests/system/proxy/ns1/named.conf.in
@@ -50,11 +50,10 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
 };
 
-trust-anchors { };
 
 zone "example0" {
        type primary;

diff --git a/bin/tests/system/proxy/ns3/named.conf.in b/bin/tests/system/proxy/ns3/named.conf.in
index db1c3467e60aa31ec53a8572cf69e736286ca5d4..821c313831be080b8dfa9c7007ab3d0988d558f8 100644 (file)
--- a/bin/tests/system/proxy/ns3/named.conf.in
+++ b/bin/tests/system/proxy/ns3/named.conf.in
@@ -45,11 +45,10 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/reclimit/ns3/named1.conf.in b/bin/tests/system/reclimit/ns3/named1.conf.in
index 295eae0864b61e9c6869e036ecf2c4075a1f9c90..9f43188ede1f5d0dfab015852c68fe3812ec7b8d 100644 (file)
--- a/bin/tests/system/reclimit/ns3/named1.conf.in
+++ b/bin/tests/system/reclimit/ns3/named1.conf.in
@@ -25,10 +25,9 @@ options {
        max-recursion-queries 50;
        max-recursion-depth 12;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/reclimit/ns3/named2.conf.in b/bin/tests/system/reclimit/ns3/named2.conf.in
index 974b24bcff0437937c5bc88f022dd75ccef1140f..00b48e87031953811abe541ed909af6147613986 100644 (file)
--- a/bin/tests/system/reclimit/ns3/named2.conf.in
+++ b/bin/tests/system/reclimit/ns3/named2.conf.in
@@ -24,10 +24,9 @@ options {
        qname-minimization disabled;
        max-recursion-depth 5;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/reclimit/ns3/named3.conf.in b/bin/tests/system/reclimit/ns3/named3.conf.in
index 38a77ae35c8b903c9ed4b33c33b7c8d74e52a7ea..1cfea507114f8b56a08b675042785675865bb31c 100644 (file)
--- a/bin/tests/system/reclimit/ns3/named3.conf.in
+++ b/bin/tests/system/reclimit/ns3/named3.conf.in
@@ -25,10 +25,9 @@ options {
        max-recursion-depth 100;
        max-recursion-queries 50;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/reclimit/ns3/named4.conf.in b/bin/tests/system/reclimit/ns3/named4.conf.in
index 5a0660766f6f11b89bb319a6b0228c062146bbc9..c1acbe46a29b7f3c4c5e2171486307583b58619c 100644 (file)
--- a/bin/tests/system/reclimit/ns3/named4.conf.in
+++ b/bin/tests/system/reclimit/ns3/named4.conf.in
@@ -25,10 +25,9 @@ options {
        max-recursion-depth 100;
        max-recursion-queries 40;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/reclimit/ns3/named5.conf.in b/bin/tests/system/reclimit/ns3/named5.conf.in
index 7cf0633a0025d984a26078724c4f417b8aed5e06..10d955a08ba9c2a4599eafc5369ebcb54a3fef36 100644 (file)
--- a/bin/tests/system/reclimit/ns3/named5.conf.in
+++ b/bin/tests/system/reclimit/ns3/named5.conf.in
@@ -24,12 +24,11 @@ options {
        qname-minimization disabled;
        max-recursion-depth 12;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        max-records-per-type 0;
        max-types-per-name 10;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/reclimit/ns3/named6.conf.in b/bin/tests/system/reclimit/ns3/named6.conf.in
index e1607e275d0070e901219017e0efac091f7eba4b..e86140eaf3ce4bdbfa415732e1060370db80bddb 100644 (file)
--- a/bin/tests/system/reclimit/ns3/named6.conf.in
+++ b/bin/tests/system/reclimit/ns3/named6.conf.in
@@ -24,12 +24,11 @@ options {
        qname-minimization disabled;
        max-recursion-depth 12;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        max-records-per-type 0;
        max-types-per-name 0;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/redirect/ns1/named.conf.in b/bin/tests/system/redirect/ns1/named.conf.in
index 3b4ccad02873114e9de3cdc3d5b5806e793b8e1f..9a046cc3ba1584175ba2e908483e6518a6758339 100644 (file)
--- a/bin/tests/system/redirect/ns1/named.conf.in
+++ b/bin/tests/system/redirect/ns1/named.conf.in
@@ -25,10 +25,9 @@ options {
        listen-on-v6 { none; };
        allow-recursion { 10.53.0.1; };
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type primary;

diff --git a/bin/tests/system/redirect/ns2/named.conf.in b/bin/tests/system/redirect/ns2/named.conf.in
index e07d75bdfe3a66ddef6fc1f67ccf29ca89333705..e744476535b61b3535a0a450720b13299bc3bcd1 100644 (file)
--- a/bin/tests/system/redirect/ns2/named.conf.in
+++ b/bin/tests/system/redirect/ns2/named.conf.in
@@ -27,11 +27,10 @@ options {
        listen-on-v6 { none; };
        recursion yes;
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/redirect/ns3/named.conf.in b/bin/tests/system/redirect/ns3/named.conf.in
index 51e590f630cfe41c6788609e4b0b01fa27a46c3b..3c96fbcce8f10e4fccbaa0628a1c1d860f623d8c 100644 (file)
--- a/bin/tests/system/redirect/ns3/named.conf.in
+++ b/bin/tests/system/redirect/ns3/named.conf.in
@@ -23,10 +23,9 @@ options {
        listen-on-v6 { none; };
        allow-recursion { 10.53.0.3; };
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {
        type primary;

diff --git a/bin/tests/system/redirect/ns4/named.conf.in b/bin/tests/system/redirect/ns4/named.conf.in
index 8937453ace8060de5bbe462e0ddede08eba62a2a..c143be4f193b8e50c1cc1ea1918f5fc4d01789b3 100644 (file)
--- a/bin/tests/system/redirect/ns4/named.conf.in
+++ b/bin/tests/system/redirect/ns4/named.conf.in
@@ -27,11 +27,10 @@ options {
        listen-on-v6 { none; };
        recursion yes;
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        nxdomain-redirect "redirect";
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/resolver/ns1/named.conf.in b/bin/tests/system/resolver/ns1/named.conf.in
index cb0cb13d1731dd046078aeea4ec094ddfab3ab33..2bb2ce1f86b219e78b9f4aa11e7a9ecadea6628e 100644 (file)
--- a/bin/tests/system/resolver/ns1/named.conf.in
+++ b/bin/tests/system/resolver/ns1/named.conf.in
@@ -20,7 +20,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
                 except-from { "example.org"; };
        deny-answer-aliases { "example.org"; }
@@ -34,7 +34,6 @@ options {
        request-zoneversion yes;
 };
 
-trust-anchors { };
 
 server 10.53.0.3 {
        tcp-only yes;

diff --git a/bin/tests/system/resolver/ns7/named1.conf.in b/bin/tests/system/resolver/ns7/named1.conf.in
index 170ce62716dc1d2a46658f7f14afd33c1047993c..b9938520d644aba31092822659dd8c263fb183c6 100644 (file)
--- a/bin/tests/system/resolver/ns7/named1.conf.in
+++ b/bin/tests/system/resolver/ns7/named1.conf.in
@@ -22,7 +22,7 @@ options {
        listen-on { 10.53.0.7; };
        listen-on-v6 { fd92:7065:b8e:ffff::7; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        empty-zones-enable yes;
        disable-empty-zone 20.172.in-addr.arpa;
        /*
@@ -34,7 +34,6 @@ options {
        edns-udp-size 4096;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/resolver/ns7/named2.conf.in b/bin/tests/system/resolver/ns7/named2.conf.in
index 170ce62716dc1d2a46658f7f14afd33c1047993c..b9938520d644aba31092822659dd8c263fb183c6 100644 (file)
--- a/bin/tests/system/resolver/ns7/named2.conf.in
+++ b/bin/tests/system/resolver/ns7/named2.conf.in
@@ -22,7 +22,7 @@ options {
        listen-on { 10.53.0.7; };
        listen-on-v6 { fd92:7065:b8e:ffff::7; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        empty-zones-enable yes;
        disable-empty-zone 20.172.in-addr.arpa;
        /*
@@ -34,7 +34,6 @@ options {
        edns-udp-size 4096;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/resolver/ns9/named.conf.in b/bin/tests/system/resolver/ns9/named.conf.in
index bfc979ca6fdc1ed31b08066b2753ebd5bd4946a9..c1e79febec337c872583853f8650fdb2f139f94e 100644 (file)
--- a/bin/tests/system/resolver/ns9/named.conf.in
+++ b/bin/tests/system/resolver/ns9/named.conf.in
@@ -20,12 +20,11 @@ options {
        listen-on-v6 { fd92:7065:b8e:ffff::9; };
        recursion yes;
        recursive-clients 0; // regression test for [GL #4987]
-       dnssec-validation yes;
+       dnssec-validation no;
        dual-stack-servers { fd92:7065:b8e:ffff::7; };
        qname-minimization off;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/rndc/ns4/named.conf.in b/bin/tests/system/rndc/ns4/named.conf.in
index 0ec0cc7bf8847cf3a8bf9a6d5bcdb9bf910a6087..bb1283b3622b494af6a38cb7708833b74d649e27 100644 (file)
--- a/bin/tests/system/rndc/ns4/named.conf.in
+++ b/bin/tests/system/rndc/ns4/named.conf.in
@@ -17,10 +17,9 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 view normal {
        match-clients { any; };

diff --git a/bin/tests/system/rpz/ns3/named.conf.in b/bin/tests/system/rpz/ns3/named.conf.in
index 1ee20ac0f74ee6b98cc7d46f103dd495a1b38f7a..672ba05f21a9f8cc2874011773a0819dc4afefcf 100644 (file)
--- a/bin/tests/system/rpz/ns3/named.conf.in
+++ b/bin/tests/system/rpz/ns3/named.conf.in
@@ -29,7 +29,7 @@ options {
        notify yes;
        minimal-responses no;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        min-refresh-time 1;
        min-retry-time 1;
 
@@ -64,7 +64,6 @@ options {
        notify-delay 0;
 };
 
-trust-anchors { };
 
 logging { category rpz { default_debug; }; };
 

diff --git a/bin/tests/system/rpz/ns8/named.conf.in b/bin/tests/system/rpz/ns8/named.conf.in
index 83c13efa66ee0a40610fd3221e3940612095b35d..ef6bc3f795c7004d929244909840c22ea0eeac57 100644 (file)
--- a/bin/tests/system/rpz/ns8/named.conf.in
+++ b/bin/tests/system/rpz/ns8/named.conf.in
@@ -29,7 +29,7 @@ options {
        notify yes;
        minimal-responses no;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 
        response-policy {
            zone "manual-update-rpz";
@@ -46,7 +46,6 @@ options {
        notify-delay 0;
 };
 
-trust-anchors { };
 
 logging { category rpz { default_debug; }; };
 

diff --git a/bin/tests/system/rpz/ns9/named.conf.in b/bin/tests/system/rpz/ns9/named.conf.in
index ca9a843a977b65fa499d417b977a1ef62829cc5a..b26129d1db01a0f1387c524fd9cf757a4ece7a25 100644 (file)
--- a/bin/tests/system/rpz/ns9/named.conf.in
+++ b/bin/tests/system/rpz/ns9/named.conf.in
@@ -29,7 +29,7 @@ options {
        notify yes;
        minimal-responses no;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        dns64-server "example.localdomain.";
        dns64 64:ff9b::/96 { };
        response-policy {
@@ -40,7 +40,6 @@ options {
        notify-delay 0;
 };
 
-trust-anchors { };
 
 logging { category rpz { default_debug; }; };
 

diff --git a/bin/tests/system/rpzrecurse/ns2/named.clientip.conf b/bin/tests/system/rpzrecurse/ns2/named.clientip.conf
index a9ec4ca0a5ad8242874748d534b1a1413642bb00..884d6d910567514bc058fe296ee407bd6ca2dbac 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.clientip.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.clientip.conf
@@ -33,5 +33,4 @@ view "recursive" {
     zone "clientip2" { type primary; file "db.clientip2"; };
 
     recursion yes;
-    dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf b/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf
index 39b67d8366cb29dadd72d8b7ff031b33d1895392..63fb6cfbecdb851e3990dcd2fe26b43e5959a167 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf
@@ -33,5 +33,4 @@ view "recursive" {
     zone "clientip21" { type primary; file "db.clientip21"; };
 
     recursion yes;
-    dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns2/named.conf.header.in b/bin/tests/system/rpzrecurse/ns2/named.conf.header.in
index 49aef0ee3eaee89d68f4b120b4ab2a78aaa8316e..f1d24c60d67bd1ee160dbedbb7b3876041c499ea 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.conf.header.in
+++ b/bin/tests/system/rpzrecurse/ns2/named.conf.header.in
@@ -23,11 +23,10 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        querylog yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/rpzrecurse/ns2/named.default.conf b/bin/tests/system/rpzrecurse/ns2/named.default.conf
index 929b88f2e50e15709a610bf30c0173622e021bf3..aafaf700f3840a7f740d6aa733e362caaf04aa45 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.default.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.default.conf
@@ -21,5 +21,4 @@ view "recursive" {
     };
 
     recursion yes;
-    dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns2/named.log.conf b/bin/tests/system/rpzrecurse/ns2/named.log.conf
index a19367e7097efe30a38dc157750d0a0958b18163..74e4175d1f29084b41c45805b318bda73519ff85 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.log.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.log.conf
@@ -35,5 +35,4 @@ view "recursive" {
     zone "log3" { type primary; file "db.log3"; };
 
     recursion yes;
-    dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns2/named.max.conf b/bin/tests/system/rpzrecurse/ns2/named.max.conf
index b07783b68d72843b7ad972b18643e167a408aabe..05cf15955967c6259516c86cc23c93901778196f 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.max.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.max.conf
@@ -157,5 +157,4 @@ view "recursive" {
     zone "max64" { type primary; file "db.max64.local"; };
 
     recursion yes;
-    dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf
index 23ef4eb7ec1972d3cd29a491ece0a462fba6291f..7dd8ce14e7a21175e42deea0ecf0cf97d0199b4e 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf
@@ -31,5 +31,4 @@ view "recursive" {
     zone "wildcard1" { type primary; file "db.wildcard1"; };
 
     recursion yes;
-    dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf
index b570b47929a813bc9d77af10fc2c975f4f0ee030..2eecf94c6f0ed54b6e77eb4423b16ff6282587ec 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf
@@ -33,5 +33,4 @@ view "recursive" {
     zone "wildcard2b" { type primary; file "db.wildcard2b"; };
 
     recursion yes;
-    dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf
index befb7d2f8a8c81719625c80e1719d546cfbe78cb..6554177e1a907f951f06f7ac894439ea2b9d104c 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf
@@ -31,5 +31,4 @@ view "recursive" {
     zone "wildcard3" { type primary; file "db.wildcard3"; };
 
     recursion yes;
-    dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf
index e18f4962eb1e570ef1986216697210e306bfca8b..22138563f6f6789fafcdf29804a882de4bdb71e3 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf
+++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf
@@ -33,5 +33,4 @@ view "recursive" {
        };
 
        recursion yes;
-       dnssec-validation yes;
 };

diff --git a/bin/tests/system/rpzrecurse/ns3/named1.conf.in b/bin/tests/system/rpzrecurse/ns3/named1.conf.in
index 4f0ae0ba68889782ccc72ce3376144be73ee3cf3..8c3ee26fc50e7d8aba387004d4b35f58c41e59ad 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns3/named1.conf.in
+++ b/bin/tests/system/rpzrecurse/ns3/named1.conf.in
@@ -27,14 +27,13 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        response-policy { zone "policy"; }
                qname-wait-recurse yes
                nsip-enable yes
                nsdname-enable yes;
 };
 
-trust-anchors { };
 
 zone "policy" { type primary; file "policy.db"; };
 

diff --git a/bin/tests/system/rpzrecurse/ns3/named2.conf.in b/bin/tests/system/rpzrecurse/ns3/named2.conf.in
index d05f37088250a523d6070ae8d3dd8376714f3ad3..7f47623f88206bbc8a553ec0fd65d4f2c2a14a28 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns3/named2.conf.in
+++ b/bin/tests/system/rpzrecurse/ns3/named2.conf.in
@@ -26,14 +26,13 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        response-policy { zone "policy"; } nsip-wait-recurse no
                qname-wait-recurse yes
                nsip-enable yes
                nsdname-enable yes;
 };
 
-trust-anchors { };
 
 zone "policy" { type primary; file "policy.db"; };
 

diff --git a/bin/tests/system/rpzrecurse/ns3/named3.conf.in b/bin/tests/system/rpzrecurse/ns3/named3.conf.in
index cce8200aa25b307d9f7a830dbc7c2dd39cf232dd..3366599ec1d13c129a9ec95d293987ca9be12e4f 100644 (file)
--- a/bin/tests/system/rpzrecurse/ns3/named3.conf.in
+++ b/bin/tests/system/rpzrecurse/ns3/named3.conf.in
@@ -26,12 +26,11 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        response-policy { zone "policy"; } nsdname-wait-recurse no
                nsdname-enable yes;
 };
 
-trust-anchors { };
 
 zone "policy" { type primary; file "policy.db"; };
 

diff --git a/bin/tests/system/rrl/ns1/named.conf.j2 b/bin/tests/system/rrl/ns1/named.conf.j2
index a71e1ee215160cc350e146052214fa181d62a404..c819d485c08785da738ef4ec38e747da8f8b98b6 100644 (file)
--- a/bin/tests/system/rrl/ns1/named.conf.j2
+++ b/bin/tests/system/rrl/ns1/named.conf.j2
@@ -22,9 +22,8 @@ options {
        listen-on-v6 { none; };
        notify no;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "." {type primary; file "root.db";};

diff --git a/bin/tests/system/rrl/ns2/named.conf.j2 b/bin/tests/system/rrl/ns2/named.conf.j2
index 298d37050aa2bd8f9e93a72e86cb9dd0330499a4..5d69e639c4ee6931e09f8a61d2c048fd6092c295 100644 (file)
--- a/bin/tests/system/rrl/ns2/named.conf.j2
+++ b/bin/tests/system/rrl/ns2/named.conf.j2
@@ -23,7 +23,7 @@ options {
        listen-on-v6 { none; };
        notify no;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 
        rate-limit {
            responses-per-second 2;
@@ -36,7 +36,6 @@ options {
        };
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/rrl/ns3/named.conf.j2 b/bin/tests/system/rrl/ns3/named.conf.j2
index 4bc0d6fc4a5f68776ff1b4ec5e35393b42d5e6cb..5be20da2aa8c6034f2a5322614d802621ce9bada 100644 (file)
--- a/bin/tests/system/rrl/ns3/named.conf.j2
+++ b/bin/tests/system/rrl/ns3/named.conf.j2
@@ -22,7 +22,7 @@ options {
        listen-on-v6 { none; };
        notify no;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 
        // check that all of the options are parsed without limiting anything
        rate-limit {
@@ -43,7 +43,6 @@ options {
 
 };
 
-trust-anchors { };
 
 zone "." { type hint; file "hints"; };
 

diff --git a/bin/tests/system/rrl/ns4/named.conf.j2 b/bin/tests/system/rrl/ns4/named.conf.j2
index bb169f047d34b641eb4c4feb1a7caefe098a6f9a..c7f9cccc15ac6b46e5f16ae1c50babfdd5d70076 100644 (file)
--- a/bin/tests/system/rrl/ns4/named.conf.j2
+++ b/bin/tests/system/rrl/ns4/named.conf.j2
@@ -23,7 +23,7 @@ options {
        listen-on-v6 { none; };
        notify no;
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        max-udp-size 4096;
 
        rate-limit {
@@ -38,7 +38,6 @@ options {
        };
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/rrsetorder/ns3/named.conf.j2 b/bin/tests/system/rrsetorder/ns3/named.conf.j2
index 5d29fae77b955c1cd4385ca9319e7dab7d7268e2..9cfa6ca28d942d621afc1d17adef1d6a49976681 100644 (file)
--- a/bin/tests/system/rrsetorder/ns3/named.conf.j2
+++ b/bin/tests/system/rrsetorder/ns3/named.conf.j2
@@ -20,7 +20,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        rrset-order {
                name "random.example" order random;
@@ -31,7 +31,6 @@ options {
        };
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/rrsetorder/ns4/named.conf.j2 b/bin/tests/system/rrsetorder/ns4/named.conf.j2
index 5187aa8fb1cf79f9c035920f436ef47abc1baa04..3c906f0d07df9d11f84de73d4e97b1e6660b3822 100644 (file)
--- a/bin/tests/system/rrsetorder/ns4/named.conf.j2
+++ b/bin/tests/system/rrsetorder/ns4/named.conf.j2
@@ -20,7 +20,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        rrset-order {
                class IN type A name "host.example.com" order random;
@@ -28,7 +28,6 @@ options {
 
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/rrsetorder/ns5/named.conf.j2 b/bin/tests/system/rrsetorder/ns5/named.conf.j2
index f7a2486ad607f8d1e66a789d136f22c81c69fd16..e6a56a05b34b26048c9e6f45a79826a9e9af1085 100644 (file)
--- a/bin/tests/system/rrsetorder/ns5/named.conf.j2
+++ b/bin/tests/system/rrsetorder/ns5/named.conf.j2
@@ -20,11 +20,10 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/statistics/ns2/named.conf.in b/bin/tests/system/statistics/ns2/named.conf.in
index f23bac8d6787d2b4df6b7d2a2f7aa86a1da2fc56..fa34de55d8aaf6203d0513890db3f2eeda14e636 100644 (file)
--- a/bin/tests/system/statistics/ns2/named.conf.in
+++ b/bin/tests/system/statistics/ns2/named.conf.in
@@ -20,11 +20,10 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
 };
 
-trust-anchors { };
 
 include "statistics-channels.conf";
 

diff --git a/bin/tests/system/statistics/ns3/named.conf.in b/bin/tests/system/statistics/ns3/named.conf.in
index cacc0ec8e76f4f2c0e08557d72459cf8de6434f7..2caaf8cfbeca14f2a19ba60a294488acb25a49e2 100644 (file)
--- a/bin/tests/system/statistics/ns3/named.conf.in
+++ b/bin/tests/system/statistics/ns3/named.conf.in
@@ -21,13 +21,12 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
        qname-minimization disabled;
        zone-statistics yes;
 };
 
-trust-anchors { };
 
 include "statistics-channels.conf";
 

diff --git a/bin/tests/system/stress/ns3/named.conf.in b/bin/tests/system/stress/ns3/named.conf.in
index c11aec2d4889f0089fa20274f9686bda9eae7738..f2bbb0dd1709d623d62675d6f77969f65f86bea2 100644 (file)
--- a/bin/tests/system/stress/ns3/named.conf.in
+++ b/bin/tests/system/stress/ns3/named.conf.in
@@ -22,11 +22,10 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/stress/ns4/named.conf.in b/bin/tests/system/stress/ns4/named.conf.in
index 2dd2e50675a5f4ddd12020663a1c78022b353311..83e548edbd7e2ba1e1c03f9fff0d3ede0903de56 100644 (file)
--- a/bin/tests/system/stress/ns4/named.conf.in
+++ b/bin/tests/system/stress/ns4/named.conf.in
@@ -22,11 +22,10 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        notify yes;
 };
 
-trust-anchors { };
 
 zone "zone000000.example" {
        type secondary;

diff --git a/bin/tests/system/transport-acl/ns1/named.conf.in b/bin/tests/system/transport-acl/ns1/named.conf.in
index a1b970fe2aa849cb19d6450fbc4f95c91ce6583a..925fd3f128b743885f947227d044a9c31c14ea85 100644 (file)
--- a/bin/tests/system/transport-acl/ns1/named.conf.in
+++ b/bin/tests/system/transport-acl/ns1/named.conf.in
@@ -64,11 +64,10 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
 };
 
-trust-anchors { };
 
 zone "example0" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in b/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in
index 374cd06a1719f67e525904ed1b76cb592f5eda56..926d5ea976d92c0059f6b4673f1bf03e9b5fba1e 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-http-plain.conf.in b/bin/tests/system/transport-change/ns1/named-http-plain.conf.in
index 5d4b88035a388cd55f0b49111023ee641f431abd..8108f05f465b893a95fc9f8b6a91400b4b2cbe2a 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-http-plain.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-http-plain.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in b/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in
index 45108da9a01e96f047205a9deaf95aa110301aad..86887ac2994fa7874051e5e4a85d6f83a2132a9b 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in b/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in
index 9001c43f45f91b03b9229b0584e2ae14c3718ca2..5ea2397cc6793210c87cf9c5d4d580b48e8a548b 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-https.conf.in b/bin/tests/system/transport-change/ns1/named-https.conf.in
index bce99f35ec792f1ebc0ceb79b1968da46115e9af..11e34e78173676076c4e6c9287ad1900ac337c89 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-https.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-https.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-proxy.conf.in b/bin/tests/system/transport-change/ns1/named-proxy.conf.in
index ff549268d52ca995d6352ebc4976884fb1682902..daf6f32d0b3ebc32381e7f39e6223e11f9e93269 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-proxy.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-proxy.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in b/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in
index 98c2bf48b9dc0c3f076e0ec02be73b95bfc38b5c..0e875e7441b51ee139f948433d840f08ccb14ba9 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in b/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in
index 20c829f01886ff24ce5b2e128d8af0d6478bae07..82fb45068aa239959c535f93f4d6b4e5e0cb58a3 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named-tls.conf.in b/bin/tests/system/transport-change/ns1/named-tls.conf.in
index a436768d6e907e9064f1b9cfc38a142bcfe31c4a..a67ffa6fe48741b4ab99b07d36945284bf3a7adb 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named-tls.conf.in
+++ b/bin/tests/system/transport-change/ns1/named-tls.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/transport-change/ns1/named.conf.in b/bin/tests/system/transport-change/ns1/named.conf.in
index e594c6ef06fa6712af7c2eda0572c8de7f9a41f9..7f334adc0a5d7fbe43c71f5a21fb013726abc751 100644 (file)
--- a/bin/tests/system/transport-change/ns1/named.conf.in
+++ b/bin/tests/system/transport-change/ns1/named.conf.in
@@ -34,13 +34,12 @@ options {
        recursion no;
        notify explicit;
        statistics-file "named.stats";
-       dnssec-validation yes;
+       dnssec-validation no;
        tcp-initial-timeout 1200;
        allow-proxy { any; };
        allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; };
 };
 
-trust-anchors { };
 
 zone "example" {
        type primary;

diff --git a/bin/tests/system/zero/ns3/named.conf.in b/bin/tests/system/zero/ns3/named.conf.in
index 025dcb46cb5ed263e731dda000968a77cea3a7aa..55fd7dd9b25028e8dd6a6755c45c779dc0afc35a 100644 (file)
--- a/bin/tests/system/zero/ns3/named.conf.in
+++ b/bin/tests/system/zero/ns3/named.conf.in
@@ -20,11 +20,10 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
-       dnssec-validation yes;
+       dnssec-validation no;
        servfail-ttl 0;
 };
 
-trust-anchors { };
 
 zone "." {
        type hint;

diff --git a/bin/tests/system/zero/ns4/named.conf.in b/bin/tests/system/zero/ns4/named.conf.in
index 037a5e9e47404930abea78a8be508aa944dcb983..36339defabb9415efe7e0b79e5bbfa1621adf2e9 100644 (file)
--- a/bin/tests/system/zero/ns4/named.conf.in
+++ b/bin/tests/system/zero/ns4/named.conf.in
@@ -20,10 +20,9 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion no;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 zone "example" {
        type secondary;

diff --git a/bin/tests/system/zonechecks/ns1/named.conf.in b/bin/tests/system/zonechecks/ns1/named.conf.in
index f563b46d26a0266bc82bf671a379499ed4339a15..6bbe18e6983d35097d13a3861bea6d118ad23fca 100644 (file)
--- a/bin/tests/system/zonechecks/ns1/named.conf.in
+++ b/bin/tests/system/zonechecks/ns1/named.conf.in
@@ -23,10 +23,9 @@ options {
        listen-on-v6 { none; };
        recursion no;
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";

diff --git a/bin/tests/system/zonechecks/ns2/named.conf.in b/bin/tests/system/zonechecks/ns2/named.conf.in
index 8385b5adc81f0fd6b5cc49e5327739645a640b78..9faeb3e62d7036b5d22e79009f222414033392aa 100644 (file)
--- a/bin/tests/system/zonechecks/ns2/named.conf.in
+++ b/bin/tests/system/zonechecks/ns2/named.conf.in
@@ -23,10 +23,9 @@ options {
        listen-on-v6 { none; };
        recursion no;
        notify yes;
-       dnssec-validation yes;
+       dnssec-validation no;
 };
 
-trust-anchors { };
 
 key rndc_key {
        secret "1234abcd8765";