]> git.ipfire.org Git - thirdparty/bind9.git/commit
add startup root DNSKEY refresh system test
authorColin Vidal <colin@isc.org>
Tue, 24 Jun 2025 09:55:42 +0000 (11:55 +0200)
committerColin Vidal <colin@isc.org>
Mon, 30 Jun 2025 12:52:12 +0000 (12:52 +0000)
commit5bfae10fa59d049d7d4906c9a3ac61a27e38c2d3
tree7458908154f3890048e894e114bafa2f3c15d38c
parent35cec00caebca5ab8de48dd50718c924ae85570d
add startup root DNSKEY refresh system test

Root trust anchors are automatically updated as described in RFC5011.
Add a system test which ensures the root DNSKEYs are always queried by
named during startup.

Because this test uses real internet DNS root servers, it is enabled
only when `CI_ENABLE_LIVE_INTERNET_TESTS` is set.

(cherry picked from commit b0a33f77dce28d21036739c565cc0037ca605893)
bin/tests/system/rfc5011/ns1/named.conf.j2 [new file with mode: 0644]
bin/tests/system/rfc5011/tests_rfc5011.py [new file with mode: 0644]