From 18f17eb9e5300bb122f4353dc23223be065767ca Mon Sep 17 00:00:00 2001 From: Peter van Dijk Date: Fri, 17 Jan 2025 11:29:03 +0100 Subject: [PATCH] assert key_tag too --- regression-tests.auth-py/test_DirectDNSKEYSignature.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/regression-tests.auth-py/test_DirectDNSKEYSignature.py b/regression-tests.auth-py/test_DirectDNSKEYSignature.py index fe5929ba7b..bb63eda2a6 100644 --- a/regression-tests.auth-py/test_DirectDNSKEYSignature.py +++ b/regression-tests.auth-py/test_DirectDNSKEYSignature.py @@ -55,7 +55,7 @@ example.org. 3600 IN RRSIG DNSKEY 13 2 3600 20250118211239 202 self.assertTrue(dnskey_found, "DNSKEY record not found in the answer section") # Validate RRSIG record for DNSKEY - rrsig_found = any(rrset.rdtype == dns.rdatatype.RRSIG and rrset.covers == dns.rdatatype.DNSKEY for rrset in res.answer) + rrsig_found = any(rrset.rdtype == dns.rdatatype.RRSIG and rrset.covers == dns.rdatatype.DNSKEY and rrset[0].key_tag == 22273 for rrset in res.answer) self.assertTrue(rrsig_found, "RRSIG for DNSKEY not found in the answer section") def testDNSKEYQueryWithoutDNSSEC(self): -- 2.47.3