]> git.ipfire.org Git - thirdparty/bind9.git/commit
Convert zsk rollover test case to pytest
authorMatthijs Mekking <matthijs@isc.org>
Tue, 18 Mar 2025 11:18:34 +0000 (12:18 +0100)
committerMatthijs Mekking <matthijs@isc.org>
Mon, 2 Jun 2025 09:22:07 +0000 (09:22 +0000)
commit239a37946bccea1b97cc38ee2f526c50b1d52f23
tree278075c8e6313e9c7fad60824f7d1164f65f823c
parentee4199f22a409ff4344e84dd53ee743ea265bf28
Convert zsk rollover test case to pytest

Move the 'zsk-prepub' zones to the rollover test dir and convert ZSK
rollover test to pytest.

We need a way to signal a smooth rollover is going on. Signatures are
being replaced gradually during a ZSK rollover, so the existing
signatures of the predecessor ZSK are still being used. Add a smooth
operator to set the right expectations on what signatures are being
used.

Setting expected key relationships is a bit crude: a list of two
elements where the first element is the index of the expected keys that
is the predecessor, and the second element is the index of the expected
keys that is the successor.

We are changing the KSK lifetime to unlimited in this test case as it
is of no importance.

(cherry picked from commit bd6c70bd67bb150b4c163f64cd02c94fea3d9bc6)
bin/tests/system/isctest/kasp.py
bin/tests/system/kasp/ns3/named-fips.conf.in
bin/tests/system/kasp/ns3/policies/autosign.conf.in
bin/tests/system/kasp/ns3/setup.sh
bin/tests/system/kasp/tests.sh
bin/tests/system/rollover/ns3/kasp.conf.j2
bin/tests/system/rollover/ns3/named.conf.j2
bin/tests/system/rollover/ns3/setup.sh
bin/tests/system/rollover/tests_rollover.py