]> git.ipfire.org Git - thirdparty/bind9.git/commit
Test secure chain that includes inactive KSK
authorMatthijs Mekking <matthijs@isc.org>
Mon, 11 Mar 2024 10:52:03 +0000 (11:52 +0100)
committerMatthijs Mekking <matthijs@isc.org>
Tue, 12 Mar 2024 10:50:08 +0000 (11:50 +0100)
commit0040947ae72cbd28a3e4ce8c42fc8de166cefc4f
tree15a228c9d590f0b66dbb6f54e6e0194e462ff266
parent95e0ccf6832d0dbf74bf4c250ab73d7ad91a6e3f
Test secure chain that includes inactive KSK

Add a regression test case for the scenario where a secure chain of
trust includes an inactive KSK, that is a KSK that is not signing the
DNSKEY RRset.

(cherry picked from commit f0bfd276e02f861b7a98d569b03e267b0261f599)
bin/tests/system/dnssec/clean.sh
bin/tests/system/dnssec/ns1/root.db.in
bin/tests/system/dnssec/ns1/sign.sh
bin/tests/system/dnssec/ns2/lazy-ksk.db.in [new file with mode: 0644]
bin/tests/system/dnssec/ns2/named.conf.in
bin/tests/system/dnssec/ns2/sign.sh
bin/tests/system/dnssec/tests.sh