From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Fri, 17 Jan 2025 10:29:03 +0000 (+0100)
Subject: assert key_tag too
X-Git-Tag: dnsdist-2.0.0-alpha1~154^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=18f17eb9e5300bb122f4353dc23223be065767ca;p=thirdparty%2Fpdns.git

assert key_tag too
---

diff --git a/regression-tests.auth-py/test_DirectDNSKEYSignature.py b/regression-tests.auth-py/test_DirectDNSKEYSignature.py
index fe5929ba7b..bb63eda2a6 100644
--- a/regression-tests.auth-py/test_DirectDNSKEYSignature.py
+++ b/regression-tests.auth-py/test_DirectDNSKEYSignature.py
@@ -55,7 +55,7 @@ example.org.                 3600 IN RRSIG   DNSKEY 13 2 3600 20250118211239 202
         self.assertTrue(dnskey_found, "DNSKEY record not found in the answer section")
 
         # Validate RRSIG record for DNSKEY
-        rrsig_found = any(rrset.rdtype == dns.rdatatype.RRSIG and rrset.covers == dns.rdatatype.DNSKEY for rrset in res.answer)
+        rrsig_found = any(rrset.rdtype == dns.rdatatype.RRSIG and rrset.covers == dns.rdatatype.DNSKEY and rrset[0].key_tag == 22273 for rrset in res.answer)
         self.assertTrue(rrsig_found, "RRSIG for DNSKEY not found in the answer section")
 
     def testDNSKEYQueryWithoutDNSSEC(self):