From: Matthijs Mekking <matthijs@isc.org>
Date: Thu, 18 Jun 2026 08:42:10 +0000 (+0200)
Subject: Don't rely on smart signing in cds system test
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=fdf74636e207729584bcc0b291b5134e736b13fe;p=thirdparty%2Fbind9.git

Don't rely on smart signing in cds system test

With dnssec-signzone smart-signing (-S), the CDS and CDSNKEY are
derived from the key timing metadata and the configuration options (-G).

The test has specific test cases that smart signing (with the fix)
interferes with. Therefor, disable smart-signing in the cds system test.
---

diff --git a/bin/tests/system/cds/setup.sh b/bin/tests/system/cds/setup.sh
index 27474bcc0a5..842c9c1402a 100644
--- a/bin/tests/system/cds/setup.sh
+++ b/bin/tests/system/cds/setup.sh
@@ -87,8 +87,9 @@ sed 's/ add \(.*\) IN DS / add \1 3600 IN DS /' <UP.swap >UP.swapttl
 
 sign() {
   cat >db.$1
+  cat $keyz.key $key1.key $key2.key >>db.$1
   $SIGNER >/dev/null \
-    -S -O full -o $Z -f sig.$1 db.$1
+    -O full -o $Z -f sig.$1 db.$1 $keyz $key1 $key2
 }
 
 sign null <<EOF