From: Matthijs Mekking <matthijs@isc.org>
Date: Mon, 9 Mar 2020 09:38:58 +0000 (+0100)
Subject: Add check calls to kasp zsk-retired test
X-Git-Tag: v9.17.1~66^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2e4b55de858a38c420b369d737c040d75db1b2e2;p=thirdparty%2Fbind9.git

Add check calls to kasp zsk-retired test

The test case for zsk-retired was missing the actual checks.  Add
them and fix the set_policy call to expect three keys.
---

diff --git a/bin/tests/system/kasp/tests.sh b/bin/tests/system/kasp/tests.sh
index 0b5c8d0dfe9..30b82679a3b 100644
--- a/bin/tests/system/kasp/tests.sh
+++ b/bin/tests/system/kasp/tests.sh
@@ -1597,7 +1597,7 @@ set_server "ns3" "10.53.0.3"
 # Zone: zsk-retired.autosign.
 #
 set_zone "zsk-retired.autosign"
-set_policy "autosign" "2" "300"
+set_policy "autosign" "3" "300"
 set_server "ns3" "10.53.0.3"
 # The third key is not yet expected to be signing.
 set_keyrole      "KEY3" "zsk"
@@ -1620,6 +1620,12 @@ set_keystate "KEY3" "GOAL"         "omnipresent"
 set_keystate "KEY3" "STATE_DNSKEY" "rumoured"
 set_keystate "KEY3" "STATE_ZRRSIG" "hidden"
 
+check_keys
+check_apex
+check_subdomain
+dnssec_verify
+check_rrsig_refresh
+
 #
 # Test dnssec-policy inheritance.
 #