]> git.ipfire.org Git - thirdparty/knot-dns.git/commitdiff
tests-extra: use various NSEC3 salt lengths to check value limits in dnssec/nsec_update
authorDaniel Salzman <daniel.salzman@nic.cz>
Thu, 1 Aug 2019 12:02:20 +0000 (14:02 +0200)
committerDaniel Salzman <daniel.salzman@nic.cz>
Thu, 1 Aug 2019 12:02:20 +0000 (14:02 +0200)
tests-extra/tests/dnssec/nsec_update/test.py

index c0acfee19076942567bc4a80606d835ac0a606d0..b8e8a550204d2286bc7ae890e3a667291edebfb1 100644 (file)
@@ -28,7 +28,7 @@ for zone in zones:
     master.dnssec(zone).enable = True
     master.dnssec(zone).nsec3 = random.choice([True, False])
     master.dnssec(zone).nsec3_iters = 2
-    master.dnssec(zone).nsec3_salt_len = 8
+    master.dnssec(zone).nsec3_salt_len = random.choice([0, 1, 9, 64, 128, 255])
     master.dnssec(zone).nsec3_opt_out = (random.random() < 0.5)
 
 t.start()