]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
update system tests so validation won't fail when using IANA key
authorEvan Hunt <each@isc.org>
Wed, 16 May 2018 18:51:06 +0000 (11:51 -0700)
committerOndřej Surý <ondrej@sury.org>
Thu, 31 May 2018 16:22:33 +0000 (18:22 +0200)
- all tests with "recursion yes" now also specify "dnssec-validation yes",
  and all tests with "recursion no" also specify "dnssec-validation no".
  this must be maintained in all new tests, or else validation will fail
  when we use local root zones for testing.
- clean.sh has been modified where necessary to remove managed-keys.bind
  and viewname.mkeys files.

223 files changed:
bin/tests/system/acl/clean.sh
bin/tests/system/additional/clean.sh
bin/tests/system/additional/ns1/named1.conf.in
bin/tests/system/additional/ns1/named2.conf.in
bin/tests/system/additional/ns1/named3.conf.in
bin/tests/system/additional/ns1/named4.conf.in
bin/tests/system/additional/ns3/named.conf.in
bin/tests/system/addzone/clean.sh
bin/tests/system/allow-query/clean.sh
bin/tests/system/auth/clean.sh
bin/tests/system/autosign/clean.sh
bin/tests/system/builtin/clean.sh
bin/tests/system/cacheclean/clean.sh
bin/tests/system/cacheclean/ns1/named.conf.in
bin/tests/system/cacheclean/ns2/named.conf.in
bin/tests/system/case/clean.sh
bin/tests/system/catz/clean.sh
bin/tests/system/chain/clean.sh
bin/tests/system/chain/ns1/named.conf.in
bin/tests/system/chain/ns2/named.conf.in
bin/tests/system/chain/ns5/named.conf.in
bin/tests/system/chain/ns7/named.conf.in
bin/tests/system/checknames/clean.sh
bin/tests/system/checknames/ns1/named.conf.in
bin/tests/system/checknames/ns2/named.conf.in
bin/tests/system/checknames/ns3/named.conf.in
bin/tests/system/checknames/ns4/named.conf.in
bin/tests/system/cookie/clean.sh
bin/tests/system/cookie/ns1/named.conf.in
bin/tests/system/cookie/ns2/named.conf.in
bin/tests/system/cookie/ns3/named.conf.in
bin/tests/system/cookie/ns4/named.conf.in
bin/tests/system/cookie/ns5/named.conf.in
bin/tests/system/cookie/ns6/named.conf.in
bin/tests/system/database/clean.sh
bin/tests/system/delzone/clean.sh
bin/tests/system/delzone/ns1/named.conf
bin/tests/system/delzone/ns2/named.conf
bin/tests/system/dialup/ns1/named.conf
bin/tests/system/dialup/ns2/named.conf
bin/tests/system/dialup/ns3/named.conf
bin/tests/system/digdelv/clean.sh
bin/tests/system/dlv/clean.sh
bin/tests/system/dlz/clean.sh
bin/tests/system/dlzexternal/clean.sh
bin/tests/system/dns64/clean.sh
bin/tests/system/dnssec/clean.sh
bin/tests/system/dnstap/clean.sh
bin/tests/system/dscp/clean.sh
bin/tests/system/dscp/ns1/named.conf.in
bin/tests/system/dscp/ns2/named.conf.in
bin/tests/system/dscp/ns3/named.conf.in
bin/tests/system/dscp/ns4/named.conf.in
bin/tests/system/dscp/ns5/named.conf.in
bin/tests/system/dscp/ns6/named.conf.in
bin/tests/system/dscp/ns7/named.conf.in
bin/tests/system/dsdigest/clean.sh
bin/tests/system/dyndb/clean.sh
bin/tests/system/ecdsa/clean.sh
bin/tests/system/eddsa/clean.sh
bin/tests/system/ednscompliance/clean.sh
bin/tests/system/emptyzones/clean.sh
bin/tests/system/fetchlimit/clean.sh
bin/tests/system/fetchlimit/ns1/named.conf.in
bin/tests/system/fetchlimit/ns2/named.conf.in
bin/tests/system/fetchlimit/ns3/named1.conf.in
bin/tests/system/fetchlimit/ns3/named2.conf.in
bin/tests/system/fetchlimit/ns3/named3.conf.in
bin/tests/system/filter-aaaa/clean.sh
bin/tests/system/filter-aaaa/ns1/named1.conf.in
bin/tests/system/filter-aaaa/ns1/named2.conf.in
bin/tests/system/filter-aaaa/ns2/named1.conf.in
bin/tests/system/filter-aaaa/ns2/named2.conf.in
bin/tests/system/filter-aaaa/ns3/named1.conf.in
bin/tests/system/filter-aaaa/ns3/named2.conf.in
bin/tests/system/filter-aaaa/ns4/named1.conf.in
bin/tests/system/filter-aaaa/ns4/named2.conf.in
bin/tests/system/formerr/clean.sh
bin/tests/system/forward/clean.sh
bin/tests/system/forward/ns1/named.conf.in
bin/tests/system/forward/ns2/named.conf.in
bin/tests/system/forward/ns3/named.conf.in
bin/tests/system/forward/ns4/named.conf.in
bin/tests/system/forward/ns5/named.conf.in
bin/tests/system/geoip/clean.sh
bin/tests/system/geoip/ns2/named1.conf.in
bin/tests/system/geoip/ns2/named10.conf.in
bin/tests/system/geoip/ns2/named11.conf.in
bin/tests/system/geoip/ns2/named12.conf.in
bin/tests/system/geoip/ns2/named13.conf.in
bin/tests/system/geoip/ns2/named14.conf.in
bin/tests/system/geoip/ns2/named15.conf.in
bin/tests/system/geoip/ns2/named2.conf.in
bin/tests/system/geoip/ns2/named3.conf.in
bin/tests/system/geoip/ns2/named4.conf.in
bin/tests/system/geoip/ns2/named5.conf.in
bin/tests/system/geoip/ns2/named6.conf.in
bin/tests/system/geoip/ns2/named7.conf.in
bin/tests/system/geoip/ns2/named8.conf.in
bin/tests/system/geoip/ns2/named9.conf.in
bin/tests/system/glue/clean.sh
bin/tests/system/gost/clean.sh
bin/tests/system/idna/clean.sh
bin/tests/system/inline/clean.sh
bin/tests/system/integrity/clean.sh
bin/tests/system/ixfr/clean.sh
bin/tests/system/keepalive/clean.sh
bin/tests/system/keymgr/clean.sh
bin/tests/system/legacy/clean.sh
bin/tests/system/legacy/ns1/named1.conf.in
bin/tests/system/legacy/ns1/named2.conf.in
bin/tests/system/legacy/ns2/named.conf.in
bin/tests/system/legacy/ns3/named.conf.in
bin/tests/system/legacy/ns4/named.conf.in
bin/tests/system/legacy/ns5/named.conf.in
bin/tests/system/legacy/ns6/named.conf.in
bin/tests/system/legacy/ns7/named.conf.in
bin/tests/system/limits/clean.sh
bin/tests/system/logfileconfig/clean.sh
bin/tests/system/masterfile/clean.sh
bin/tests/system/masterformat/clean.sh
bin/tests/system/mkeys/clean.sh
bin/tests/system/names/clean.sh
bin/tests/system/notify/clean.sh
bin/tests/system/nslookup/clean.sh
bin/tests/system/nsupdate/clean.sh
bin/tests/system/nzd2nzf/clean.sh
bin/tests/system/padding/clean.sh
bin/tests/system/pending/clean.sh
bin/tests/system/pipelined/clean.sh
bin/tests/system/pipelined/ns1/named.conf.in
bin/tests/system/pipelined/ns2/named.conf.in
bin/tests/system/pipelined/ns3/named.conf.in
bin/tests/system/pipelined/ns4/named.conf.in
bin/tests/system/pkcs11/clean.sh
bin/tests/system/pkcs11/ns1/named.conf
bin/tests/system/pkcs11ssl/clean.sh
bin/tests/system/pkcs11ssl/ns1/named.conf
bin/tests/system/reclimit/clean.sh
bin/tests/system/reclimit/ns1/named.conf.in
bin/tests/system/reclimit/ns3/named1.conf.in
bin/tests/system/reclimit/ns3/named2.conf.in
bin/tests/system/reclimit/ns3/named3.conf.in
bin/tests/system/reclimit/ns3/named4.conf.in
bin/tests/system/redirect/clean.sh
bin/tests/system/resolver/clean.sh
bin/tests/system/resolver/ns1/named.conf.in
bin/tests/system/resolver/ns4/named.conf.in
bin/tests/system/resolver/ns5/named.conf.in
bin/tests/system/resolver/ns6/named.conf.in
bin/tests/system/resolver/ns7/named1.conf.in
bin/tests/system/resolver/ns7/named2.conf.in
bin/tests/system/rndc/clean.sh
bin/tests/system/rootkeysentinel/clean.sh
bin/tests/system/rpz/clean.sh
bin/tests/system/rpzrecurse/clean.sh
bin/tests/system/rpzrecurse/ns1/named.conf.in
bin/tests/system/rpzrecurse/ns2/named.clientip.conf
bin/tests/system/rpzrecurse/ns2/named.clientip2.conf
bin/tests/system/rpzrecurse/ns2/named.conf.header.in
bin/tests/system/rpzrecurse/ns2/named.default.conf
bin/tests/system/rpzrecurse/ns2/named.log.conf
bin/tests/system/rpzrecurse/ns2/named.max.conf
bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf
bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf
bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf
bin/tests/system/rpzrecurse/ns3/named1.conf.in
bin/tests/system/rpzrecurse/ns3/named2.conf.in
bin/tests/system/rpzrecurse/ns4/named.conf.in
bin/tests/system/rrl/clean.sh
bin/tests/system/rrl/ns1/named.conf.in
bin/tests/system/rrl/ns2/named.conf.in
bin/tests/system/rrl/ns3/named.conf.in
bin/tests/system/rrl/ns4/named.conf.in
bin/tests/system/rrsetorder/clean.sh
bin/tests/system/rrsetorder/ns1/named.conf.in
bin/tests/system/rrsetorder/ns2/named.conf.in
bin/tests/system/rrsetorder/ns3/named.conf.in
bin/tests/system/rrsetorder/ns4/named.conf.in
bin/tests/system/rsabigexponent/clean.sh
bin/tests/system/runtime/clean.sh
bin/tests/system/serve-stale/clean.sh
bin/tests/system/sfcache/clean.sh
bin/tests/system/sortlist/clean.sh
bin/tests/system/spf/clean.sh
bin/tests/system/staticstub/clean.sh
bin/tests/system/staticstub/ns1/named.conf.in
bin/tests/system/staticstub/ns2/named.conf.in
bin/tests/system/staticstub/ns3/named.conf.in
bin/tests/system/staticstub/ns4/named.conf.in
bin/tests/system/statistics/clean.sh
bin/tests/system/statistics/ns1/named.conf.in
bin/tests/system/statistics/ns2/named.conf.in
bin/tests/system/statistics/ns3/named.conf.in
bin/tests/system/statschannel/clean.sh
bin/tests/system/stress/clean.sh
bin/tests/system/stress/ns1/named.conf
bin/tests/system/stress/ns2/named.conf
bin/tests/system/stress/ns3/named.conf
bin/tests/system/stress/ns4/named.conf
bin/tests/system/stub/clean.sh
bin/tests/system/synthfromdnssec/clean.sh
bin/tests/system/tcp/clean.sh
bin/tests/system/tkey/clean.sh
bin/tests/system/tsig/clean.sh
bin/tests/system/tsiggss/clean.sh
bin/tests/system/unknown/clean.sh
bin/tests/system/upforwd/clean.sh
bin/tests/system/views/clean.sh
bin/tests/system/wildcard/clean.sh
bin/tests/system/wildcard/ns1/named.conf.in
bin/tests/system/wildcard/ns2/named.conf.in
bin/tests/system/wildcard/ns3/named.conf.in
bin/tests/system/wildcard/ns4/named.conf.in
bin/tests/system/wildcard/ns5/named.conf.in
bin/tests/system/xfer/clean.sh
bin/tests/system/xferquota/clean.sh
bin/tests/system/zero/clean.sh
bin/tests/system/zero/ns1/named.conf.in
bin/tests/system/zero/ns2/named.conf.in
bin/tests/system/zero/ns3/named.conf.in
bin/tests/system/zero/ns4/named.conf.in
bin/tests/system/zonechecks/clean.sh

index 75acebacaeeabf752d83e7d60ee15ef2e3568686..080776a2adb7a67730798395bda1416b271aae81 100644 (file)
@@ -21,3 +21,4 @@ rm -f */named.run
 rm -f ns*/named.lock
 rm -f ns*/_default.nzf
 rm -f ns*/_default.nzd*
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index 03e55cd33318457740e0f8758d72acc03bfc5cd9..eac8eb3f8ce7d39205a89217afb8bc49eaf0830f 100644 (file)
@@ -18,3 +18,4 @@ rm -f */named.memstats
 rm -f */named.conf
 rm -f */named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 3ab05a3458a8866449be655e971ca1899aca3232..1fb8e7a60170ed7201fa6880f995becdaa72d920 100644 (file)
@@ -14,6 +14,7 @@ options {
        notify-source 10.53.0.1;
        transfer-source 10.53.0.1;
        recursion no;
+       dnssec-validation no;
        port @PORT@;
        pid-file "named.pid";
        listen-on { 10.53.0.1; };
index 5b053d841ad48627f9bdb76caac805bc7aef206d..84a55481e7c21a8c3f40b23864b1583c7d8033b9 100644 (file)
@@ -14,6 +14,7 @@ options {
        notify-source 10.53.0.1;
        transfer-source 10.53.0.1;
        recursion no;
+       dnssec-validation no;
        port @PORT@;
        pid-file "named.pid";
        listen-on { 10.53.0.1; };
index 7c2e05c42ee15f393c3858e189a424ee9e7698ee..c0b697986a40c463f65c2b1fbd44826acaa28848 100644 (file)
@@ -14,6 +14,7 @@ options {
        notify-source 10.53.0.1;
        transfer-source 10.53.0.1;
        recursion no;
+       dnssec-validation no;
        port @PORT@;
        pid-file "named.pid";
        listen-on { 10.53.0.1; };
index 7ba958aca5e76f5273b1f86db5536ab67730a8c5..a8f0aa4beb03eecf80874916b33f886730823832 100644 (file)
@@ -14,6 +14,7 @@ options {
        notify-source 10.53.0.1;
        transfer-source 10.53.0.1;
        recursion no;
+       dnssec-validation no;
        port @PORT@;
        pid-file "named.pid";
        listen-on { 10.53.0.1; };
index f01bd47b737dfb59743ef574ea005de9430d450a..bd730ae418cf558d29e1a6f6e944ce3a0fb4a783 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
 };
 
 zone "." {
index 40f9609023b45b17fd2b5c4ca6d99194bc70fd70..30c349c830107fc3fc5c7c20d160bb3e9a256bb5 100644 (file)
@@ -37,3 +37,4 @@ rm -f ns1/redirect.db
 rm -f ns2/redirect.db
 rm -f ns2/redirect.bk
 rm -f ns3/redirect.db
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index a36dbf6923f8f1006f02b01ee115acd78a6ba13f..17ec1a815f16f07cd107d7c79d66aadc0f439b0d 100644 (file)
@@ -18,3 +18,4 @@ rm -f ns2/named.conf ns2/controls.conf
 rm -f */named.memstats
 rm -f ns*/named.lock
 rm -f ns*/named.run ns*/named.run.prev
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index f18041d5f43a355eb9ee46a3f0a0ba592cdd28ee..a3efd21a4b3aaae75a50d7b7680981a3cd0eb64a 100644 (file)
@@ -13,3 +13,4 @@ rm -f */named.conf
 rm -f dig.out.test*
 rm -f ns2/example.com.bk
 rm -f ns2/example.net.bk
+rm -f ns*/managed-keys.bind*
index f5b2d6020580b8ff962222e9b847066e5c84abfe..91879592b214fe13e759300d6ad88e882d9b8200 100644 (file)
@@ -63,3 +63,4 @@ rm -f nsupdate.out
 rm -f settime.out.*
 rm -f signing.out.*
 rm -f sync.key
+rm -f ns*/managed-keys.bind*
index 93a11156b6a73aaf44fceaf1e433f75ba604865c..c15da7614c5f35280df54e232f06e14bf5e80752 100644 (file)
@@ -15,3 +15,4 @@ rm -f ns?/named.conf
 rm -f rndc.status.ns*
 rm -f dig.out.ns*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 174179c1a0576bc3beb78c482bd3aff49ea4ddd6..4cd319179e802c91bb858dd0a0b9064c1cdeef59 100644 (file)
@@ -21,3 +21,4 @@ rm -f */named.run
 rm -f */named.conf
 rm -f ns2/named_dump.db.*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 35c080115f8a97aae47efcaab8697c7df80ae6d7..c1ce07e0717251f519c422089b9365633876cd83 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
        check-integrity no;
        minimal-responses no;
index c3c42609776049365af0b125de03a38907baee56..4fd5328e865b0a95cf0a3b5940af9b1c99361194 100644 (file)
@@ -20,6 +20,8 @@ options {
        notify yes;
        max-cache-size 80%;
        disable-empty-zone 127.IN-ADDR.ARPA;
+       recursion yes;
+       dnssec-validation yes;
 };
 
 key rndc_key {
index 646f3f6c169022430e694ccad44a2f1c9e478ed9..9af9aadaf69f422a591229ff757430031d263396 100644 (file)
@@ -19,3 +19,4 @@ rm -f ns1/dynamic.db.jnl
 rm -f ns2/dynamic.bk
 rm -f ns2/dynamic.bk.jnl
 rm -f ns2/example.bk
+rm -f ns*/managed-keys.bind*
index 4f90bf7ccf4f67a3a270da2d36d64eb03475a20e..7c1c1bd89c7ca2f6866dff3a08090a7cae2d20a1 100644 (file)
@@ -22,3 +22,4 @@ rm -f nsupdate.out.*
 rm -f ns[123]/catalog[1234].example.db
 rm -rf ns2/zonedir
 rm -f ns*/*.nzd ns*/*.nzd-lock
+rm -f ns*/managed-keys.bind*
index 265123f0c6ad4a51f2250993820e41a0dedd496a..4d0b6d2eaf852a988c0b12daaed738581666008c 100755 (executable)
@@ -13,3 +13,4 @@ rm -f dig.out.* named*.pid
 rm -f ns*/named.conf
 rm -f */named.memstats */named.recursing */named.lock */named.run */ans.run
 rm -f ns2/K* ns2/dsset-* ns2/example.db.signed
+rm -f ns*/managed-keys.bind*
index 5815c3c756c00d120c169eade0eb191067250e9d..d55fb0d2ebfe2ac800f588424a1a1894eca234c8 100644 (file)
@@ -18,8 +18,8 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation yes;
        notify yes;
-       dnssec-enable yes;
 };
 
 zone "." { type master; file "root.db"; };
index 519bfb3494ec0c854aa124b259582dad38244757..024424fb859b20f58495885f409137a04de92e3b 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index d6813b6f69525e01916323905690651b54f6e9f2..14a05983bc51efc1f6725eff81d58f156f0a8d3e 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index 21f5a998c5fa42b3d2bb352ac871bea68d2afa3d..defabb0a69ff0a63fe09e300de6e8e5b782f7e87 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on-v6 { fd92:7065:b8e:ffff::7; };
        recursion yes;
        allow-recursion { any; };
+       dnssec-validation yes;
 };
 
 key rndc_key {
index 83073f9e6e01366b5883417a6580ae5978ca6eb2..c5232d7e52d9cff0dd08b5f0fa9bd7312398661b 100644 (file)
@@ -20,3 +20,4 @@ rm -f ns4/*.update.db.jnl
 rm -f */named.memstats
 rm -f */named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 99b8004eb42ab9043bcfbe6144ff090e0e9999fc..4a557a15a8a31d88ba363faef0923b2d9e38b626 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
        check-integrity no;
 };
index ed625e53e55f4c425d25e34e1361f57b3f96a90e..84699440c8be2ae19dcfffb747418eb214e52a17 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        check-names response warn;
        notify yes;
 };
index 5e6034f0033b7ac53cfc7d4a046136d8da8051bf..00c6836d50f75d14cfa05f639077f458fb00e1c9 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        check-names response fail;
        notify yes;
 };
index f37d543899b278870ff83a59b1e56962a11dbbdb..d4065cafab6ebd95ea97e267c3fadbdfd1137de8 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        check-names master ignore;
        notify yes;
 };
index 01abbc8f6a69b0865f868097da052f3fc80f673c..b5888d1f5b0a414d86b60e47dcfe71ddc05b1ca6 100644 (file)
@@ -13,3 +13,4 @@ rm -f ns1/named_dump.db
 rm -f ns*/named.memstats
 rm -f ns*/named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index a924e6bc4c73ccb76967389f0a31ef805697fdf2..4d23c0eaad0e06d2f4bff01f6cddeeb3079e93c8 100644 (file)
@@ -27,6 +27,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
                 except-from { "example.org"; };
        deny-answer-aliases { "example.org"; }
index 99fb6d266090cfc30e59dfd48b579804a723253c..23425ccbdc43c763dd7dbcc861c3dd6a975c404e 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        send-cookie yes;
        nocookie-udp-size 512;
 };
index 93f0ae1209c9891848184c6a3cc8945e519a0eb0..47fd6bafc276614b02f1684833127e2db08e6ecb 100644 (file)
@@ -27,6 +27,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
                 except-from { "example.org"; };
        deny-answer-aliases { "example.org"; }
index cd7c07f23c1db652f15988cd5a2c6e6ea1f865d4..79d1cda568c0c0834f2c2879b83ece84b94af0e2 100644 (file)
@@ -27,6 +27,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        cookie-algorithm sha1;
        cookie-secret "569d36a6cc27d6bf55502183302ba352745255a2";
        require-server-cookie yes;
index 0d050a62eabebe5afe0b7db09afb8c02aa99209b..ae51a9071d73058dcec3eacc0fd8b0bb7234bdd7 100644 (file)
@@ -27,6 +27,7 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        cookie-algorithm sha1;
        cookie-secret "569d36a6cc27d6bf55502183302ba352745255a2";
        cookie-secret "6b300e27a0db46d4b046e4189790fa7db3c1ffb3";
index 634a939bd94777d13b3d915085f663f95553c87c..368d9a31927e3d577c8cddf1f62447daf45505d5 100644 (file)
@@ -27,6 +27,7 @@ options {
        listen-on { 10.53.0.6; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        cookie-algorithm sha1;
        cookie-secret "6b300e27a0db46d4b046e4189790fa7db3c1ffb3";
        require-server-cookie yes;
index 5a08ae0c74485d4febf688cd0a23dd35c440687b..3d407145673c63da32b91bc28d040a06483d8c42 100644 (file)
@@ -12,3 +12,4 @@
 rm -f ns1/named.conf ns1/named.run ns1/named.memstats
 rm -f dig.out.*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 9a1c79fd7f590e39facc601968d298753d4609b1..51b9e3d1441cba7e64f2ef8bafdc8d1dea678fa5 100644 (file)
@@ -20,3 +20,4 @@ rm -f ns2/inline.db.signed
 rm -f ns2/inlineslave.bk*
 rm -f ns*/named.lock
 rm -f ns2/nzf-*
+rm -f ns*/managed-keys.bind*
index 8b6c4415ad825786ebb500ed0aafb20a845a08fa..71cd514d3a83eb1b52466bad6fa12178960b4360 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on-v6 { none; };
        allow-query { any; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "." {
index 8532e500df65b8e60ec54c8a8c95d4c4ce72a952..708754c3844a1ebc28eff59407ca9fdb8c669c3b 100644 (file)
@@ -16,6 +16,7 @@ options {
        listen-on-v6 { none; };
        allow-query { any; };
        recursion no;
+       dnssec-validation no;
        allow-new-zones yes;
 };
 
index d184cd824ac7cb8f62a9fb8554ed9c48ecf53613..9811b7f432296844214172897f05b9d2cd99d95c 100644 (file)
@@ -21,6 +21,7 @@ options {
        listen-on-v6 { none; };
        heartbeat-interval 2;
        recursion no;
+       dnssec-validation no;
 };
 
 zone "." {
index a71d685b459bf66dde6660e1986f207685bafe08..fdf06029e7d1f46dca942cf772350bd91e5f7a34 100644 (file)
@@ -21,6 +21,7 @@ options {
        listen-on-v6 { none; };
        heartbeat-interval 2;
        recursion no;
+       dnssec-validation no;
 };
 
 zone "." {
index 7a7b42470f1fe93e6b3e149045b418ad7f3712d4..864b026b0cca2562eb3326e4beedfc77bee7c27b 100644 (file)
@@ -21,6 +21,7 @@ options {
        listen-on-v6 { none; };
        heartbeat-interval 2;
        recursion no;
+       dnssec-validation no;
 };
 
 zone "." {
index dfc6f7c1986931e2f9caf9d3d9f2d499b5ed8537..04c65ad46be228abe4ca84727a359e995f17b22c 100644 (file)
@@ -19,3 +19,4 @@ rm -f dig.out.mn.*
 rm -f dig.out.nm.*
 rm -f dig.out.nn.*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 94cadc69aedb1701e1b3b48a8483e48b98a3f0dd..7cc08433d915c4b29912ff7d519b20b8e779bf64 100644 (file)
@@ -40,3 +40,4 @@ rm -f ns6/signer.err
 rm -f */named.memstats
 rm -f dig.out.ns*.test*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index e38b806ceaef25002270cef2cd6cc17003f148e2..fe338a41448cfb19e3440679cb81129f940accea 100644 (file)
@@ -14,3 +14,4 @@ rm -f dig.out.*
 rm -f */named.memstats
 rm -f */named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 3e6cb9efc96bfd0108d07d28eebf845edccd65de..dde397680b8b479150997e50c80ecb3aa27cb22c 100644 (file)
@@ -21,3 +21,4 @@ rm -f ns1/ddns.key
 rm -f dig.out*
 rm -f ns*/named.lock
 rm -f ns1/session.key
+rm -f ns*/managed-keys.bind*
index fdb0053d9fe091e7cbd57f0a126ca25797da7548..8af092d2787291d2abf10da94738250c5ad2afb7 100644 (file)
@@ -17,3 +17,4 @@ rm -f */named.memstats
 rm -f */named.run
 rm -f dig.out.*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index a8b2ae12f2548b8b57cfbbcf1afd6d8734b76ddd..2279e6828c577acb82e265e1215e31a245bcb2f2 100644 (file)
@@ -97,3 +97,4 @@ rm -f signer/general/signer.out.*
 rm -f signer/general/dsset*
 rm -f signing.out*
 rm -f python.out.*
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index fe9340243025674e17156ea64d9e794ee88623d4..699916985cdf873558ce63174e841ead176fa2d8 100644 (file)
@@ -22,3 +22,4 @@ rm -f ns*/dnstap.out.save
 rm -f ns*/dnstap.out.save.?
 rm -f ns*/named.lock
 rm -f ydump.out
+rm -f ns*/managed-keys.bind*
index b29303a6a0bd0e8bfe0b6303770dba7c208ab8a0..cea3269ae2d84d941b4a04ec4a13da0f9af6c778 100644 (file)
@@ -13,3 +13,4 @@ rm -f */named.memstats
 rm -f */named.run
 rm -f */named.conf
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index a6e8b4106543dc2f2259886cb9dd815c1091404a..39ca4eebfb1a7df7b8f59ecfe6a918999b942f48 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index 6419a019ab354973eafa295f166d454ecba843fe..4edc7e7ddbac63e19dd217d936607ed53967b436 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index 71d72cd5c2a190af28cbc5f20b66e5c1f44e46c0..c775e5180b355f473977d63250ab0b692ded095e 100644 (file)
@@ -19,6 +19,8 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        notify yes;
+       recursion yes;
+       dnssec-validation yes;
 };
 
 zone "." {
index 70dd5e5ee8ba29d3b7d77a6b993e91bd1e4f1350..df13caa77bc24385fb8f476cee6b3b75ceb21dbf 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on dscp 46 { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index e2726c3d467c8d192b3a5d994dc4440d843277f3..dc2bb6089ed6e64d75425ae2249fbc5cafbbb62c 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on dscp 46 { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index eedbab1315a0c86e94ad8127206fce4828d87d8b..1714e2232a7c6e017081f665107224daa8478e9d 100644 (file)
@@ -19,6 +19,8 @@ options {
        listen-on dscp 46 { 10.53.0.6; };
        listen-on-v6 { none; };
        notify yes;
+       recursion yes;
+       dnssec-validation yes;
 };
 
 zone "." {
index e7c9528df106a1408d888d67e594bb4878b7313b..25ed20ac6342b236c7a57c4d90ef7dd4346a026b 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on dscp 46 { 10.53.0.7; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index bb40bcb82c56cd1b783480fe3c7f93f37be067da..a4f2b67b565d7f4235a76ab66bdd99589e19deb5 100644 (file)
@@ -19,3 +19,4 @@ rm -f */named.conf
 rm -f */named.run
 rm -f */named.memstats
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 63449472040d8fd13039639dcdfd129b1b84575a..ae91e3318ca5b0d14269fc22b4682a6ed3716c2d 100644 (file)
@@ -20,3 +20,4 @@ rm -f added.a.out.*
 rm -f added.ptr.out.*
 rm -f deleted.a.out.*
 rm -f deleted.ptr.out.*
+rm -f ns*/managed-keys.bind*
index 3779676eea43ffd3b40a8db34ec8dc4ceb12547d..6cfeec24663af82138f3263567037b09901fb4fd 100644 (file)
@@ -16,3 +16,4 @@ rm -f dig.out*
 rm -f */named.run
 rm -f */named.memstats
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 0bcd0ac23ebd6194349ee125b4e611b7dd90490c..8e2e225e19c8d43e9d99aa9962a29fa2bb16ace1 100644 (file)
@@ -16,3 +16,4 @@ rm -f dig.out*
 rm -f */named.run
 rm -f */named.memstats
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 037fccf825d78a5a78e54cea3c2de5ed8b571864..37953dd6d160b6e91bdbb1f4abee7195a8fa3648 100644 (file)
@@ -14,3 +14,4 @@ rm -f ns*/named.lock
 rm -f ns*/named.conf
 rm -f ns*/named.run
 rm -f ns*/named.memstats
+rm -f ns*/managed-keys.bind*
index 7826e73b27bbc7f34bad7e5b36fe85931315e5a5..434b70835a05f118c5433ba3cef836d4ff79161b 100644 (file)
@@ -12,3 +12,4 @@ rm -f ns*/named.lock
 rm -f ns*/named.run
 rm -f ns*/named.memstats
 rm -f dig.out.test*
+rm -f ns*/managed-keys.bind*
index 9296105dfeb7c07a874d5b012972b8438c3440b9..6b6b9be3ef099f483f25fe1f57a4d0231ab2b7e5 100644 (file)
@@ -14,3 +14,4 @@ rm -f dig.out*
 rm -f ans4/norespond
 rm -f ns3/named.stats ns3/named_dump.db
 rm -f burst.input.*
+rm -f ns*/managed-keys.bind*
index eabfe0cd00e829cd61358118e9b338e869ef2ba2..c434e8b06a6be57a96b73163d094019c33e46deb 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index 1892756ccb730f744db5565f61d98798b98f15c6..fc578624a7575f7ac2cf3828cb6ec736734fc2c0 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index b470f4633db150e8ac8d825e340d669a61ae75b7..50c7bbb43bd56b8cc917e44a4da0528efefda565 100644 (file)
@@ -21,6 +21,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        fetches-per-server 400;
 };
index 001a95815ffbcc2f985509e670a51f7364f58182..cc00ca41aeeb16329183cfb33f14f638e8f5dc29 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        fetches-per-zone 40;
 };
index 0244a9a62fc1612566bae65cf953a0be9958be43..69c95dc449121c1f29a5d1e9563c2f5e97f89529 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        recursive-clients 400;
 };
index 73732758f812458e027090b4676704b23b926dce..a282093ff27ba16839c89ce1db6ca3e0922229a4 100644 (file)
@@ -25,3 +25,4 @@ rm -f ns4/dsset-*
 
 rm -f dig.out.*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index bd898554a03a5e12a7be43cc25efba7a64932edb..55c1afe093962610af703987202ae53eb6cad90c 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { fd92:7065:b8e:ffff::1; };
        recursion no;
+       dnssec-validation yes;
        notify yes;
        filter-aaaa-on-v4 yes;
        filter-aaaa { 10.53.0.1; };
index 9f86d759b005fa813697d635e71074043d14cd63..6cf9d0d333518293705cb917bf55c40804a835c8 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { fd92:7065:b8e:ffff::1; };
        recursion no;
+       dnssec-validation yes;
        notify yes;
        filter-aaaa-on-v6 yes;
        filter-aaaa { fd92:7065:b8e:ffff::1; };
index e188e4f11d8d0d3ecca77c33a64428da13d03135..7b43a97a46182aa67a6d64b8b7fb2f5b8bd71b1c 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { fd92:7065:b8e:ffff::2; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        filter-aaaa-on-v4 yes;
        filter-aaaa { 10.53.0.2; };
index e3216f89b2e2d5cd6393072e74c71f680ff3e135..6a6b9baef7c6deeee4e6fb067df4b790fbd2a50b 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { fd92:7065:b8e:ffff::2; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        filter-aaaa-on-v6 yes;
        filter-aaaa { fd92:7065:b8e:ffff::2; };
index bc8193d82e107205f77a24d7182021092f16180e..60c97d2aa67e28de57c51857295fd381f16d1e6a 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { fd92:7065:b8e:ffff::3; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        filter-aaaa-on-v4 break-dnssec;
        filter-aaaa { 10.53.0.3; };
index 051fdc04ab99c49db75a797406d5e0154c139f11..fd7b8c04d1c55a763fd815a937636179ea682133 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { fd92:7065:b8e:ffff::3; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        filter-aaaa-on-v6 break-dnssec;
        filter-aaaa { fd92:7065:b8e:ffff::3; };
index eb5054d82c6b9972dbc7ed37ec3537517327def5..3f7cbcb16e17f82a21d636bd241bb854ced601ab 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { fd92:7065:b8e:ffff::4; };
        recursion no;
+       dnssec-validation no;
        notify yes;
        filter-aaaa-on-v4 break-dnssec;
        filter-aaaa { 10.53.0.4; };
index 83baa449fbbfb901ddde205654bc25c298a66cf3..56a546e359953a801aca5e6f648eff01869628e6 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { fd92:7065:b8e:ffff::4; };
        recursion no;
+       dnssec-validation no;
        notify yes;
        filter-aaaa-on-v6 break-dnssec;
        filter-aaaa { fd92:7065:b8e:ffff::4; };
index 0bb0e3d2692d97372dea547b25ae03863ff775e6..693d703467ad9d672ab28b1c87a3726b22a0ede2 100644 (file)
@@ -14,3 +14,4 @@ rm -f ns*/named.conf
 rm -f ns*/named.lock
 rm -f ns*/named.run
 rm -f ns*/named.memstats
+rm -f ns*/managed-keys.bind*
index 3052d2773a2381f7f3f0d1de3e059e6cc2ed2063..3c0dd682dd53922b0ced80ff7cbb9b78b49bc088 100644 (file)
@@ -15,3 +15,4 @@ rm -f */named.conf
 rm -f */named.memstats
 rm -f */named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 7ce81dde055759987446c97323cbb5f8ae60332a..462b7378c012d5c73ee68fa33140709b9c750ecd 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "." {
index ff104d466f7c5f53ac5ae16bb830ffe75dcd3951..522e965393079bb4a9880562ead2058d6e8c54cc 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "." {
index 80a4f7e684cfed131d861a4f316a7dc077bc1197..0fdcf65e5243d549ffd3a64c3f97bb06b5a910a6 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on-v6 { none; };
        forwarders { 10.53.0.2; };
        forward first;
+       dnssec-validation yes;
 };
 
 zone "." {
index 480530b0f27cb1e59f15abf79a951027114338f3..971fe0c487e2112609278305f786934b8e19cf7d 100644 (file)
@@ -17,6 +17,8 @@ options {
        pid-file "named.pid";
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
+       recursion yes;
+       dnssec-validation yes;
 };
 
 zone "." {
index 0e65985d52634654cf3ebb757cd1f0296e5d9cb6..f86de1a4241220b76dca147bd814b295c75af0b9 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on-v6 { none; };
        forward only;
        forwarders { 10.53.0.4; };
+       dnssec-validation yes;
 };
 
 zone "." {
index d6fe94b852c933cea39938d7a52e9abe47192e02..85caf2f86f67852abdadcc67dc47e684ed24e805 100644 (file)
@@ -17,3 +17,4 @@ rm -f data2/*dat
 rm -f ns?/named.run
 rm -f ns?/named.memstats
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index a42531196da7bacd84e1ca2cf61dd7b764b8a577..e926f683d06fc88ec67fb003fdec43239b145317 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 1372d410f0ac4dc66f62b96561bc5787f89360da..75f86bb223899bde0a2ca4a487b303f62cd1e226 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index c7a0ad2d58db679fe21d33e625b12f1d904a5335..694b163b63ba4e28cadfba6d729971dbc5d198f0 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 68abc85f164eb9c0dd1b10f54baae4b719ea406f..c731d8bcb477a13e14060928f7a602e1fc610973 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 05a331406dea9cca293aef821de715a42672dd8a..9f25514c9bccd97e45695c14d05e8a3b6cc51262 100644 (file)
@@ -24,6 +24,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
        blackhole { blocking; };
 };
index 9689b1e2bf41bb89a4a5deb32f63a07c41b74f1e..34902f47ffb2b64ef477875f41a3bd26dea07dc2 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 127.0.0.1; 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 01ee377cba05e405677ad9e587d1097db9d55ee8..6481ceb8d43775c8111be9324f9a02fdc9f43b4f 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { fd92:7065:b8e:ffff::2; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data2";
 };
 
index 541f904b38f086f6693de12c388f31e6e0cc5b5f..41514d2663d6da0dc1afb9370c8f9663188fa1ce 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index a8cf6a3a8e0fa53308787ad229516f7ec524e8df..bc45fde7e962262e35f87c1db95a56a633a369dc 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 81e3e65d4a369311fd160288bb56cd4a0df5b35b..4b9881e2371aa319cd8abf3356cec60176e1ea40 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 0c4ce5084ba1520b8cba04a89ccf684e3e72f2ae..a9091c596893707cb4037abf79fdb2bfbb871099 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 195133bf9ff98109e57c394dae1347b7e7b69ebc..035e088b6d6f853247fe134e4f62785a82ed982e 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { fd92:7065:b8e:ffff::1; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 4fa4626da25958a7cacd30fe47a4a2ff11a7ccf5..511e0277b3c7d31a847629f752f208da0c981c38 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 2840c8fbc54c2618e5dda4aa85be776889ff4a00..7297c0f20e164a385956e3b51c86c083ae982d1d 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 720f7accb99a648555d5b6410931ee373cee5f60..93b40ff533c22975af44e494accf53215bade7d6 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        geoip-directory "../data";
 };
 
index 25e408dc12bac133b29025c757983a4fc4dcdb3c..d3dab3e7e6a4959046fe631cfa9d705973d6b1dd 100644 (file)
@@ -18,3 +18,4 @@ rm -f */named.conf
 rm -f */named.memstats
 rm -f */named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 3779676eea43ffd3b40a8db34ec8dc4ceb12547d..6cfeec24663af82138f3263567037b09901fb4fd 100644 (file)
@@ -16,3 +16,4 @@ rm -f dig.out*
 rm -f */named.run
 rm -f */named.memstats
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 7a8e0d3aaf55acf14e4a875769e5292cfca1bdb2..7f1c61c3fb7f0669196d189c4434821c33a2ee08 100644 (file)
@@ -14,3 +14,4 @@ rm -f */named.run
 rm -f */named.conf
 rm -f dig.out.*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 80e5eb914d5a1d74a91e8e8d0c9a54802270c992..7da6af1a15baa8d73746f8d0aba8aadc2444f5a0 100644 (file)
@@ -121,3 +121,4 @@ rm -f dig.out.*
 rm -f ns3/nzf-*
 rm -f rndc.out.ns*
 rm -rf ns3/removedkeys
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index d9c14533b98ff043bae69b7ef72e0d1b13afc742..9b9c6b3cc35ee4cee5b38e27e00f3fe86601d4b3 100644 (file)
@@ -13,3 +13,4 @@ rm -f dig.out.test*
 rm -f */named.memstats
 rm -f */named.conf
 rm -f */named.run
+rm -f ns*/managed-keys.bind*
index a935a955a714c9f060fc1cee6d8cfb77440fd5e4..d75c36e4eb8a666ca5d4b2ee0a522993ef0f77d9 100644 (file)
@@ -19,3 +19,4 @@ rm -f */ans.run
 rm -f dig.out dig.out1 dig.out2 dig.out3
 rm -f ns3/large.db
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 53b12b031b8a8a2e9940c74c0559a9eab86e4164..6398ac56ac4e5b426efe8d8acc3cd241cc9cdaa6 100644 (file)
@@ -14,3 +14,4 @@ rm -f ns*/named.run
 rm -f ns*/named.conf
 rm -f ns*/named.stats
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index dc9f0a0c8437fd81dee2f8fa44e122c1df9ec6a5..ba4908a23336a1168f663830a43645cba21b7d8c 100644 (file)
@@ -13,3 +13,4 @@ rm -f */K*.key
 rm -f */K*.private
 rm -f coverage.* keymgr.*
 rm -f policy.out
+rm -f ns*/managed-keys.bind*
index 50237dc5a3a8833f3f0819aace84ddb42ef38995..79432ec3979405c6d8bd3c7097de31ace48b56e1 100644 (file)
@@ -23,3 +23,4 @@ rm -f ns7/dsset-*
 rm -f ns7/edns512-notcp.db
 rm -f ns7/signer.err
 rm -f ns7/trusted.conf
+rm -f ns*/managed-keys.bind*
index c5833a41c68bbb0308f73b3a58083553e97c7ec8..d62480b04dc00c4ec3e802a1834c189efe88ac8f 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
 };
 
 zone "." {
index e3edb027a19f1a5b8171c427de0add6e8d4735fb..9a5581786fa576b56f0145e693d9695f1ae3b713 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
 };
 
 zone "." {
index 552227d6c8ce1326e971ff58833907884c8ac102..1e0a55a889dfe55af10889145fe70338db256beb 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "dropedns" {
index 8d10f9372d11bcb7366bbbfc63508bf2d5694795..e4c2c1bab5cc9338381d8141731e340bd0094d4c 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "dropedns-notcp" {
index 91c1203245bb1d5388a3bbd9ca6fb26e002a9886..068c99ec8b9bcba05b65103ca71ec9c889833e9c 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "plain" {
index 2cb4af43b2fbcd379ab339319ef69bc9272843db..283b174762919a742e674262164429a7f45797bc 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "plain-notcp" {
index 8080003780b1a5d4a5a732e0b2c62f2b55f1afe6..a62ccf1db3991388bb4c759896a461f69d2cf8e4 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.6; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "edns512" {
index d48a190c6250b63b924ff4bd37dd2d80ee18aae8..6aa47013f70fb41d96ed0d20ee5cd93becd48a00 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.7; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "edns512-notcp" {
index 73f4bc3a8d74b7d01b1b3c1907c621d8fd721f7b..8425db3d46a91298abe6e1eedfb71cbd89b60667 100644 (file)
@@ -17,3 +17,4 @@ rm -f */named.memstats
 rm -f */named.conf
 rm -f */named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index cdeef433d06b85b4d63f6e55a4aee75eba361572..9aef96a51a4e1a949499978e82a2c0ffef528b21 100644 (file)
@@ -32,3 +32,4 @@ rm -f ns1/named_ts
 rm -f ns1/named_ts.*
 rm -f ns1/named_unlimited
 rm -f ns1/named_unlimited.*
+rm -f ns*/managed-keys.bind*
index 894e75a085457646aec900b72d6ebb5af91b6104..11cc2c958823572cb4ff448c0ceb4962de1d3af6 100644 (file)
@@ -15,3 +15,4 @@ rm -f */named.conf
 rm -f */named.run
 rm -f ns*/named.lock
 rm -f checkzone.out*
+rm -f ns*/managed-keys.bind*
index d50ed954537818c477332d8d9bf0564c8fa48021..84bca8ca74fcb9da6174932777a6208e6adbfd9b 100755 (executable)
@@ -31,3 +31,4 @@ rm -f baseline.txt text.1 text.2 raw.1 raw.2 map.1 map.2 map.5 text.5 badmap
 rm -f ns1/Ksigned.* ns1/dsset-signed. ns1/signed.db.signed
 rm -f rndc.out
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index df237a7395f5bb884ea41cc2ffbfaef5680ee6ee..503f79a5d2652b4f34e904d61de93e4489a96189 100644 (file)
@@ -20,3 +20,4 @@ rm -f ns1/named.secroots ns1/root.db.signed* ns1/root.db.tmp
 rm -f */named.conf
 rm -rf ns4/nope
 rm -f ns5/named.args
+rm -f ns*/managed-keys.bind*
index b7e34ebefd8143b7402692bb26061517faeb6c0e..e83b11f60b315b96395aa202040db6aabd2bd877 100644 (file)
@@ -15,3 +15,4 @@ rm -f ns*/named.memstats
 rm -f ns*/named.run
 rm -f ns*/named.pid
 rm -f ns*/named.conf
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index 7f0b4075bca4bfab93fb338212f75a10a789a18c..ef42efa154e42fc138eeb92440a537dc2afa52c4 100644 (file)
@@ -33,3 +33,4 @@ rm -f ns5/x21.bk-c
 rm -f ns5/x21.bk-c.jnl
 rm -f ns5/x21.db.jnl
 rm -f tmp
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index 46d78fa7b3ccf1c26feea0e31f73582c19a89c09..6c0cb039aa96e3fb74eb501c5646a92639757dc9 100644 (file)
@@ -13,3 +13,4 @@ rm -f ns*/named.lock
 rm -f ns*/named.memstats
 rm -f ns*/named.run
 rm -f ns*/named.conf
+rm -f ns*/managed-keys.bind*
index 74af65d96a239ead33de1ad8050d5caeb8a0993e..7975532f8ec0bfefe1890d2f1be79290d6b9491f 100644 (file)
@@ -46,3 +46,4 @@ rm -f ns2/sample.db
 rm -f update.out.*
 rm -f check.out.*
 rm -f update.out.*
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index 8b58ed33d3c025daa951c1e36191a0df87ee4328..3a6ad6d9b93e04f70d6eab5e9839ba7fb82801f8 100644 (file)
@@ -16,3 +16,4 @@ rm -f dig.out.*
 rm -f rndc.out*
 rm -f ns*/*.nzf
 rm -f ns*/*.nzd ns*/*.nzd-lock
+rm -f ns*/managed-keys.bind*
index f08874606d5b5b4e6c3f2776624c0932b0c3e99c..a6e557f71f163a8f9c792892984d2264629db0fa 100644 (file)
@@ -13,3 +13,4 @@ rm -f ns*/named.run
 rm -f ns*/named.stats
 rm -f ns*/named.lock
 rm -f ns*/named.conf
+rm -f ns*/managed-keys.bind*
index f0041837831c831d52c3399487abe2c568bc96d6..1979e715234339d4ea782ca20b2b5dba72e959ea 100644 (file)
@@ -22,3 +22,4 @@ rm -rf ns2/example.com.db
 rm -rf nsupdate.out.test
 rm -f ns*/named.lock
 rm -f ns*/named.conf
+rm -f ns*/managed-keys.bind*
index f4c4b131b9036ecb4f80847820dc04c32fceaf5b..2517b94e02f203b46e5e5cc191e5328947eb65cc 100644 (file)
@@ -14,3 +14,4 @@ rm -f */named.memstats
 rm -f */named.run
 rm -f raw* output*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 828bc40b7b44b0f018184f6a46265a1ce8d12d2c..1a6ec06b4d4f9df7f2440ce953d1d398bf90ac58 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index 6df0c663a0a931daeccb3976d2112ece5f103bf4..291e66ab06cfb200bbd3abb6b1201ae91a620dbb 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
 };
 
index a17babd54c2927c5f932aa50c262962d433011bf..25614d865f6cee091e72591127e0e235e376142b 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
 };
 
index 0b8a54b5aaf5c85a111822a43fd541ebbe74787b..14cdc4f73b45df5e776145e235ee8a8f0c69d761 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on-v6 { none; };
        keep-response-order { 10.53.0.7/32; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
 };
 
index f5be432d98ed5d7bf1f215e0adb7d9387e001bd0..4960cd1358b1bd689be1e9c07343c79744518d65 100644 (file)
@@ -14,3 +14,4 @@ rm -f dig.out* pin upd.log*
 rm -f ns1/*.key ns1/named.memstats
 rm -f supported
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 5ac9a2fbe69383e6fd35cbe131b5ec5fa3487e67..0e96eda38a7e24e158b38b1ccac326c38ad45b13 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify no;
 };
 
index 4af1c397c68a8f21e209083d7dcadbe8c769462e..1fed82ca1922e51f37010f3f41823b59196b779b 100644 (file)
@@ -14,3 +14,4 @@ rm -f dig.out pin
 rm -f ns1/*.key ns1/named.memstats
 rm -f supported
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 7cd80742011b1dc8eebeecef6cb3dc90fd5b4f19..77d970ec579ae08fd166bd1901992b2bd5b05cd6 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify no;
 };
 
index f856c8608d77d91256024a254cd2ba2260e47d53..7a5d73a4b5959e7a4da9d16994f3ca9a8b3eb382 100644 (file)
@@ -16,3 +16,4 @@ rm -f ns?/named.memstats
 rm -f ns?/named.run
 rm -f ns*/named.conf
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index f8868f5176ddebac377ea18848d323f02b130df8..00fa44b3baa189ae0b598ffdbf13b4ff30927101 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "." { type master; file "root.db"; };
index f7f6c6a7651e4cc719fbdcd16d7719e8eb3a1708..a649db11e330f21d512ba7f309563c94853a28ee 100644 (file)
@@ -20,6 +20,8 @@ options {
        listen-on-v6 { none; };
        servfail-ttl 0;
        max-recursion-depth 12;
+       recursion yes;
+       dnssec-validation yes;
 };
 
 key rndc_key {
index f051cf531c099260732948aea1ff3c1af0c7a550..806eb5170ee20c930fcbbfbba80c5478637d9493 100644 (file)
@@ -20,6 +20,8 @@ options {
        listen-on-v6 { none; };
        servfail-ttl 0;
        max-recursion-depth 5;
+       recursion yes;
+       dnssec-validation yes;
 };
 
 key rndc_key {
index 6c235aff52c623da35e923ef0f129b7e48b57e17..a0c87a2dd9157af4fcfc42842c665cf8dbbd9a69 100644 (file)
@@ -21,6 +21,8 @@ options {
        servfail-ttl 0;
        max-recursion-depth 100;
        max-recursion-queries 50;
+       recursion yes;
+       dnssec-validation yes;
 };
 
 key rndc_key {
index 2d7d5c18b2c2b8eae86b730fb270b058df64b9a3..dd254ad6a142607f8ef0e01af6f853f4fed392b0 100644 (file)
@@ -21,6 +21,8 @@ options {
        servfail-ttl 0;
        max-recursion-depth 100;
        max-recursion-queries 40;
+       recursion yes;
+       dnssec-validation yes;
 };
 
 key rndc_key {
index c13d918dadd5b8634618c59852670893821a60d1..27a65d2a5e3c15d174ee071ddc2d2b3d33b14789 100644 (file)
@@ -28,3 +28,4 @@ rm -f ns3/nsec3.db*
 rm -f ns3/signed.db*
 rm -f ns4/*.db
 rm -f rndc.out
+rm -f ns*/managed-keys.bind*
index 4dfde1f3e7246b508f0059805762bc454371b13a..78c95aeb40845a5ce501d0ab9961d87673ccc394 100644 (file)
@@ -34,3 +34,4 @@ rm -f resolve.out.*.test*
 rm -f .digrc
 rm -f ns*/named.lock
 rm -f ns5/trusted.conf
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index af83a70c02eb3642b72ae1ed3aa94ecd0cd1bff4..c7d5d14ce5d04548b630e3183ea02c22acf3997c 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; }
                 except-from { "example.org"; };
        deny-answer-aliases { "example.org"; }
index c679dc31515a4a971b61093684d51911c1ede3da..2a6d90960f27d2b66c9bed83ed904b33a8ef5569 100644 (file)
@@ -20,7 +20,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion no;
-       // minimal-responses yes;
+       dnssec-validation no;
        /* test that named loads with root-delegation-only */
        root-delegation-only;
 };
index 07205c9938cd8fa42ad25176d256b44e272348d9..b1d431e703859c23219f6d4083645c31dcf7b990 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        querylog yes;
 };
 
index 1fcfa0cd52a6bf0ffd453b5348ce090b51edd377..6661620e13fe23184daf54544d3d13062d24c46f 100644 (file)
@@ -20,7 +20,7 @@ options {
        listen-on { 10.53.0.6; };
        listen-on-v6 { none; };
        recursion no;
-       // minimal-responses yes;
+       dnssec-validation no;
        querylog yes;
        /*
         * test that named loads with root-delegation-only that
index 6828ad2672e428c815502e8291a74f7df4e87abc..787705984d16eefd45afe304040d70f9f823e522 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.7; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        empty-zones-enable yes;
        disable-empty-zone 20.172.in-addr.arpa;
        /*
index ad8988f3448f0a003572d753ca8e184a5425c4e9..b966e783b7d79ff1815ce2f636f1517ee51f3351 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.7; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        empty-zones-enable yes;
        disable-empty-zone 20.172.in-addr.arpa;
        /*
index df8aa77210fc6546474750073439e1b6c4c3d7e8..65393720bdbecb28ef1c09c5a90cd503392ae433 100644 (file)
@@ -24,3 +24,4 @@ rm -f ns*/named.conf
 rm -f nsupdate.out.*.test*
 rm -f python.out.*.test*
 rm -f rndc.out.*.test*
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index 702002bc4c7204983d4de4696eb52aaf2664e6e5..58b52739457b52d08852d7ee660dc76ea0bc585d 100644 (file)
@@ -21,3 +21,4 @@ rm -f ns1/root.db.signed
 rm -f ns2/Kexample.*
 rm -f ns2/example.db
 rm -f ns2/example.db.signed
+rm -f ns*/managed-keys.bind*
index c4e1872aa0251561c2ef1ce467a14c7643c15e61..44ceff4c4ae459bdd44c79e818527697f73fdb82 100644 (file)
@@ -22,3 +22,4 @@ rm -f dnsrps*.conf
 rm -f dnsrpzd.conf
 rm -f dnsrpzd-license-cur.conf dnsrpzd.rpzf dnsrpzd.sock dnsrpzd.pid
 rm -f tmp
+rm -f ns*/managed-keys.bind*
index 85f1fe92c334ae06e8b2575c20db827f5d610bc8..ffd9dfd50a82ea5005311a3855493d7f580d3538 100644 (file)
@@ -26,3 +26,4 @@ rm -f ns3/named2.conf
 
 rm -f dnsrps*.conf dnsrpzd*
 rm -f ns*/session.key
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index e8105a2e1f9a2eb897c5d0a50bb0f1918d3d46f2..e5c87052d5d8b87bc5242e9e9607ac9fabc189ce 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        querylog yes;
 };
 
index 8120a547afcfc75f3faa82dddaf6f069ff981592..c8ef0aee43e41efbf7ed21c97b1fc9c8ef3b607c 100644 (file)
@@ -29,4 +29,7 @@ view "recursive" {
     # policy zones to be tested
     zone "clientip1" { type master; file "db.clientip1"; };
     zone "clientip2" { type master; file "db.clientip2"; };
+
+    recursion yes;
+    dnssec-validation yes;
 };
index bfd0b692cb22d2adf9fd1bd1c39c0a84193952cf..c3c61643264141d9cf48609305b2ef2c6c7a9920 100644 (file)
@@ -29,4 +29,7 @@ view "recursive" {
 
     # policy zones to be tested
     zone "clientip21" { type master; file "db.clientip21"; };
+
+    recursion yes;
+    dnssec-validation yes;
 };
index 58a0dc9a643048f41c1459fac6f9901797998df8..682082085894672e8f64f8c44e9a9a5eaba5bbb3 100644 (file)
@@ -21,6 +21,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        querylog yes;
 
        # let ns3 start dnsrpzd
index f690495894239f24b9a7bad964b4202b10c08267..b692926c633ccd77bde1f6dedb4e06baeeebfc73 100644 (file)
@@ -17,4 +17,7 @@ view "recursive" {
        type hint;
        file "root.hint";
     };
+
+    recursion yes;
+    dnssec-validation yes;
 };
index 731b97f6cfdf464171c0dda785e3fac6283af0fb..10c66a3e6c5548c7f9f9bca843b067407fb633ea 100644 (file)
@@ -31,4 +31,7 @@ view "recursive" {
     zone "log1" { type master; file "db.log1"; };
     zone "log2" { type master; file "db.log2"; };
     zone "log3" { type master; file "db.log3"; };
+
+    recursion yes;
+    dnssec-validation yes;
 };
index f4a336801e189a8ba53c7afbab08b70bd08a60f3..a710793e231c2a28b1c6be1182dc264c42fb7830 100644 (file)
@@ -153,4 +153,7 @@ view "recursive" {
     zone "max62" { type master; file "db.max62.local"; };
     zone "max63" { type master; file "db.max63.local"; };
     zone "max64" { type master; file "db.max64.local"; };
+
+    recursion yes;
+    dnssec-validation yes;
 };
index 91f06932586fed2943d3ded3a9baa284bc54f4e4..963e3b0e8a5b7c67270da5ca0eb5067e417544c5 100644 (file)
@@ -27,4 +27,7 @@ view "recursive" {
 
     # policy zones to be tested
     zone "wildcard1" { type master; file "db.wildcard1"; };
+
+    recursion yes;
+    dnssec-validation yes;
 };
index a4e2dd5222a6b2f355e29fff61c74ea1a67bd255..f758b3a012fd0161cf942a3285f793c74a68ebc4 100644 (file)
@@ -29,4 +29,7 @@ view "recursive" {
     # policy zones to be tested
     zone "wildcard2a" { type master; file "db.wildcard2a"; };
     zone "wildcard2b" { type master; file "db.wildcard2b"; };
+
+    recursion yes;
+    dnssec-validation yes;
 };
index e53aa4d88e5dc8699854444cce3feebaf79fbfc3..bb8555cd0477aa7723307a90140210785e7bd79e 100644 (file)
@@ -27,4 +27,7 @@ view "recursive" {
 
     # policy zones to be tested
     zone "wildcard3" { type master; file "db.wildcard3"; };
+
+    recursion yes;
+    dnssec-validation yes;
 };
index 55b75b3eb238c7994d3cfc4e452a11a16f9a3f79..957d911c8f73691c7afdae0d59714bb1bf1d9609 100644 (file)
@@ -25,6 +25,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        response-policy { zone "policy"; }
                qname-wait-recurse yes
                nsip-enable yes
index c554ec15d6f32229c5c8e7593df09b2e0e772e98..961d2d2fb2fab1c7e71449c352a0843835a06875 100644 (file)
@@ -24,6 +24,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        response-policy { zone "policy"; } nsip-wait-recurse no
                qname-wait-recurse yes
                nsip-enable yes
index 24e5115ae6436159bbd82d17f43d28bd0ae0792c..bcdbc97d6025d186524fbc52cda865ec5e40d327 100644 (file)
@@ -21,6 +21,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "child.example.tld" { type master; file "child.example.db"; };
index 55a1c12b991db45da5e8d0de3d8be0ac7caf05b3..d42e4597bf3c47533e5e3bea77fea0f6332c8e7c 100644 (file)
@@ -15,3 +15,4 @@ rm -f ns3/bl*.db */*.jnl */*.core */*.pid
 rm -f ns*/named.lock
 rm -f ns*/named.conf
 rm -f broken.out
+rm -f ns*/managed-keys.bind*
index 4605e46e3a7e1f47f104b7b6e24b064bda681b29..2faa95c8be6395cfc9dc4530afcda67637849276 100644 (file)
@@ -19,6 +19,8 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        notify no;
+       recursion yes;
+       dnssec-validation yes;
 };
 
 zone "." {type master; file "root.db";};
index 6a506234f3469b7282b14bf588e1b297ef71650c..66ab0ed7700b2b8fc7cc5c8a6a47929910232250 100644 (file)
@@ -20,6 +20,8 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        notify no;
+       recursion yes;
+       dnssec-validation yes;
 
        rate-limit {
            responses-per-second 2;
index 5be45fac8115ab879a619044eaa0faa90eb0c649..1bacc6bf88dab5c015efd612ac0d67b6ea358224 100644 (file)
@@ -19,6 +19,8 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        notify no;
+       recursion yes;
+       dnssec-validation yes;
 
        // check that all of the options are parsed without limiting anything
        rate-limit {
index 07383c324121aac544a7405c3574e45728be0f15..a3949397768f4de1f9c49d6b48fa9ec591132fb2 100644 (file)
@@ -20,6 +20,8 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        notify no;
+       recursion yes;
+       dnssec-validation yes;
 
        rate-limit {
            responses-per-second 2;
index 2e19c523b76232d53d5606e44c0169c13abbc35b..8c0ded89a50547b6afba51743f0f5af94b632802 100644 (file)
@@ -18,3 +18,4 @@ rm -f ns?/named.run ns?/named.core
 rm -f */named.memstats
 rm -f ns*/named.lock
 rm -f ns*/named.conf
+rm -f ns*/managed-keys.bind*
index e3430f7c8742b272976c56cbb8eaff7522c6d420..6e009f48353286710aaf4efa2a922482cad726ed 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify no;
        rrset-order {
                name "fixed.example" order fixed;
index ae7eb9592f963613ee692acdf5fc7162e3ab585a..2f13d66c7178b4094cf777f8a736385541b63a91 100644 (file)
@@ -18,8 +18,8 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
-       // flush-zones-on-shutdown yes;
        rrset-order {
                name "fixed.example" order fixed;
                name "random.example" order random;
index 14153dfb0eeb3fa2846308ee3352691bb21c01fc..7343a7e61881fa5c7cef8537a56562fdaf708e6a 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        rrset-order {
                name "fixed.example" order fixed;
index 09de24d741a0a6c6fe8b412e553fa7300acac0c0..d76b71d7d1db71bc803b2f26868d39983a6f1f13 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        rrset-order {
                class IN type A name "host.example.com" order random;
index bba0f1177de4c81d9e4446f4f988b1ef91afc0bf..103fff0cb0898d8b2b5a1ed4568d3437ebb283a7 100644 (file)
@@ -18,3 +18,4 @@ rm -f ns2/signer.err
 rm -f dig.out.*
 rm -f ns*/named.lock
 rm -f ns*/named.conf
+rm -f ns*/managed-keys.bind*
index a2345248f9dcde527c04336807b92a9d163b82ff..1be52649b00e5562a11337363e6d733a219b36a6 100644 (file)
@@ -17,3 +17,4 @@ rm -f *.pid
 rm -f rndc.out*
 [ -d ns2/nope ] && chmod 755 ns2/nope
 rm -rf ns2/nope
+rm -f ns*/managed-keys.bind*
index 1e3d07eb8d04188dfdf40703c019c437d507360c..80469ef1ff8facac5133facd3195ebe4c82ec53d 100644 (file)
@@ -13,3 +13,4 @@ rm -f ns3/named.conf
 rm -f ns3/root.bk
 rm -f rndc.out.test*
 rm -f */named.run */named.memstats
+rm -f ns*/managed-keys.bind*
index e3e47ab857cf9f4dfd5cda7748bb51f4a81a7481..d1e0b5303c0137aad2d88bcea3b2d5c191c7be16 100644 (file)
@@ -18,3 +18,4 @@ rm -f dig.*
 rm -f sfcache.*
 rm -f ns*/named.lock
 rm -f ns5/named.run.part*
+rm -f ns*/managed-keys.bind*
index e9102915a5b2bc43c50046ef56331486bb318422..0a09cf21ab35462ae859dea7a8bd604baec9c68a 100644 (file)
@@ -14,3 +14,4 @@ rm -f */named.memstats
 rm -f */named.run
 rm -f */named.conf
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index df9a329b846b563e1b2423cbddb5700042b8b8a5..54086d17cd89db69f96e87b160cbd50f9ade9a2f 100644 (file)
@@ -11,3 +11,4 @@ rm -f ns1/named.run
 rm -f ns1/named.memstats
 rm -f ns*/named.lock
 rm -f ns*/named.conf
+rm -f ns*/managed-keys.bind*
index 52c25cd96e29fe28b6bf9dd0526b73ccaaeb18a0..4e0eecd6bda30848dfe9800a1777ce76e1e07555 100755 (executable)
@@ -23,3 +23,4 @@ rm -rf */*.signed
 rm -rf */K*
 rm -rf */dsset-*
 rm -rf */trusted.conf
+rm -f ns*/managed-keys.bind*
index 4f31755185382651a5888755c2a9ed182fa4e93a..f251b17b0b8fc4ee52129451f8a0156bee47ac1e 100644 (file)
@@ -16,6 +16,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify no;
 };
 
index 245c7c2a5b2ae78f2e60098d6f01452778a21a50..c3ae03c4d24864cb65570cac9bd4687abd93712f 100644 (file)
@@ -29,6 +29,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify no;
 };
 
index b58219652e44ef781d0ef0b1e326ae9af3852fe5..8f76cedce50fdb33b04b71841a414db2ab97bf78 100644 (file)
@@ -27,6 +27,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify no;
 };
 
index b3a82c9e99dc1c46c41629e1300b2aca53def22f..6ad8b20407ba705cbc18fa6928b90dbb584ab56c 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { ::1; };
        recursion no;
+       dnssec-validation no;
        notify no;
 };
 
index 830c835b6343f3e26cd1e1b974f0fe92c709eeba..c730331031b4f1e784b7ed528162379109198968 100644 (file)
@@ -24,3 +24,4 @@ rm -f dig.out*
 rm -f curl.out.*
 rm -f ns*/named.lock
 rm -f stats*out
+rm -f ns*/managed-keys.bind*
index 762b0fdf9d5c5d30f8e0ee2cfbea0020d17f6ab4..9bccd3c0639554c34b53e2bdd15a8ea2568bed3f 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index c046fe9e827ffe78a003b780b700f6e2a228f50f..be8b1e3e53bf0707c9e14838af1a9aed17daa665 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
 };
 
index fe07cead950c1deb3d28dd40c39b828bd0d522d3..67d041b67a28d576bc4517258fb5a2236430f452 100644 (file)
@@ -19,6 +19,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
 };
 
index 58eaaf86895ce0451047c4d5e4528318dbef649a..224e14f76f9e85761c021ba5efeae90fd179007d 100644 (file)
@@ -19,3 +19,4 @@ rm -f ns*/named.stats
 rm -f xml.*stats json.*stats
 rm -f xml.*mem json.*mem
 rm -f compressed.headers regular.headers compressed.out regular.out
+rm -f ns*/managed-keys.bind*
index 3d13acd14e61772c86e2c59d36083a848ac3fe14..21965163a4262da9449872b8a348399cd7b61cc4 100644 (file)
@@ -20,3 +20,4 @@ rm -f ns2/zone0*.db
 rm -f ns2/zone0*.jnl
 rm -f */named.memstats
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 59690e799e1b6c09f51994b679f478cf899f395e..d551eaf83de91e7e9960494a441be4753aff1c84 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index c0fb05f51f8c3d0e8bd93c9ec2f439aba31df3a7..c6163a2a63aea1059184e38ad3eff3492674767f 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
 };
 
index 5c67d066ffd4aa4fd12176f4b6769535a5c847c9..021d3b3e9abc4e7373332383a75a11cb3667d9c9 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
 };
 
index 65b5b164193aa0699caaf58e6523dfd8aae95432..d4cfa244133bfb6f3c052f86d16dc524c246db91 100644 (file)
@@ -20,6 +20,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
 };
 
index d5698ef8c06aec24069174217bff13054ab5a3d2..46c74595735c00dfcfd90a03ae226d8eb4ab2933 100644 (file)
@@ -17,3 +17,4 @@ rm -f */named.memstats
 rm -f */named.conf
 rm -f */named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index d56a5315453922d57af836fa7b9a448b5848ddc5..1e6e164c1207e9612da267390bf3395c93563f43 100644 (file)
@@ -20,3 +20,4 @@ rm -f ns1/root.db
 rm -f ns1/root.db.signed
 rm -f ns1/trusted.conf
 rm -f ns2/named_dump.db
+rm -f ns*/managed-keys.bind*
index 5fb4f9be1a308f1db57b1d8e208c3a954f4f99cd..3c9a05e2257dfb2f764e0c6fbee07296eef3c33c 100644 (file)
@@ -15,3 +15,4 @@ rm -f */named.conf
 rm -f */named.stats
 rm -f dig.out*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index a8ea8cf475829ee27cd1831fe8278e943b869ea2..cf1557927ed32b8cbc74d20ef76830c4ac36ad82 100644 (file)
@@ -15,3 +15,4 @@ rm -f */named.memstats
 rm -f */named.run
 rm -f ns1/_default.tsigkeys
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 5fdbb7d848373d01ca48d8937b97643ad88621bc..38505bcaf62f801373278a2e286d2be88a7f64cd 100644 (file)
@@ -20,3 +20,4 @@ rm -f */named.run
 rm -f ns*/named.lock
 rm -f Kexample.net.*
 rm -f keygen.out?
+rm -f ns*/managed-keys.bind*
index c97ade76514eadaff546906032f064384546c6d8..9a2240547c6539dc2ead3dd97a734342644828b6 100644 (file)
@@ -23,3 +23,4 @@ rm -f authsock.pid
 rm -f ns1/core
 rm -f nsupdate.out
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 8d734fae667a74c18efa49c8b13aca22d594a1fb..ddb0ab0bee640e12052a6320c92481f494b15f0e 100644 (file)
@@ -17,3 +17,4 @@ rm -f */*.bk
 rm -f */*.bk.*
 rm -f ns3/Kexample.*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index d6222042eb6b25c5e81b613e6f1b85494295a2ba..8224172b274ce680b813ed7b9eca2cfdda8b22b5 100644 (file)
@@ -24,3 +24,4 @@ rm -f Ksig0.example2.*
 rm -f keyname
 rm -f ns*/named.lock
 rm -f ns1/example2.db
+rm -f ns*/managed-keys.bind*
index 3fbb4b0b4ef5238df6d734035644ba781b698b52..98bde30199d6194b517be9a2742e215e52289759 100644 (file)
@@ -29,3 +29,4 @@ rm -f ns2/internal/inline.db.signed
 rm -f ns2/internal/inline.db.signed.jnl
 rm -f dig.out.external dig.out.internal
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*
index 8f99328904d1a899f72f19e82da06e05b8dbbcbb..ecd1e10db1a7980fc2c03de908f27cc663ecdaf4 100644 (file)
@@ -23,3 +23,4 @@ rm -f ns1/signer.err
 rm -f */named.memstats
 rm -f dig.out.ns*.test*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index e02ee67d2a1c0012efbd2ac2687120084dce21ac..3a54d275cdc9661c6f22dfc12eae8fd753201e64 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
        notify yes;
        dnssec-enable yes;
 };
index 67a50fcbc0557a094c0d4f24286440b81ce5c1d2..3a32a15956166217aaab768c2162eefcc4510a6a 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation no;
        notify yes;
 };
 
index ad908a4cc78088887ba9fbff4ff615b6ae7ad773..879d08f70cae6115774dbbb3ca7898316fa1e82b 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
 };
 
index 0b432c059b9ef94be239c68bad86e68ad75b35e5..94c5344805dae4589a9e5b4edf676632486953a1 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        forward only;
        forwarders { 10.53.0.2; };
index 9ef24c73ea621ee7d33905a645dc8930a7f3cf31..efe63a703078d07a06787fe53e1f2443a56031ba 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.5; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
        notify yes;
        dnssec-lookaside . trust-anchor dlv;
 };
index aac849baa9c4b800082f2eb4e827d4a402266065..10ff41a84f65f026c270dc38d0885f4a7b236ddf 100644 (file)
@@ -33,3 +33,4 @@ rm -f ns*/named.lock
 rm -f ns2/mapped.db
 rm -f ns3/mapped.bk
 rm -f ns1/ixfr-too-big.db ns1/ixfr-too-big.db.jnl
+rm -f ns*/managed-keys.bind*
index e823c9179e3cdbe36925ff6e262155a1287bf5f3..eb2e78c726afdd616191c3047bd477aaa755b7e1 100644 (file)
@@ -21,3 +21,4 @@ rm -f */named.memstats
 rm -f */named.conf
 rm -f */named.run
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index 00fc10a0326995a79a3a3d79b09459e0581f3d41..0f30776372f83489096d431d55ac7c9ade5f3bd6 100644 (file)
@@ -15,3 +15,4 @@ rm -f ns4/example.bk
 rm -f dig.out*
 rm -f query.list
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind*
index b24ceaa28ddf22a46c45efb72108cebba4bf95fb..f5ae6ee4fdc443c9554a5bd1608b4e253d965f70 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.1; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "." {
index b0f237ab25fdce257693befe72554d5e574042ee..671efcc6fe7055d960a77b78ee728b50bfc270fa 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.2; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation no;
 };
 
 zone "example" {
index 4036dd9efc0113e9ce8dd929b5e09ed79f4a6715..aa35d03fc56d2ae20aa877831c701e854798d53b 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.3; };
        listen-on-v6 { none; };
        recursion yes;
+       dnssec-validation yes;
 };
 
 zone "." {
index 00be8eca83ee4846eaeda622ebc1e45719d9ba4e..2fc72b672502d50e052eea56e7949b00f0f8996f 100644 (file)
@@ -18,6 +18,7 @@ options {
        listen-on { 10.53.0.4; };
        listen-on-v6 { none; };
        recursion no;
+       dnssec-validation yes;
 };
 
 zone "example" {
index 16cad7a876d3192b254b3d82de59f28d5dbd6122..5eb10437bd1058e7a941c93638e5924ed8d8cd94 100644 (file)
@@ -17,3 +17,4 @@ rm -f */*.db */*.db.signed */K*.key */K*.private */*.jnl */dsset-*
 rm -f */signer.err
 rm -f rndc.out.*
 rm -f ns*/named.lock
+rm -f ns*/managed-keys.bind* ns*/*.mkeys*