]> git.ipfire.org Git - thirdparty/bind9.git/commit
Add new test cases with DNSSEC signing
authorMatthijs Mekking <matthijs@isc.org>
Fri, 31 May 2024 11:08:38 +0000 (13:08 +0200)
committerNicki Křížek <nicki@isc.org>
Mon, 10 Jun 2024 14:55:11 +0000 (16:55 +0200)
commit4e46453035003272e5d74ff671e065957a35ca6c
treed1ec10ae97ac4e19214acfb6220c4241d73392a3
parent15ecd2cce62099f722e1e6d3d2aa417b96db7092
Add new test cases with DNSSEC signing

kasp-max-types-per-name (named2.conf.in):
An unsigned zone with RR type count on a name right below the
configured limit. Then sign the zone using KASP. Adding a RRSIG would
push it over the RR type limit per name. Signing should fail, but
the server should not crash, nor end up in infinite resign-attempt loop.

kasp-max-records-per-type-dnskey (named1.conf.in):
Test with low max-record-per-rrset limit and a DNSSEC policy requiring
more than the limit. Signing should fail.

kasp-max-types-per-name (named1.conf.in):
Each RRSIG(covered type) is counted as an individual RR type. Test the
corner case where a signed zone, which is just below the limit-1,
adds a new type - doing so would trigger signing for the new type and
thus increase the number of "types" by 2, pushing it over the limit
again.
bin/tests/system/masterformat/ns4/compile.sh [new file with mode: 0755]
bin/tests/system/masterformat/ns4/kasp.db [new file with mode: 0644]
bin/tests/system/masterformat/ns4/named1.conf.in [new file with mode: 0644]
bin/tests/system/masterformat/ns4/named2.conf.in [new file with mode: 0644]
bin/tests/system/masterformat/ns4/template.db [new file with mode: 0644]
bin/tests/system/masterformat/setup.sh
bin/tests/system/masterformat/tests.sh