Test cds-digest-type configuration

Add tests for good and bad configuration values in the checkconf system
test.

diff --git a/bin/tests/system/checkconf/bad-kasp-digest-type.conf b/bin/tests/system/checkconf/bad-kasp-digest-type.conf
new file mode 100644 (file)
index 0000000..d5a160e
--- /dev/null
+++ b/bin/tests/system/checkconf/bad-kasp-digest-type.conf
@@ -0,0 +1,22 @@
+/*
+ * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+ *
+ * SPDX-License-Identifier: MPL-2.0
+ *
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0.  If a copy of the MPL was not distributed with this
+ * file, you can obtain one at https://mozilla.org/MPL/2.0/.
+ *
+ * See the COPYRIGHT file distributed with this work for additional
+ * information regarding copyright ownership.
+ */
+
+dnssec-policy "bad-digesttype" {
+       cds-digest-type foobar;
+};
+
+zone "example.net" {
+       type primary;
+       file "example.db";
+       dnssec-policy "baddigesttype";
+};

diff --git a/bin/tests/system/checkconf/bad-kasp-digest-unsupported.conf b/bin/tests/system/checkconf/bad-kasp-digest-unsupported.conf
new file mode 100644 (file)
index 0000000..e263a00
--- /dev/null
+++ b/bin/tests/system/checkconf/bad-kasp-digest-unsupported.conf
@@ -0,0 +1,22 @@
+/*
+ * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+ *
+ * SPDX-License-Identifier: MPL-2.0
+ *
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0.  If a copy of the MPL was not distributed with this
+ * file, you can obtain one at https://mozilla.org/MPL/2.0/.
+ *
+ * See the COPYRIGHT file distributed with this work for additional
+ * information regarding copyright ownership.
+ */
+
+dnssec-policy "bad-digesttype" {
+       cds-digest-type GOST;
+};
+
+zone "example.net" {
+       type primary;
+       file "example.db";
+       dnssec-policy "baddigesttype";
+};

diff --git a/bin/tests/system/checkconf/good-kasp.conf b/bin/tests/system/checkconf/good-kasp.conf
index 17309e5ea6e9353bd0d3df423ad0cccdb3a71ecc..9e19e26cf5e609bd8707cd4ff88ee1bea21f2654 100644 (file)
--- a/bin/tests/system/checkconf/good-kasp.conf
+++ b/bin/tests/system/checkconf/good-kasp.conf
@@ -17,6 +17,7 @@
 
 /* cut here */
 dnssec-policy "test" {
+       cds-digest-type "sha-256";
        dnskey-ttl 3600;
        keys {
                ksk key-directory lifetime P1Y algorithm ecdsa256;

diff --git a/bin/tests/system/checkconf/good.conf.in b/bin/tests/system/checkconf/good.conf.in
index 9b14aa69c1c4b28c183933ec2229185079700206..374d111cb81d2a2f610fe9039c55d5691c10aded 100644 (file)
--- a/bin/tests/system/checkconf/good.conf.in
+++ b/bin/tests/system/checkconf/good.conf.in
@@ -17,6 +17,7 @@
 
 /* cut here */
 dnssec-policy "test" {
+       cds-digest-type "sha-256";
        dnskey-ttl 3600;
        keys {
                ksk key-directory lifetime P1Y algorithm 13 256;