modules/policy: add integration test for 'domains' function

diff --git a/modules/policy/test.integr/kresd_config.j2 b/modules/policy/test.integr/kresd_config.j2
index 4ba83dd6a574a3d32e87ee0ceb3855de62a7884e..668c792356b824c4a9a5d69f83e6f9ac9962d388 100644 (file)
--- a/modules/policy/test.integr/kresd_config.j2
+++ b/modules/policy/test.integr/kresd_config.j2
@@ -1,5 +1,6 @@
 -- SPDX-License-Identifier: GPL-3.0-or-later
 {% raw %}
+policy.add(policy.domains(policy.DENY, {todname('example.com')}))
 policy.add(policy.suffix(policy.REFUSE, {todname('refuse.example.com')}))
 
 -- make sure DNSSEC is turned off for tests

diff --git a/modules/policy/test.integr/refuse.rpl b/modules/policy/test.integr/refuse.rpl
index ee8daa4f9a42b6c3a69a332a180700f4d0b890fc..08f994201d6145f94f6c124cfcefd305a1b93803 100644 (file)
--- a/modules/policy/test.integr/refuse.rpl
+++ b/modules/policy/test.integr/refuse.rpl
@@ -22,4 +22,23 @@ www.refuse.example.com. IN A
 SECTION ANSWER
 ENTRY_END
 
+STEP 30 QUERY
+ENTRY_BEGIN
+REPLY RD AD
+SECTION QUESTION
+example.com. IN A
+ENTRY_END
+
+STEP 40 CHECK_ANSWER
+ENTRY_BEGIN
+MATCH all answer
+REPLY QR RD AA RA NXDOMAIN
+SECTION QUESTION
+example.com. IN A
+SECTION ANSWER
+SECTION AUTHORITY
+example.com. 10800 IN SOA example.com. nobody.invalid. 1 3600 1200 604800 10800
+ENTRY_END
+
+
 SCENARIO_END