]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Fix views system test
authorMatthijs Mekking <matthijs@isc.org>
Thu, 31 Jul 2025 14:51:37 +0000 (16:51 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Fri, 5 Dec 2025 11:14:14 +0000 (12:14 +0100)
This test case enables DNSSEC and has a mismatch in policy. Fix the
policy so that it matches the existing key set, and adjust the
expected answer count because no longer a new key is generated.

bin/tests/system/views/ns2/named1.conf.in
bin/tests/system/views/ns2/named2.conf.in
bin/tests/system/views/tests.sh

index 4fd3ee550138ae35979ea8b52344cf1101f64ebd..72e4ab4ff1d27a27df44aede63272122b3ad944a 100644 (file)
@@ -37,7 +37,7 @@ controls {
 dnssec-policy "views" {
        keys {
                ksk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
-               csk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
+               zsk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
        };
 };
 
index de312f10a5e5b4c949b08f70a74dc06620a1cd76..c39aab1276a1523fcc823133ac606e17ff0e95a2 100644 (file)
@@ -37,7 +37,7 @@ controls {
 dnssec-policy "views" {
        keys {
                ksk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
-               csk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
+               zsk key-directory lifetime unlimited algorithm @DEFAULT_ALGORITHM@;
        };
 };
 
index 4684f82249b270cdfb79d71749c7fc4903c383b0..d7a20aa12d708aa867140d840490d92a10fe7df9 100644 (file)
@@ -137,8 +137,8 @@ ret=0
 wait_for_signed() {
   "$DIG" -p "${PORT}" @10.53.0.2 -b 10.53.0.2 +dnssec DNSKEY inline >dig.out.internal
   "$DIG" -p "${PORT}" @10.53.0.2 -b 10.53.0.5 +dnssec DNSKEY inline >dig.out.external
-  grep "ANSWER: 4," dig.out.internal >/dev/null || return 1
-  grep "ANSWER: 4," dig.out.external >/dev/null || return 1
+  grep "ANSWER: 3," dig.out.internal >/dev/null || return 1
+  grep "ANSWER: 3," dig.out.external >/dev/null || return 1
   return 0
 }
 retry_quiet 10 wait_for_signed || ret=1