#include <gnutls/gnutls.h>
#include <pthread.h>
+#include <stdio.h>
+
#include "contrib/string.h"
#include "libknot/errcode.h"
#include "libknot/dnssec/keyid.h"
int r = gnutls_pkcs11_privkey_generate3(ctx->url, algorithm, bits, label,
>_cka_id, 0, NULL, 0, flags);
if (r != GNUTLS_E_SUCCESS) {
+printf(">>>> pkcs11_generate_key(): gnutls_pkcs11_privkey_generate3() returned %d (%s)\n", r, gnutls_strerror(r));
return KNOT_KEY_EGENERATE;
}
knot1 = t.server("knot")
knot2 = t.server("knot")
-zone = t.zone("example.com")
+zone = t.zone("example.com") + t.zone_rnd(5)
t.link(zone, knot1)
t.link(zone, knot2)
t.start()
# Wait for signed zone
-knot1.zone_wait(zone)
+knot1.zone_wait(zone[0])
resp = knot1.dig(zone[0].name, "DNSKEY")
resp.check_count(2, "DNSKEY")
# Wait for unsigned zone
-serial = knot2.zone_wait(zone)
+serial = knot2.zone_wait(zone[0])
resp = knot2.dig(zone[0].name, "DNSKEY")
resp.check_count(0, "DNSKEY")
knot2.reload()
# Check the keysets match
-knot2.zone_wait(zone, serial)
+knot2.zone_wait(zone[0], serial)
resp = knot2.dig(zone[0].name, "DNSKEY")
resp.cmp(knot1)