--- /dev/null
+; This is a zone which has two DNSKEY records, both of which have
+; existing private key files available. They should be loaded automatically
+; and the zone correctly signed.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+010+18240.key
+$include Kexample.com.+010+28633.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has two DNSKEY records, both of which have
-; existing private key files available. They should be loaded automatically
-; and the zone correctly signed.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+010+18240.key
-$include Kexample.com.+010+28633.key
--- /dev/null
+; This is a zone which has two DNSKEY records, both of which have
+; existing private key files available. They should be loaded automatically
+; and the zone correctly signed.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00100000 1200 3600 604800 300
+extra.example.com. IN A 1.2.3.4
+$include Kexample.com.+008+63613.key
+$include Kexample.com.+008+15002.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has two DNSKEY records, both of which have
-; existing private key files available. They should be loaded automatically
-; and the zone correctly signed.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00100000 1200 3600 604800 300
-extra.example.com. IN A 1.2.3.4
-$include Kexample.com.+008+63613.key
-$include Kexample.com.+008+15002.key
--- /dev/null
+; This is a zone which has two DNSKEY records, both of which have
+; existing private key files available. They should be loaded automatically
+; and the zone correctly signed.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+005+19857.key
+$include Kexample.com.+005+45884.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has two DNSKEY records, both of which have
-; existing private key files available. They should be loaded automatically
-; and the zone correctly signed.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+005+19857.key
-$include Kexample.com.+005+45884.key
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
; This is a zone which has two DNSKEY records, both of which have
; existing private key files available. They should be loaded automatically
; and the zone correctly signed.
--- /dev/null
+; This is a zone which has two DNSKEY records, both of which have
+; existing private key files available. They should be loaded automatically
+; and the zone correctly signed.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has two DNSKEY records, both of which have
-; existing private key files available. They should be loaded automatically
-; and the zone correctly signed.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
--- /dev/null
+; This is a zone which has one non-KSK DNSKEY record for which the
+; private key file exists. It should be loaded automatically and the zone
+; correctly signed.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+010+18240.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has one non-KSK DNSKEY record for which the
-; private key file exists. It should be loaded automatically and the zone
-; correctly signed.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+010+18240.key
--- /dev/null
+; This is a zone which has one KSK DNSKEY record for which the
+; private key file exists. It should be loaded automatically. As there
+; is no non-KSK DNSKEY the resulting zone should be rejected.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+010+28633.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has one KSK DNSKEY record for which the
-; private key file exists. It should be loaded automatically. As there
-; is no non-KSK DNSKEY the resulting zone should be rejected.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+010+28633.key
--- /dev/null
+; This is a zone which has three DNSKEY records, two (KSK + ZSK) of
+; which have existing private key files available. The third is a
+; pre-published ZSK.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+010+18240.key
+$include Kexample.com.+010+28633.key
+$include bogus-zsk.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has three DNSKEY records, two (KSK + ZSK) of
-; which have existing private key files available. The third is a
-; pre-published ZSK.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+010+18240.key
-$include Kexample.com.+010+28633.key
-$include bogus-zsk.key
--- /dev/null
+; This is a zone which has three DNSKEY records, two (KSK +ZSK) of which
+; have existing private key files available. The third is a KSK.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+010+18240.key
+$include Kexample.com.+010+28633.key
+$include bogus-ksk.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has three DNSKEY records, two (KSK +ZSK) of which
-; have existing private key files available. The third is a KSK.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+010+18240.key
-$include Kexample.com.+010+28633.key
-$include bogus-ksk.key
--- /dev/null
+; This is a zone which has four DNSKEY records, two (KK + ZSK) of which
+; have existing private key files available. There are also a KSK and ZSK
+; for which there will be no signatures.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+010+18240.key
+$include Kexample.com.+010+28633.key
+$include bogus-ksk.key
+$include bogus-zsk.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has four DNSKEY records, two (KK + ZSK) of which
-; have existing private key files available. There are also a KSK and ZSK
-; for which there will be no signatures.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+010+18240.key
-$include Kexample.com.+010+28633.key
-$include bogus-ksk.key
-$include bogus-zsk.key
--- /dev/null
+; This is a zone which has two DNSKEY records, none of which have
+; existing private key files available. The resulting zone should fail
+; the consistency tests.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include bogus-ksk.key
+$include bogus-zsk.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has two DNSKEY records, none of which have
-; existing private key files available. The resulting zone should fail
-; the consistency tests.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include bogus-ksk.key
-$include bogus-zsk.key
--- /dev/null
+; This is a zone which has two DNSKEY records, one of which,
+; the KSK, has a private key. The resulting zone should be rejected as
+; it has no ZSK signatures.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+010+28633.key
+$include bogus-zsk.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has two DNSKEY records, one of which,
-; the KSK, has a private key. The resulting zone should be rejected as
-; it has no ZSK signatures.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+010+28633.key
-$include bogus-zsk.key
--- /dev/null
+; This is a zone which has two DNSKEY records, both of which have
+; existing private key files available. They should be loaded automatically
+; and the zone correctly signed.
+;
+$TTL 3600
+example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
+$include Kexample.com.+008+63613.key
+$include Kexample.com.+008+15002.key
+++ /dev/null
-; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
-;
-; SPDX-License-Identifier: MPL-2.0
-;
-; This Source Code Form is subject to the terms of the Mozilla Public
-; License, v. 2.0. If a copy of the MPL was not distributed with this
-; file, you can obtain one at https://mozilla.org/MPL/2.0/.
-;
-; See the COPYRIGHT file distributed with this work for additional
-; information regarding copyright ownership.
-
-; This is a zone which has two DNSKEY records, both of which have
-; existing private key files available. They should be loaded automatically
-; and the zone correctly signed.
-;
-$TTL 3600
-example.com. IN SOA ns hostmaster 00090000 1200 3600 604800 300
-$include Kexample.com.+008+63613.key
-$include Kexample.com.+008+15002.key
(
cd signer/general || exit 1
rm -f signed.zone
- $SIGNER -f signed.zone -o example.com. test1.zone >signer.out.$n
+ $SIGNER -f signed.zone -o example.com. test1.db >signer.out.$n
test -f signed.zone
) || ret=1
n=$((n + 1))
(
cd signer/general || exit 1
rm -f signed.zone
- $SIGNER -s now-1mo -e now+2d -P -x -f signed.zone -O full -o example.com. test1.zone >signer.out.$n
+ $SIGNER -s now-1mo -e now+2d -P -x -f signed.zone -O full -o example.com. test1.db >signer.out.$n
test -f signed.zone
) || ret=1
n=$((n + 1))
(
cd signer/general || exit 0
rm -f signed.zone
- $SIGNER -f signed.zone -o example.com. test2.zone >signer.out.$n
+ $SIGNER -f signed.zone -o example.com. test2.db >signer.out.$n
test -f signed.zone
) && ret=1
n=$((n + 1))
(
cd signer/general || exit 0
rm -f signed.zone
- $SIGNER -f signed.zone -o example.com. test3.zone >signer.out.$n 2>/dev/null
+ $SIGNER -f signed.zone -o example.com. test3.db >signer.out.$n 2>/dev/null
test -f signed.zone
) && ret=1
n=$((n + 1))
(
cd signer/general || exit 1
rm -f signed.zone
- $SIGNER -f signed.zone -o example.com. test4.zone >signer.out.$n 2>/dev/null
+ $SIGNER -f signed.zone -o example.com. test4.db >signer.out.$n 2>/dev/null
test -f signed.zone
) || ret=1
n=$((n + 1))
(
cd signer/general || exit 1
rm -f signed.zone
- $SIGNER -f signed.zone -o example.com. test5.zone >signer.out.$n 2>/dev/null
+ $SIGNER -f signed.zone -o example.com. test5.db >signer.out.$n 2>/dev/null
test -f signed.zone
) || ret=1
n=$((n + 1))
(
cd signer/general || exit 1
rm -f signed.zone
- $SIGNER -f signed.zone -o example.com. test6.zone >signer.out.$n 2>/dev/null
+ $SIGNER -f signed.zone -o example.com. test6.db >signer.out.$n 2>/dev/null
test -f signed.zone
) || ret=1
n=$((n + 1))
(
cd signer/general || exit 0
rm -f signed.zone
- $SIGNER -f signed.zone -o example.com. test7.zone >signer.out.$n 2>/dev/null
+ $SIGNER -f signed.zone -o example.com. test7.db >signer.out.$n 2>/dev/null
test -f signed.zone
) && ret=1
n=$((n + 1))
(
cd signer/general || exit 0
rm -f signed.zone
- $SIGNER -f signed.zone -o example.com. test8.zone >signer.out.$n 2>/dev/null
+ $SIGNER -f signed.zone -o example.com. test8.db >signer.out.$n 2>/dev/null
test -f signed.zone
) && ret=1
n=$((n + 1))
(
cd signer/general || exit 1
rm -f signed.zone
- $SIGNER -F -f signed.zone -o example.com. test1.zone >signer.out.$n
+ $SIGNER -F -f signed.zone -o example.com. test1.db >signer.out.$n
test -f signed.zone
) || ret=1
else
(
cd signer/general || exit 1
rm -f signed.zone
- $SIGNER -F -f signed.zone -o example.com. test11.zone >signer.out.$n 2>&1 && exit 1
+ $SIGNER -F -f signed.zone -o example.com. test11.db >signer.out.$n 2>&1 && exit 1
grep -F -e "fatal: No signing keys specified or found" \
-e "fatal: dnskey 'example.com/RSASHA1/19857' failed to sign data" signer.out.$n >/dev/null
) || ret=1
(
cd signer/general || exit 0
rm -f signed.zone
- $SIGNER -S -f signed.zone -o . test12.zone >signer.out.$n 2>/dev/null
+ $SIGNER -S -f signed.zone -o . test12.db >signer.out.$n 2>/dev/null
) && ret=1
n=$((n + 1))
test "$ret" -eq 0 || echo_i "failed"
(
cd signer/general || exit 0
rm -f signed.zone
- $SIGNER -f signed.zone -3 - -H 51 -o example.com. test9.zone >signer.out.$n
+ $SIGNER -f signed.zone -3 - -H 51 -o example.com. test9.db >signer.out.$n
test -f signed.zone
) && ret=1
n=$((n + 1))
(
cd signer/general || exit 0
rm -f signed.zone
- $MAKEJOURNAL example.com. test9.zone test10.zone test9.zone.jnl
- $SIGNER -f signed.zone -o example.com. -J test9.zone.jnl test9.zone >signer.out.$n
+ $MAKEJOURNAL example.com. test9.db test10.db test9.db.jnl
+ $SIGNER -f signed.zone -o example.com. -J test9.db.jnl test9.db >signer.out.$n
grep -q extra signed.zone
) || ret=1
n=$((n + 1))
(
cd signer/general || exit 1
rm -f signed.zone
- $SIGNER -f signed.zone -3 - -H 50 -o example.com. test9.zone >signer.out.$n
+ $SIGNER -f signed.zone -3 - -H 50 -o example.com. test9.db >signer.out.$n
test -f signed.zone
) || ret=1
n=$((n + 1))
echo_i "checking dnssec-signzone without -o and zone is in directory (incorrect basename) ($n)"
ret=0
-cp signer/general/test13.zone signer/bad.db
+cp signer/general/test13.db signer/bad.db
$SIGNER -O full -S signer/bad.db 2>signer.err.$n && ret=1
grep "example.com: not at top of zone" signer.err.$n >/dev/null || ret=1
n=$((n + 1))
echo_i "checking dnssec-signzone without -o and zone is in directory ($n)"
ret=0
-cp signer/general/test13.zone signer/example.com
+cp signer/general/test13.db signer/example.com
$SIGNER -S -K signer/general -O full signer/example.com >signer.out.$n || ret=1
test -f signer/example.com.signed
n=$((n + 1))
zone "net." {
type master;
- file "fakenet.zone";
+ file "fakenet.db";
};
zone "spoofed.net." {
type master;
- file "spoofednet.zone";
+ file "spoofednet.db";
};
zone "sub.local.net." {
type master;
- file "fakesublocalnet.zone";
+ file "fakesublocalnet.db";
};
zone "net2" {
type master;
- file "fakenet2.zone";
+ file "fakenet2.db";
};
zone "net.example.lll" {
zone "sub.local.tld." {
type master;
- file "fakesublocaltld.zone";
+ file "fakesublocaltld.db";
};