From: Štěpán Balážik Date: Wed, 2 Jul 2025 14:39:01 +0000 (+0200) Subject: Disable DNSSEC validation instead of enabling it with empty TAs in tests X-Git-Tag: v9.21.11~69^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=01d1ad798851b957d1e0fb004374fc37e2b32142;p=thirdparty%2Fbind9.git Disable DNSSEC validation instead of enabling it with empty TAs in tests There are many system tests where we set `dnssec-validation yes;` only to also set `trust-anchors { };` which effectively disables the validation. This commit replaces this convoluted setup with just `dnssec-validation no;`. --- diff --git a/bin/tests/system/additional/ns3/named.conf.in b/bin/tests/system/additional/ns3/named.conf.in index f47a3806289..96c5badefac 100644 --- a/bin/tests/system/additional/ns3/named.conf.in +++ b/bin/tests/system/additional/ns3/named.conf.in @@ -22,11 +22,10 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; minimal-responses no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cacheclean/ns2/named.conf.j2 b/bin/tests/system/cacheclean/ns2/named.conf.j2 index 418209cf04d..c7613457d67 100644 --- a/bin/tests/system/cacheclean/ns2/named.conf.j2 +++ b/bin/tests/system/cacheclean/ns2/named.conf.j2 @@ -22,10 +22,9 @@ options { notify yes; disable-empty-zone 127.IN-ADDR.ARPA; recursion yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/chain/ns1/named.conf.in b/bin/tests/system/chain/ns1/named.conf.in index 95ccf892063..9eb96b61c45 100644 --- a/bin/tests/system/chain/ns1/named.conf.in +++ b/bin/tests/system/chain/ns1/named.conf.in @@ -20,10 +20,9 @@ options { listen-on { 10.53.0.1; }; listen-on-v6 { none; }; recursion no; - dnssec-validation yes; + dnssec-validation no; notify yes; }; -trust-anchors { }; zone "." { type primary; file "root.db"; }; diff --git a/bin/tests/system/chain/ns7/named.conf.in b/bin/tests/system/chain/ns7/named.conf.in index 751521ba0cb..1d5a49ad80a 100644 --- a/bin/tests/system/chain/ns7/named.conf.in +++ b/bin/tests/system/chain/ns7/named.conf.in @@ -22,7 +22,7 @@ options { listen-on-v6 { fd92:7065:b8e:ffff::7; }; recursion yes; allow-recursion { any; }; - dnssec-validation yes; + dnssec-validation no; deny-answer-aliases { "example"; } except-from { @@ -31,7 +31,6 @@ options { qname-minimization disabled; // Regression test for GL #4652 }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/checknames/ns2/named.conf.j2 b/bin/tests/system/checknames/ns2/named.conf.j2 index 105a88dd5f2..3fff4fc06eb 100644 --- a/bin/tests/system/checknames/ns2/named.conf.j2 +++ b/bin/tests/system/checknames/ns2/named.conf.j2 @@ -20,12 +20,11 @@ options { listen-on { 10.53.0.2; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; check-names response warn; notify yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/checknames/ns3/named.conf.j2 b/bin/tests/system/checknames/ns3/named.conf.j2 index 487cecca282..738a06bf3ad 100644 --- a/bin/tests/system/checknames/ns3/named.conf.j2 +++ b/bin/tests/system/checknames/ns3/named.conf.j2 @@ -20,12 +20,11 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; check-names response fail; notify yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/checknames/ns4/named.conf.j2 b/bin/tests/system/checknames/ns4/named.conf.j2 index 7b121fe6340..15c2db829b2 100644 --- a/bin/tests/system/checknames/ns4/named.conf.j2 +++ b/bin/tests/system/checknames/ns4/named.conf.j2 @@ -21,13 +21,12 @@ options { listen-on-v6 { none; }; allow-transfer { any; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; check-names primary ignore; check-names secondary ignore; notify yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/checknames/ns5/named.conf.j2 b/bin/tests/system/checknames/ns5/named.conf.j2 index 62c870bf7c1..489e3a5e1c8 100644 --- a/bin/tests/system/checknames/ns5/named.conf.j2 +++ b/bin/tests/system/checknames/ns5/named.conf.j2 @@ -21,13 +21,12 @@ options { listen-on-v6 { none; }; allow-transfer { any; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; check-names master ignore; check-names slave ignore; notify yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cipher-suites/ns1/named.conf.in b/bin/tests/system/cipher-suites/ns1/named.conf.in index 8de44d1cb48..312f48908b9 100644 --- a/bin/tests/system/cipher-suites/ns1/named.conf.in +++ b/bin/tests/system/cipher-suites/ns1/named.conf.in @@ -63,13 +63,12 @@ options { notify explicit; also-notify { 10.53.0.2 port @PORT@; }; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; transfers-in 100; transfers-out 100; }; -trust-anchors { }; zone "." { type primary; diff --git a/bin/tests/system/cipher-suites/ns2/named.conf.in b/bin/tests/system/cipher-suites/ns2/named.conf.in index c81429c9025..61a39657519 100644 --- a/bin/tests/system/cipher-suites/ns2/named.conf.in +++ b/bin/tests/system/cipher-suites/ns2/named.conf.in @@ -36,10 +36,9 @@ options { notify no; ixfr-from-differences yes; check-integrity no; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cipher-suites/ns3/named.conf.in b/bin/tests/system/cipher-suites/ns3/named.conf.in index ab642f92cef..4e368a7dd51 100644 --- a/bin/tests/system/cipher-suites/ns3/named.conf.in +++ b/bin/tests/system/cipher-suites/ns3/named.conf.in @@ -36,10 +36,9 @@ options { notify no; ixfr-from-differences yes; check-integrity no; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cipher-suites/ns4/named.conf.in b/bin/tests/system/cipher-suites/ns4/named.conf.in index a690cf5c783..e60be884432 100644 --- a/bin/tests/system/cipher-suites/ns4/named.conf.in +++ b/bin/tests/system/cipher-suites/ns4/named.conf.in @@ -36,10 +36,9 @@ options { notify no; ixfr-from-differences yes; check-integrity no; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cipher-suites/ns5/named.conf.in b/bin/tests/system/cipher-suites/ns5/named.conf.in index c36b374a19e..fcbc2afec17 100644 --- a/bin/tests/system/cipher-suites/ns5/named.conf.in +++ b/bin/tests/system/cipher-suites/ns5/named.conf.in @@ -36,10 +36,9 @@ options { notify no; ixfr-from-differences yes; check-integrity no; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cookie/ns1/named.conf.j2 b/bin/tests/system/cookie/ns1/named.conf.j2 index 0bd93c93de1..6d42d94f586 100644 --- a/bin/tests/system/cookie/ns1/named.conf.j2 +++ b/bin/tests/system/cookie/ns1/named.conf.j2 @@ -38,7 +38,7 @@ options { listen-on { 10.53.0.1; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; } except-from { "example.org"; }; deny-answer-aliases { "example.org"; } @@ -49,7 +49,6 @@ options { nocookie-udp-size 512; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cookie/ns3/named.conf.j2 b/bin/tests/system/cookie/ns3/named.conf.j2 index cbebd074331..7f8c32536de 100644 --- a/bin/tests/system/cookie/ns3/named.conf.j2 +++ b/bin/tests/system/cookie/ns3/named.conf.j2 @@ -29,7 +29,7 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; } except-from { "example.org"; }; deny-answer-aliases { "example.org"; } @@ -41,7 +41,6 @@ options { require-server-cookie yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cookie/ns4/named.conf.j2 b/bin/tests/system/cookie/ns4/named.conf.j2 index 592be13ed07..06da09e6e21 100644 --- a/bin/tests/system/cookie/ns4/named.conf.j2 +++ b/bin/tests/system/cookie/ns4/named.conf.j2 @@ -29,13 +29,12 @@ options { listen-on { 10.53.0.4; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; cookie-algorithm siphash24; cookie-secret "569d36a6cc27d6bf55502183302ba352"; require-server-cookie yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cookie/ns5/named.conf.j2 b/bin/tests/system/cookie/ns5/named.conf.j2 index 2f51e1be944..535e8ef62f5 100644 --- a/bin/tests/system/cookie/ns5/named.conf.j2 +++ b/bin/tests/system/cookie/ns5/named.conf.j2 @@ -29,14 +29,13 @@ options { listen-on { 10.53.0.5; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; cookie-algorithm siphash24; cookie-secret "569d36a6cc27d6bf55502183302ba352"; cookie-secret "6b300e27a0db46d4b046e4189790fa7d"; require-server-cookie yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cookie/ns6/named.conf.j2 b/bin/tests/system/cookie/ns6/named.conf.j2 index 56c5e048579..ca4abec7b86 100644 --- a/bin/tests/system/cookie/ns6/named.conf.j2 +++ b/bin/tests/system/cookie/ns6/named.conf.j2 @@ -29,13 +29,12 @@ options { listen-on { 10.53.0.6; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; cookie-algorithm siphash24; cookie-secret "6b300e27a0db46d4b046e4189790fa7d"; require-server-cookie yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/cookie/ns8/named.conf.j2 b/bin/tests/system/cookie/ns8/named.conf.j2 index 36f052b8e40..540bc07af6b 100644 --- a/bin/tests/system/cookie/ns8/named.conf.j2 +++ b/bin/tests/system/cookie/ns8/named.conf.j2 @@ -28,12 +28,11 @@ options { pid-file "named.pid"; listen-on { 10.53.0.8; }; listen-on-v6 { none; }; - dnssec-validation yes; + dnssec-validation no; rate-limit {}; require-server-cookie yes; }; -trust-anchors { }; server 10.53.0.7 { require-cookie yes; }; diff --git a/bin/tests/system/database/ns1/named.conf.j2 b/bin/tests/system/database/ns1/named.conf.j2 index 059a15563db..9a84d79551d 100644 --- a/bin/tests/system/database/ns1/named.conf.j2 +++ b/bin/tests/system/database/ns1/named.conf.j2 @@ -32,10 +32,9 @@ options { listen-on-v6 { none; }; recursion no; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "database" { type primary; diff --git a/bin/tests/system/dns64/ns1/named.conf1.in b/bin/tests/system/dns64/ns1/named.conf1.in index bc6c2d23661..8a9aee20580 100644 --- a/bin/tests/system/dns64/ns1/named.conf1.in +++ b/bin/tests/system/dns64/ns1/named.conf1.in @@ -31,7 +31,7 @@ options { listen-on-v6 { none; }; allow-recursion { 10.53.0.1; }; notify yes; - dnssec-validation yes; + dnssec-validation no; dns64 2001:bbbb::/96 { clients { any; }; @@ -42,8 +42,6 @@ options { }; }; -trust-anchors { }; - zone "." { type primary; file "root.db"; diff --git a/bin/tests/system/dns64/ns1/named.conf2.in b/bin/tests/system/dns64/ns1/named.conf2.in index d7a6d1f80a4..422f2840a8f 100644 --- a/bin/tests/system/dns64/ns1/named.conf2.in +++ b/bin/tests/system/dns64/ns1/named.conf2.in @@ -31,7 +31,7 @@ options { listen-on-v6 { none; }; allow-recursion { 10.53.0.1; }; notify yes; - dnssec-validation yes; + dnssec-validation no; dns64 2001:bbbb::/96 { clients { any; }; @@ -45,8 +45,6 @@ options { }; }; -trust-anchors { }; - zone "." { type primary; file "root.db"; diff --git a/bin/tests/system/dns64/ns1/named.conf3.in b/bin/tests/system/dns64/ns1/named.conf3.in index 393e623b366..94a7f3f5640 100644 --- a/bin/tests/system/dns64/ns1/named.conf3.in +++ b/bin/tests/system/dns64/ns1/named.conf3.in @@ -31,11 +31,9 @@ options { listen-on-v6 { none; }; allow-recursion { 10.53.0.1; }; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; - zone "." { type primary; file "root.db"; diff --git a/bin/tests/system/dns64/ns2/named.conf.in b/bin/tests/system/dns64/ns2/named.conf.in index 49299aaf997..203c18b82c5 100644 --- a/bin/tests/system/dns64/ns2/named.conf.in +++ b/bin/tests/system/dns64/ns2/named.conf.in @@ -25,7 +25,7 @@ options { listen-on-v6 { none; }; recursion yes; notify yes; - dnssec-validation yes; + dnssec-validation no; dns64 2001:aaaa::/96 { clients { 10.53.0.2; }; @@ -60,7 +60,6 @@ options { response-policy { zone "rpz"; }; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/dns64/ns3/named.conf.in b/bin/tests/system/dns64/ns3/named.conf.in index a86686bdb0e..1de08a56d5b 100644 --- a/bin/tests/system/dns64/ns3/named.conf.in +++ b/bin/tests/system/dns64/ns3/named.conf.in @@ -29,7 +29,7 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { fd92:7065:b8e:ffff::3; }; notify yes; - dnssec-validation yes; + dnssec-validation no; allow-recursion { any; }; resolver-use-dns64 yes; @@ -40,7 +40,6 @@ options { }; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/dns64/ns4/named.conf.in b/bin/tests/system/dns64/ns4/named.conf.in index 485cdc82f92..2cb23368639 100644 --- a/bin/tests/system/dns64/ns4/named.conf.in +++ b/bin/tests/system/dns64/ns4/named.conf.in @@ -26,11 +26,10 @@ options { listen-on port @PORT@ { 10.53.0.4; }; // for start.pl listen-on-v6 { fd92:7065:b8e:fffe::10.53.0.4; }; notify yes; - dnssec-validation yes; + dnssec-validation no; recursion no; }; -trust-anchors { }; zone "." { type master; diff --git a/bin/tests/system/dnstap/ns1/named.conf.j2 b/bin/tests/system/dnstap/ns1/named.conf.j2 index daaf88731a3..fa96be906f9 100644 --- a/bin/tests/system/dnstap/ns1/named.conf.j2 +++ b/bin/tests/system/dnstap/ns1/named.conf.j2 @@ -28,11 +28,10 @@ options { dnstap { all; }; send-cookie no; require-server-cookie no; - dnssec-validation yes; + dnssec-validation no; qname-minimization disabled; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/dnstap/ns2/named.conf.j2 b/bin/tests/system/dnstap/ns2/named.conf.j2 index 12ae86322d6..cc3e33a0cc1 100644 --- a/bin/tests/system/dnstap/ns2/named.conf.j2 +++ b/bin/tests/system/dnstap/ns2/named.conf.j2 @@ -28,11 +28,10 @@ options { dnstap { all; }; send-cookie no; require-server-cookie no; - dnssec-validation yes; + dnssec-validation no; qname-minimization disabled; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/dnstap/ns3/named.conf.j2 b/bin/tests/system/dnstap/ns3/named.conf.j2 index d443c3818ab..23b6614e039 100644 --- a/bin/tests/system/dnstap/ns3/named.conf.j2 +++ b/bin/tests/system/dnstap/ns3/named.conf.j2 @@ -29,11 +29,10 @@ options { send-cookie no; require-server-cookie no; minimal-responses no; - dnssec-validation yes; + dnssec-validation no; qname-minimization disabled; }; -trust-anchors { }; server 10.53.0.1 { tcp-only yes; }; diff --git a/bin/tests/system/dnstap/ns4/named.conf.j2 b/bin/tests/system/dnstap/ns4/named.conf.j2 index 18c4da1100b..6607dc49287 100644 --- a/bin/tests/system/dnstap/ns4/named.conf.j2 +++ b/bin/tests/system/dnstap/ns4/named.conf.j2 @@ -28,11 +28,10 @@ options { dnstap { all; }; send-cookie no; require-server-cookie no; - dnssec-validation yes; + dnssec-validation no; qname-minimization disabled; }; -trust-anchors { }; server 10.53.0.1 { tcp-only yes; }; diff --git a/bin/tests/system/doth/ns1/named.conf.in b/bin/tests/system/doth/ns1/named.conf.in index df9a25daa7e..2d697ad130f 100644 --- a/bin/tests/system/doth/ns1/named.conf.in +++ b/bin/tests/system/doth/ns1/named.conf.in @@ -94,14 +94,13 @@ options { notify explicit; also-notify { 10.53.0.2 port @PORT@; }; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; transfers-in 100; transfers-out 100; max-records-per-type 0; }; -trust-anchors { }; zone "." { type primary; diff --git a/bin/tests/system/doth/ns2/named.conf.in b/bin/tests/system/doth/ns2/named.conf.in index a7b09611d1c..57bc6c9f82e 100644 --- a/bin/tests/system/doth/ns2/named.conf.in +++ b/bin/tests/system/doth/ns2/named.conf.in @@ -51,13 +51,12 @@ options { notify no; ixfr-from-differences yes; check-integrity no; - dnssec-validation yes; + dnssec-validation no; max-records-per-type 0; transfers-in 100; transfers-out 100; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/doth/ns3/named.conf.in b/bin/tests/system/doth/ns3/named.conf.in index daf31646430..0dfa27429e6 100644 --- a/bin/tests/system/doth/ns3/named.conf.in +++ b/bin/tests/system/doth/ns3/named.conf.in @@ -43,11 +43,10 @@ options { notify no; ixfr-from-differences yes; check-integrity no; - dnssec-validation yes; + dnssec-validation no; max-records-per-type 0; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/doth/ns4/named.conf.in b/bin/tests/system/doth/ns4/named.conf.in index d637a9c9ed4..feff457aaec 100644 --- a/bin/tests/system/doth/ns4/named.conf.in +++ b/bin/tests/system/doth/ns4/named.conf.in @@ -51,11 +51,10 @@ options { notify no; ixfr-from-differences yes; check-integrity no; - dnssec-validation yes; + dnssec-validation no; max-records-per-type 0; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/doth/ns5/named.conf.in b/bin/tests/system/doth/ns5/named.conf.in index 7aa3757cdb0..7390944a43c 100644 --- a/bin/tests/system/doth/ns5/named.conf.in +++ b/bin/tests/system/doth/ns5/named.conf.in @@ -39,11 +39,10 @@ options { notify no; ixfr-from-differences yes; check-integrity no; - dnssec-validation yes; + dnssec-validation no; max-records-per-type 0; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/fetchlimit/ns3/named1.conf.in b/bin/tests/system/fetchlimit/ns3/named1.conf.in index da1661d920f..335a4ecfd97 100644 --- a/bin/tests/system/fetchlimit/ns3/named1.conf.in +++ b/bin/tests/system/fetchlimit/ns3/named1.conf.in @@ -23,12 +23,11 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; fetches-per-server 400; }; -trust-anchors { }; server 10.53.0.4 { edns no; diff --git a/bin/tests/system/fetchlimit/ns3/named2.conf.in b/bin/tests/system/fetchlimit/ns3/named2.conf.in index d354dfd39fb..573d5fbc607 100644 --- a/bin/tests/system/fetchlimit/ns3/named2.conf.in +++ b/bin/tests/system/fetchlimit/ns3/named2.conf.in @@ -21,12 +21,11 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; fetches-per-zone 40; }; -trust-anchors { }; server 10.53.0.4 { edns no; diff --git a/bin/tests/system/fetchlimit/ns3/named3.conf.in b/bin/tests/system/fetchlimit/ns3/named3.conf.in index db32409ed30..63e6e5fa787 100644 --- a/bin/tests/system/fetchlimit/ns3/named3.conf.in +++ b/bin/tests/system/fetchlimit/ns3/named3.conf.in @@ -21,12 +21,11 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; recursive-clients 400; }; -trust-anchors { }; server 10.53.0.4 { edns no; diff --git a/bin/tests/system/fetchlimit/ns5/named1.conf.in b/bin/tests/system/fetchlimit/ns5/named1.conf.in index f26b8a19413..18e8bb55fa2 100644 --- a/bin/tests/system/fetchlimit/ns5/named1.conf.in +++ b/bin/tests/system/fetchlimit/ns5/named1.conf.in @@ -21,13 +21,12 @@ options { listen-on { 10.53.0.5; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; clients-per-query 5; max-clients-per-query 10; }; -trust-anchors { }; server 10.53.0.4 { edns no; diff --git a/bin/tests/system/fetchlimit/ns5/named2.conf.in b/bin/tests/system/fetchlimit/ns5/named2.conf.in index 32b281d79ae..8b64bde59e7 100644 --- a/bin/tests/system/fetchlimit/ns5/named2.conf.in +++ b/bin/tests/system/fetchlimit/ns5/named2.conf.in @@ -21,7 +21,7 @@ options { listen-on { 10.53.0.5; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; stale-answer-enable yes; stale-cache-enable yes; @@ -30,7 +30,6 @@ options { max-clients-per-query 10; }; -trust-anchors { }; server 10.53.0.4 { edns no; diff --git a/bin/tests/system/fetchlimit/ns5/named3.conf.in b/bin/tests/system/fetchlimit/ns5/named3.conf.in index 7fb1bafd80b..2b68d1baeff 100644 --- a/bin/tests/system/fetchlimit/ns5/named3.conf.in +++ b/bin/tests/system/fetchlimit/ns5/named3.conf.in @@ -21,7 +21,7 @@ options { listen-on { 10.53.0.5; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; stale-answer-enable yes; stale-cache-enable yes; @@ -31,7 +31,6 @@ options { max-clients-per-query 5; }; -trust-anchors { }; server 10.53.0.4 { edns no; diff --git a/bin/tests/system/filter-aaaa/ns1/named1.conf.in b/bin/tests/system/filter-aaaa/ns1/named1.conf.in index 2098420352f..3a7338c5802 100644 --- a/bin/tests/system/filter-aaaa/ns1/named1.conf.in +++ b/bin/tests/system/filter-aaaa/ns1/named1.conf.in @@ -20,12 +20,11 @@ options { listen-on { 10.53.0.1; }; listen-on-v6 { fd92:7065:b8e:ffff::1; }; recursion no; - dnssec-validation yes; + dnssec-validation no; notify yes; minimal-responses no; }; -trust-anchors { }; acl filterees { 10.53.0.1; }; diff --git a/bin/tests/system/filter-aaaa/ns1/named2.conf.in b/bin/tests/system/filter-aaaa/ns1/named2.conf.in index 87910becd54..6b421159ca5 100644 --- a/bin/tests/system/filter-aaaa/ns1/named2.conf.in +++ b/bin/tests/system/filter-aaaa/ns1/named2.conf.in @@ -20,12 +20,11 @@ options { listen-on { 10.53.0.1; }; listen-on-v6 { fd92:7065:b8e:ffff::1; }; recursion no; - dnssec-validation yes; + dnssec-validation no; notify yes; minimal-responses no; }; -trust-anchors { }; plugin query "@TOP_BUILDDIR@/filter-aaaa.so" { filter-aaaa-on-v6 yes; diff --git a/bin/tests/system/forward/ns3/named1.conf.in b/bin/tests/system/forward/ns3/named1.conf.in index 91de8f85403..e9830be4d73 100644 --- a/bin/tests/system/forward/ns3/named1.conf.in +++ b/bin/tests/system/forward/ns3/named1.conf.in @@ -24,10 +24,9 @@ options { listen-on-v6 { fd92:7065:b8e:ffff::3; }; forwarders { fd92:7065:b8e:ffff::2; }; forward first; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/forward/ns4/named.conf.in b/bin/tests/system/forward/ns4/named.conf.in index 5777c0de516..cd7c5000d9a 100644 --- a/bin/tests/system/forward/ns4/named.conf.in +++ b/bin/tests/system/forward/ns4/named.conf.in @@ -23,11 +23,10 @@ options { listen-on { 10.53.0.4; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; minimal-responses yes; }; -trust-anchors { }; statistics-channels { inet 10.53.0.4 port @EXTRAPORT1@ allow { localhost; }; }; diff --git a/bin/tests/system/forward/ns5/named.conf.in b/bin/tests/system/forward/ns5/named.conf.in index 15b89dd0e7c..b3e5e32b870 100644 --- a/bin/tests/system/forward/ns5/named.conf.in +++ b/bin/tests/system/forward/ns5/named.conf.in @@ -22,10 +22,9 @@ options { forward only; forwarders { 10.53.0.4; }; deny-answer-aliases { "rebind"; }; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/forward/ns7/named.conf.in b/bin/tests/system/forward/ns7/named.conf.in index c6e55a89bc1..592422f93dd 100644 --- a/bin/tests/system/forward/ns7/named.conf.in +++ b/bin/tests/system/forward/ns7/named.conf.in @@ -21,10 +21,9 @@ options { listen-on-v6 { none; }; forwarders { 10.53.0.4; }; forward first; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/forward/ns8/named.conf.in b/bin/tests/system/forward/ns8/named.conf.in index 13c38594e09..cd106972b88 100644 --- a/bin/tests/system/forward/ns8/named.conf.in +++ b/bin/tests/system/forward/ns8/named.conf.in @@ -21,10 +21,9 @@ options { listen-on-v6 { none; }; forwarders { 10.53.0.2; }; // returns referrals forward first; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/hooks/ns1/named.conf.j2 b/bin/tests/system/hooks/ns1/named.conf.j2 index 5055a00c53e..500ede379d0 100644 --- a/bin/tests/system/hooks/ns1/named.conf.j2 +++ b/bin/tests/system/hooks/ns1/named.conf.j2 @@ -19,12 +19,11 @@ options { pid-file "named.pid"; listen-on { 10.53.0.1; }; recursion no; - dnssec-validation yes; + dnssec-validation no; notify yes; minimal-responses no; }; -trust-anchors { }; plugin query "@TOP_BUILDDIR@/testlib-driver-async.so"; diff --git a/bin/tests/system/legacy/ns1/named1.conf.in b/bin/tests/system/legacy/ns1/named1.conf.in index bada7eb6307..1441674f402 100644 --- a/bin/tests/system/legacy/ns1/named1.conf.in +++ b/bin/tests/system/legacy/ns1/named1.conf.in @@ -20,10 +20,9 @@ options { listen-on { 10.53.0.1; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/masterfile/ns2/named.conf.j2 b/bin/tests/system/masterfile/ns2/named.conf.j2 index 4e66b4f1c0a..aafa398ae0e 100644 --- a/bin/tests/system/masterfile/ns2/named.conf.j2 +++ b/bin/tests/system/masterfile/ns2/named.conf.j2 @@ -24,10 +24,9 @@ options { allow-transfer { any; }; recursion no; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/mkeys/ns1/named1.conf.in b/bin/tests/system/mkeys/ns1/named1.conf.in index d45e98d768c..874fefebfd7 100644 --- a/bin/tests/system/mkeys/ns1/named1.conf.in +++ b/bin/tests/system/mkeys/ns1/named1.conf.in @@ -28,11 +28,10 @@ options { listen-on-v6 { none; }; recursion no; notify no; - dnssec-validation yes; + dnssec-validation no; allow-query { allowed; }; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/mkeys/ns1/named2.conf.in b/bin/tests/system/mkeys/ns1/named2.conf.in index d45e98d768c..874fefebfd7 100644 --- a/bin/tests/system/mkeys/ns1/named2.conf.in +++ b/bin/tests/system/mkeys/ns1/named2.conf.in @@ -28,11 +28,10 @@ options { listen-on-v6 { none; }; recursion no; notify no; - dnssec-validation yes; + dnssec-validation no; allow-query { allowed; }; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/mkeys/ns1/named3.conf.in b/bin/tests/system/mkeys/ns1/named3.conf.in index 12b8c71c546..3709b17a977 100644 --- a/bin/tests/system/mkeys/ns1/named3.conf.in +++ b/bin/tests/system/mkeys/ns1/named3.conf.in @@ -23,10 +23,9 @@ options { listen-on-v6 { none; }; recursion no; notify no; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/nsupdate/ns3/named.conf.in b/bin/tests/system/nsupdate/ns3/named.conf.in index 180ce700bf5..9405b5b6854 100644 --- a/bin/tests/system/nsupdate/ns3/named.conf.in +++ b/bin/tests/system/nsupdate/ns3/named.conf.in @@ -23,10 +23,9 @@ options { listen-on-v6 { none; }; recursion no; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/pipelined/ns2/named.conf.j2 b/bin/tests/system/pipelined/ns2/named.conf.j2 index 8cb605c8bd9..16f8821e6ff 100644 --- a/bin/tests/system/pipelined/ns2/named.conf.j2 +++ b/bin/tests/system/pipelined/ns2/named.conf.j2 @@ -20,11 +20,10 @@ options { listen-on { 10.53.0.2; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/pipelined/ns3/named.conf.j2 b/bin/tests/system/pipelined/ns3/named.conf.j2 index 96a9a92b6cb..3a4acb6090e 100644 --- a/bin/tests/system/pipelined/ns3/named.conf.j2 +++ b/bin/tests/system/pipelined/ns3/named.conf.j2 @@ -20,11 +20,10 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/pipelined/ns4/named.conf.j2 b/bin/tests/system/pipelined/ns4/named.conf.j2 index 3a187bf9350..666816e2b46 100644 --- a/bin/tests/system/pipelined/ns4/named.conf.j2 +++ b/bin/tests/system/pipelined/ns4/named.conf.j2 @@ -21,11 +21,10 @@ options { listen-on { 10.53.0.4; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/proxy/ns1/named.conf.in b/bin/tests/system/proxy/ns1/named.conf.in index 4e2c620cd7a..08999512aaf 100644 --- a/bin/tests/system/proxy/ns1/named.conf.in +++ b/bin/tests/system/proxy/ns1/named.conf.in @@ -50,11 +50,10 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; }; -trust-anchors { }; zone "example0" { type primary; diff --git a/bin/tests/system/proxy/ns3/named.conf.in b/bin/tests/system/proxy/ns3/named.conf.in index db1c3467e60..821c313831b 100644 --- a/bin/tests/system/proxy/ns3/named.conf.in +++ b/bin/tests/system/proxy/ns3/named.conf.in @@ -45,11 +45,10 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/reclimit/ns3/named1.conf.in b/bin/tests/system/reclimit/ns3/named1.conf.in index 295eae0864b..9f43188ede1 100644 --- a/bin/tests/system/reclimit/ns3/named1.conf.in +++ b/bin/tests/system/reclimit/ns3/named1.conf.in @@ -25,10 +25,9 @@ options { max-recursion-queries 50; max-recursion-depth 12; recursion yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/reclimit/ns3/named2.conf.in b/bin/tests/system/reclimit/ns3/named2.conf.in index 974b24bcff0..00b48e87031 100644 --- a/bin/tests/system/reclimit/ns3/named2.conf.in +++ b/bin/tests/system/reclimit/ns3/named2.conf.in @@ -24,10 +24,9 @@ options { qname-minimization disabled; max-recursion-depth 5; recursion yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/reclimit/ns3/named3.conf.in b/bin/tests/system/reclimit/ns3/named3.conf.in index 38a77ae35c8..1cfea507114 100644 --- a/bin/tests/system/reclimit/ns3/named3.conf.in +++ b/bin/tests/system/reclimit/ns3/named3.conf.in @@ -25,10 +25,9 @@ options { max-recursion-depth 100; max-recursion-queries 50; recursion yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/reclimit/ns3/named4.conf.in b/bin/tests/system/reclimit/ns3/named4.conf.in index 5a0660766f6..c1acbe46a29 100644 --- a/bin/tests/system/reclimit/ns3/named4.conf.in +++ b/bin/tests/system/reclimit/ns3/named4.conf.in @@ -25,10 +25,9 @@ options { max-recursion-depth 100; max-recursion-queries 40; recursion yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/reclimit/ns3/named5.conf.in b/bin/tests/system/reclimit/ns3/named5.conf.in index 7cf0633a002..10d955a08ba 100644 --- a/bin/tests/system/reclimit/ns3/named5.conf.in +++ b/bin/tests/system/reclimit/ns3/named5.conf.in @@ -24,12 +24,11 @@ options { qname-minimization disabled; max-recursion-depth 12; recursion yes; - dnssec-validation yes; + dnssec-validation no; max-records-per-type 0; max-types-per-name 10; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/reclimit/ns3/named6.conf.in b/bin/tests/system/reclimit/ns3/named6.conf.in index e1607e275d0..e86140eaf3c 100644 --- a/bin/tests/system/reclimit/ns3/named6.conf.in +++ b/bin/tests/system/reclimit/ns3/named6.conf.in @@ -24,12 +24,11 @@ options { qname-minimization disabled; max-recursion-depth 12; recursion yes; - dnssec-validation yes; + dnssec-validation no; max-records-per-type 0; max-types-per-name 0; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/redirect/ns1/named.conf.in b/bin/tests/system/redirect/ns1/named.conf.in index 3b4ccad0287..9a046cc3ba1 100644 --- a/bin/tests/system/redirect/ns1/named.conf.in +++ b/bin/tests/system/redirect/ns1/named.conf.in @@ -25,10 +25,9 @@ options { listen-on-v6 { none; }; allow-recursion { 10.53.0.1; }; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type primary; diff --git a/bin/tests/system/redirect/ns2/named.conf.in b/bin/tests/system/redirect/ns2/named.conf.in index e07d75bdfe3..e744476535b 100644 --- a/bin/tests/system/redirect/ns2/named.conf.in +++ b/bin/tests/system/redirect/ns2/named.conf.in @@ -27,11 +27,10 @@ options { listen-on-v6 { none; }; recursion yes; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/redirect/ns3/named.conf.in b/bin/tests/system/redirect/ns3/named.conf.in index 51e590f630c..3c96fbcce8f 100644 --- a/bin/tests/system/redirect/ns3/named.conf.in +++ b/bin/tests/system/redirect/ns3/named.conf.in @@ -23,10 +23,9 @@ options { listen-on-v6 { none; }; allow-recursion { 10.53.0.3; }; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." { type primary; diff --git a/bin/tests/system/redirect/ns4/named.conf.in b/bin/tests/system/redirect/ns4/named.conf.in index 8937453ace8..c143be4f193 100644 --- a/bin/tests/system/redirect/ns4/named.conf.in +++ b/bin/tests/system/redirect/ns4/named.conf.in @@ -27,11 +27,10 @@ options { listen-on-v6 { none; }; recursion yes; notify yes; - dnssec-validation yes; + dnssec-validation no; nxdomain-redirect "redirect"; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/resolver/ns1/named.conf.in b/bin/tests/system/resolver/ns1/named.conf.in index cb0cb13d173..2bb2ce1f86b 100644 --- a/bin/tests/system/resolver/ns1/named.conf.in +++ b/bin/tests/system/resolver/ns1/named.conf.in @@ -20,7 +20,7 @@ options { listen-on { 10.53.0.1; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; deny-answer-addresses { 192.0.2.0/24; 2001:db8:beef::/48; } except-from { "example.org"; }; deny-answer-aliases { "example.org"; } @@ -34,7 +34,6 @@ options { request-zoneversion yes; }; -trust-anchors { }; server 10.53.0.3 { tcp-only yes; diff --git a/bin/tests/system/resolver/ns7/named1.conf.in b/bin/tests/system/resolver/ns7/named1.conf.in index 170ce62716d..b9938520d64 100644 --- a/bin/tests/system/resolver/ns7/named1.conf.in +++ b/bin/tests/system/resolver/ns7/named1.conf.in @@ -22,7 +22,7 @@ options { listen-on { 10.53.0.7; }; listen-on-v6 { fd92:7065:b8e:ffff::7; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; empty-zones-enable yes; disable-empty-zone 20.172.in-addr.arpa; /* @@ -34,7 +34,6 @@ options { edns-udp-size 4096; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/resolver/ns7/named2.conf.in b/bin/tests/system/resolver/ns7/named2.conf.in index 170ce62716d..b9938520d64 100644 --- a/bin/tests/system/resolver/ns7/named2.conf.in +++ b/bin/tests/system/resolver/ns7/named2.conf.in @@ -22,7 +22,7 @@ options { listen-on { 10.53.0.7; }; listen-on-v6 { fd92:7065:b8e:ffff::7; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; empty-zones-enable yes; disable-empty-zone 20.172.in-addr.arpa; /* @@ -34,7 +34,6 @@ options { edns-udp-size 4096; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/resolver/ns9/named.conf.in b/bin/tests/system/resolver/ns9/named.conf.in index bfc979ca6fd..c1e79febec3 100644 --- a/bin/tests/system/resolver/ns9/named.conf.in +++ b/bin/tests/system/resolver/ns9/named.conf.in @@ -20,12 +20,11 @@ options { listen-on-v6 { fd92:7065:b8e:ffff::9; }; recursion yes; recursive-clients 0; // regression test for [GL #4987] - dnssec-validation yes; + dnssec-validation no; dual-stack-servers { fd92:7065:b8e:ffff::7; }; qname-minimization off; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/rndc/ns4/named.conf.in b/bin/tests/system/rndc/ns4/named.conf.in index 0ec0cc7bf88..bb1283b3622 100644 --- a/bin/tests/system/rndc/ns4/named.conf.in +++ b/bin/tests/system/rndc/ns4/named.conf.in @@ -17,10 +17,9 @@ options { listen-on { 10.53.0.4; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; view normal { match-clients { any; }; diff --git a/bin/tests/system/rpz/ns3/named.conf.in b/bin/tests/system/rpz/ns3/named.conf.in index 1ee20ac0f74..672ba05f21a 100644 --- a/bin/tests/system/rpz/ns3/named.conf.in +++ b/bin/tests/system/rpz/ns3/named.conf.in @@ -29,7 +29,7 @@ options { notify yes; minimal-responses no; recursion yes; - dnssec-validation yes; + dnssec-validation no; min-refresh-time 1; min-retry-time 1; @@ -64,7 +64,6 @@ options { notify-delay 0; }; -trust-anchors { }; logging { category rpz { default_debug; }; }; diff --git a/bin/tests/system/rpz/ns8/named.conf.in b/bin/tests/system/rpz/ns8/named.conf.in index 83c13efa66e..ef6bc3f795c 100644 --- a/bin/tests/system/rpz/ns8/named.conf.in +++ b/bin/tests/system/rpz/ns8/named.conf.in @@ -29,7 +29,7 @@ options { notify yes; minimal-responses no; recursion yes; - dnssec-validation yes; + dnssec-validation no; response-policy { zone "manual-update-rpz"; @@ -46,7 +46,6 @@ options { notify-delay 0; }; -trust-anchors { }; logging { category rpz { default_debug; }; }; diff --git a/bin/tests/system/rpz/ns9/named.conf.in b/bin/tests/system/rpz/ns9/named.conf.in index ca9a843a977..b26129d1db0 100644 --- a/bin/tests/system/rpz/ns9/named.conf.in +++ b/bin/tests/system/rpz/ns9/named.conf.in @@ -29,7 +29,7 @@ options { notify yes; minimal-responses no; recursion yes; - dnssec-validation yes; + dnssec-validation no; dns64-server "example.localdomain."; dns64 64:ff9b::/96 { }; response-policy { @@ -40,7 +40,6 @@ options { notify-delay 0; }; -trust-anchors { }; logging { category rpz { default_debug; }; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.clientip.conf b/bin/tests/system/rpzrecurse/ns2/named.clientip.conf index a9ec4ca0a5a..884d6d91056 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.clientip.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.clientip.conf @@ -33,5 +33,4 @@ view "recursive" { zone "clientip2" { type primary; file "db.clientip2"; }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf b/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf index 39b67d8366c..63fb6cfbecd 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.clientip2.conf @@ -33,5 +33,4 @@ view "recursive" { zone "clientip21" { type primary; file "db.clientip21"; }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.conf.header.in b/bin/tests/system/rpzrecurse/ns2/named.conf.header.in index 49aef0ee3ea..f1d24c60d67 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.conf.header.in +++ b/bin/tests/system/rpzrecurse/ns2/named.conf.header.in @@ -23,11 +23,10 @@ options { listen-on { 10.53.0.2; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; querylog yes; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/rpzrecurse/ns2/named.default.conf b/bin/tests/system/rpzrecurse/ns2/named.default.conf index 929b88f2e50..aafaf700f38 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.default.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.default.conf @@ -21,5 +21,4 @@ view "recursive" { }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.log.conf b/bin/tests/system/rpzrecurse/ns2/named.log.conf index a19367e7097..74e4175d1f2 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.log.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.log.conf @@ -35,5 +35,4 @@ view "recursive" { zone "log3" { type primary; file "db.log3"; }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.max.conf b/bin/tests/system/rpzrecurse/ns2/named.max.conf index b07783b68d7..05cf1595596 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.max.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.max.conf @@ -157,5 +157,4 @@ view "recursive" { zone "max64" { type primary; file "db.max64.local"; }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf index 23ef4eb7ec1..7dd8ce14e7a 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard1.conf @@ -31,5 +31,4 @@ view "recursive" { zone "wildcard1" { type primary; file "db.wildcard1"; }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf index b570b47929a..2eecf94c6f0 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard2.conf @@ -33,5 +33,4 @@ view "recursive" { zone "wildcard2b" { type primary; file "db.wildcard2b"; }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf index befb7d2f8a8..6554177e1a9 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard3.conf @@ -31,5 +31,4 @@ view "recursive" { zone "wildcard3" { type primary; file "db.wildcard3"; }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf b/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf index e18f4962eb1..22138563f6f 100644 --- a/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf +++ b/bin/tests/system/rpzrecurse/ns2/named.wildcard4.conf @@ -33,5 +33,4 @@ view "recursive" { }; recursion yes; - dnssec-validation yes; }; diff --git a/bin/tests/system/rpzrecurse/ns3/named1.conf.in b/bin/tests/system/rpzrecurse/ns3/named1.conf.in index 4f0ae0ba688..8c3ee26fc50 100644 --- a/bin/tests/system/rpzrecurse/ns3/named1.conf.in +++ b/bin/tests/system/rpzrecurse/ns3/named1.conf.in @@ -27,14 +27,13 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; response-policy { zone "policy"; } qname-wait-recurse yes nsip-enable yes nsdname-enable yes; }; -trust-anchors { }; zone "policy" { type primary; file "policy.db"; }; diff --git a/bin/tests/system/rpzrecurse/ns3/named2.conf.in b/bin/tests/system/rpzrecurse/ns3/named2.conf.in index d05f3708825..7f47623f882 100644 --- a/bin/tests/system/rpzrecurse/ns3/named2.conf.in +++ b/bin/tests/system/rpzrecurse/ns3/named2.conf.in @@ -26,14 +26,13 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; response-policy { zone "policy"; } nsip-wait-recurse no qname-wait-recurse yes nsip-enable yes nsdname-enable yes; }; -trust-anchors { }; zone "policy" { type primary; file "policy.db"; }; diff --git a/bin/tests/system/rpzrecurse/ns3/named3.conf.in b/bin/tests/system/rpzrecurse/ns3/named3.conf.in index cce8200aa25..3366599ec1d 100644 --- a/bin/tests/system/rpzrecurse/ns3/named3.conf.in +++ b/bin/tests/system/rpzrecurse/ns3/named3.conf.in @@ -26,12 +26,11 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; response-policy { zone "policy"; } nsdname-wait-recurse no nsdname-enable yes; }; -trust-anchors { }; zone "policy" { type primary; file "policy.db"; }; diff --git a/bin/tests/system/rrl/ns1/named.conf.j2 b/bin/tests/system/rrl/ns1/named.conf.j2 index a71e1ee2151..c819d485c08 100644 --- a/bin/tests/system/rrl/ns1/named.conf.j2 +++ b/bin/tests/system/rrl/ns1/named.conf.j2 @@ -22,9 +22,8 @@ options { listen-on-v6 { none; }; notify no; recursion yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "." {type primary; file "root.db";}; diff --git a/bin/tests/system/rrl/ns2/named.conf.j2 b/bin/tests/system/rrl/ns2/named.conf.j2 index 298d37050aa..5d69e639c4e 100644 --- a/bin/tests/system/rrl/ns2/named.conf.j2 +++ b/bin/tests/system/rrl/ns2/named.conf.j2 @@ -23,7 +23,7 @@ options { listen-on-v6 { none; }; notify no; recursion yes; - dnssec-validation yes; + dnssec-validation no; rate-limit { responses-per-second 2; @@ -36,7 +36,6 @@ options { }; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/rrl/ns3/named.conf.j2 b/bin/tests/system/rrl/ns3/named.conf.j2 index 4bc0d6fc4a5..5be20da2aa8 100644 --- a/bin/tests/system/rrl/ns3/named.conf.j2 +++ b/bin/tests/system/rrl/ns3/named.conf.j2 @@ -22,7 +22,7 @@ options { listen-on-v6 { none; }; notify no; recursion yes; - dnssec-validation yes; + dnssec-validation no; // check that all of the options are parsed without limiting anything rate-limit { @@ -43,7 +43,6 @@ options { }; -trust-anchors { }; zone "." { type hint; file "hints"; }; diff --git a/bin/tests/system/rrl/ns4/named.conf.j2 b/bin/tests/system/rrl/ns4/named.conf.j2 index bb169f047d3..c7f9cccc15a 100644 --- a/bin/tests/system/rrl/ns4/named.conf.j2 +++ b/bin/tests/system/rrl/ns4/named.conf.j2 @@ -23,7 +23,7 @@ options { listen-on-v6 { none; }; notify no; recursion yes; - dnssec-validation yes; + dnssec-validation no; max-udp-size 4096; rate-limit { @@ -38,7 +38,6 @@ options { }; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/rrsetorder/ns3/named.conf.j2 b/bin/tests/system/rrsetorder/ns3/named.conf.j2 index 5d29fae77b9..9cfa6ca28d9 100644 --- a/bin/tests/system/rrsetorder/ns3/named.conf.j2 +++ b/bin/tests/system/rrsetorder/ns3/named.conf.j2 @@ -20,7 +20,7 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; rrset-order { name "random.example" order random; @@ -31,7 +31,6 @@ options { }; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/rrsetorder/ns4/named.conf.j2 b/bin/tests/system/rrsetorder/ns4/named.conf.j2 index 5187aa8fb1c..3c906f0d07d 100644 --- a/bin/tests/system/rrsetorder/ns4/named.conf.j2 +++ b/bin/tests/system/rrsetorder/ns4/named.conf.j2 @@ -20,7 +20,7 @@ options { listen-on { 10.53.0.4; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; rrset-order { class IN type A name "host.example.com" order random; @@ -28,7 +28,6 @@ options { }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/rrsetorder/ns5/named.conf.j2 b/bin/tests/system/rrsetorder/ns5/named.conf.j2 index f7a2486ad60..e6a56a05b34 100644 --- a/bin/tests/system/rrsetorder/ns5/named.conf.j2 +++ b/bin/tests/system/rrsetorder/ns5/named.conf.j2 @@ -20,11 +20,10 @@ options { listen-on { 10.53.0.5; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/statistics/ns2/named.conf.in b/bin/tests/system/statistics/ns2/named.conf.in index f23bac8d678..fa34de55d8a 100644 --- a/bin/tests/system/statistics/ns2/named.conf.in +++ b/bin/tests/system/statistics/ns2/named.conf.in @@ -20,11 +20,10 @@ options { listen-on { 10.53.0.2; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; }; -trust-anchors { }; include "statistics-channels.conf"; diff --git a/bin/tests/system/statistics/ns3/named.conf.in b/bin/tests/system/statistics/ns3/named.conf.in index cacc0ec8e76..2caaf8cfbec 100644 --- a/bin/tests/system/statistics/ns3/named.conf.in +++ b/bin/tests/system/statistics/ns3/named.conf.in @@ -21,13 +21,12 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; qname-minimization disabled; zone-statistics yes; }; -trust-anchors { }; include "statistics-channels.conf"; diff --git a/bin/tests/system/stress/ns3/named.conf.in b/bin/tests/system/stress/ns3/named.conf.in index c11aec2d488..f2bbb0dd170 100644 --- a/bin/tests/system/stress/ns3/named.conf.in +++ b/bin/tests/system/stress/ns3/named.conf.in @@ -22,11 +22,10 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/stress/ns4/named.conf.in b/bin/tests/system/stress/ns4/named.conf.in index 2dd2e50675a..83e548edbd7 100644 --- a/bin/tests/system/stress/ns4/named.conf.in +++ b/bin/tests/system/stress/ns4/named.conf.in @@ -22,11 +22,10 @@ options { listen-on { 10.53.0.4; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; notify yes; }; -trust-anchors { }; zone "zone000000.example" { type secondary; diff --git a/bin/tests/system/transport-acl/ns1/named.conf.in b/bin/tests/system/transport-acl/ns1/named.conf.in index a1b970fe2aa..925fd3f128b 100644 --- a/bin/tests/system/transport-acl/ns1/named.conf.in +++ b/bin/tests/system/transport-acl/ns1/named.conf.in @@ -64,11 +64,10 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; }; -trust-anchors { }; zone "example0" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in b/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in index 374cd06a171..926d5ea976d 100644 --- a/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in +++ b/bin/tests/system/transport-change/ns1/named-http-plain-proxy.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-http-plain.conf.in b/bin/tests/system/transport-change/ns1/named-http-plain.conf.in index 5d4b88035a3..8108f05f465 100644 --- a/bin/tests/system/transport-change/ns1/named-http-plain.conf.in +++ b/bin/tests/system/transport-change/ns1/named-http-plain.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in b/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in index 45108da9a01..86887ac2994 100644 --- a/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in +++ b/bin/tests/system/transport-change/ns1/named-https-proxy-encrypted.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in b/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in index 9001c43f45f..5ea2397cc67 100644 --- a/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in +++ b/bin/tests/system/transport-change/ns1/named-https-proxy-plain.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-https.conf.in b/bin/tests/system/transport-change/ns1/named-https.conf.in index bce99f35ec7..11e34e78173 100644 --- a/bin/tests/system/transport-change/ns1/named-https.conf.in +++ b/bin/tests/system/transport-change/ns1/named-https.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-proxy.conf.in b/bin/tests/system/transport-change/ns1/named-proxy.conf.in index ff549268d52..daf6f32d0b3 100644 --- a/bin/tests/system/transport-change/ns1/named-proxy.conf.in +++ b/bin/tests/system/transport-change/ns1/named-proxy.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in b/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in index 98c2bf48b9d..0e875e7441b 100644 --- a/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in +++ b/bin/tests/system/transport-change/ns1/named-tls-proxy-encrypted.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in b/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in index 20c829f0188..82fb45068aa 100644 --- a/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in +++ b/bin/tests/system/transport-change/ns1/named-tls-proxy-plain.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named-tls.conf.in b/bin/tests/system/transport-change/ns1/named-tls.conf.in index a436768d6e9..a67ffa6fe48 100644 --- a/bin/tests/system/transport-change/ns1/named-tls.conf.in +++ b/bin/tests/system/transport-change/ns1/named-tls.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/transport-change/ns1/named.conf.in b/bin/tests/system/transport-change/ns1/named.conf.in index e594c6ef06f..7f334adc0a5 100644 --- a/bin/tests/system/transport-change/ns1/named.conf.in +++ b/bin/tests/system/transport-change/ns1/named.conf.in @@ -34,13 +34,12 @@ options { recursion no; notify explicit; statistics-file "named.stats"; - dnssec-validation yes; + dnssec-validation no; tcp-initial-timeout 1200; allow-proxy { any; }; allow-proxy-on { 10.53.0.1; fd92:7065:b8e:ffff::1; }; }; -trust-anchors { }; zone "example" { type primary; diff --git a/bin/tests/system/zero/ns3/named.conf.in b/bin/tests/system/zero/ns3/named.conf.in index 025dcb46cb5..55fd7dd9b25 100644 --- a/bin/tests/system/zero/ns3/named.conf.in +++ b/bin/tests/system/zero/ns3/named.conf.in @@ -20,11 +20,10 @@ options { listen-on { 10.53.0.3; }; listen-on-v6 { none; }; recursion yes; - dnssec-validation yes; + dnssec-validation no; servfail-ttl 0; }; -trust-anchors { }; zone "." { type hint; diff --git a/bin/tests/system/zero/ns4/named.conf.in b/bin/tests/system/zero/ns4/named.conf.in index 037a5e9e474..36339defabb 100644 --- a/bin/tests/system/zero/ns4/named.conf.in +++ b/bin/tests/system/zero/ns4/named.conf.in @@ -20,10 +20,9 @@ options { listen-on { 10.53.0.4; }; listen-on-v6 { none; }; recursion no; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; zone "example" { type secondary; diff --git a/bin/tests/system/zonechecks/ns1/named.conf.in b/bin/tests/system/zonechecks/ns1/named.conf.in index f563b46d26a..6bbe18e6983 100644 --- a/bin/tests/system/zonechecks/ns1/named.conf.in +++ b/bin/tests/system/zonechecks/ns1/named.conf.in @@ -23,10 +23,9 @@ options { listen-on-v6 { none; }; recursion no; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765"; diff --git a/bin/tests/system/zonechecks/ns2/named.conf.in b/bin/tests/system/zonechecks/ns2/named.conf.in index 8385b5adc81..9faeb3e62d7 100644 --- a/bin/tests/system/zonechecks/ns2/named.conf.in +++ b/bin/tests/system/zonechecks/ns2/named.conf.in @@ -23,10 +23,9 @@ options { listen-on-v6 { none; }; recursion no; notify yes; - dnssec-validation yes; + dnssec-validation no; }; -trust-anchors { }; key rndc_key { secret "1234abcd8765";