]> git.ipfire.org Git - thirdparty/bind9.git/commit
autosign: use FIPS compatible algorithms and key sizes
authorMark Andrews <marka@isc.org>
Tue, 21 Dec 2021 09:16:47 +0000 (20:16 +1100)
committerMichal Nowak <mnowak@isc.org>
Mon, 3 Oct 2022 11:28:25 +0000 (13:28 +0200)
commit77e08784445e899b4e302de3f54bbd5b8cbfea8d
tree0ad947835bb1a1b4aadee92fd87299cdbee93882
parente6d11178912220f2f45a77a181a0971fb647ad94
autosign: use FIPS compatible algorithms and key sizes

The nsec-only.example zone was not converted as we use it to
test nsec-only DNSSEC algorithms to nsec3 conversion failure.
The subtest is skipped in fips mode.

Update "checking revoked key with duplicate key ID" test
to use FIPS compatible algorithm.

(cherry picked from commit 99ad09975e07cce3cadf7b6b75cda745e72d87a0)
12 files changed:
bin/tests/system/autosign/ns2/Xbar.+005+30676.key [deleted file]
bin/tests/system/autosign/ns2/Xbar.+005+30676.private [deleted file]
bin/tests/system/autosign/ns2/Xbar.+005+30804.key [deleted file]
bin/tests/system/autosign/ns2/Xbar.+005+30804.private [deleted file]
bin/tests/system/autosign/ns2/Xbar.+013+59973.key [new file with mode: 0644]
bin/tests/system/autosign/ns2/Xbar.+013+59973.private [new file with mode: 0644]
bin/tests/system/autosign/ns2/Xbar.+013+60101.key [new file with mode: 0644]
bin/tests/system/autosign/ns2/Xbar.+013+60101.private [new file with mode: 0644]
bin/tests/system/autosign/ns2/keygen.sh
bin/tests/system/autosign/ns3/keygen.sh
bin/tests/system/autosign/tests.sh
bin/tests/system/testcrypto.sh