From: Aram Sargsyan <aram@isc.org>
Date: Tue, 24 Feb 2026 17:24:38 +0000 (+0000)
Subject: Check that cached data is flushed when NTA expires
X-Git-Tag: v9.21.21~27^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ce98b71eb4ceed0c8584919d8261abd921c461b8;p=thirdparty%2Fbind9.git

Check that cached data is flushed when NTA expires
---

diff --git a/bin/tests/system/nta/tests_nta.py b/bin/tests/system/nta/tests_nta.py
index ece8db67295..828c04822b6 100644
--- a/bin/tests/system/nta/tests_nta.py
+++ b/bin/tests/system/nta/tests_nta.py
@@ -147,6 +147,13 @@ def test_nta_behavior(servers):
     isctest.check.noerror(res)
     isctest.check.noadflag(res)
 
+    # Expiry should also trigger a cache flush, so even if a.secure.example A
+    # was cached when its NTA was active, cached data should not be returned.
+    m = isctest.query.create("a.secure.example", "A")
+    res = isctest.query.tcp(m, "10.53.0.4")
+    isctest.check.noerror(res)
+    isctest.check.adflag(res)
+
     # bogus.example was set to expire in 20s, so at t=13
     # it should still be NTA'd, but badds.example used the default
     # lifetime of 12s, so it should revert to SERVFAIL now.