]> git.ipfire.org Git - thirdparty/bind9.git/commit
Add tests using PRIVATEOID algorithms
authorMark Andrews <marka@isc.org>
Fri, 16 May 2025 05:50:53 +0000 (15:50 +1000)
committerMark Andrews <marka@isc.org>
Wed, 18 Jun 2025 21:15:20 +0000 (07:15 +1000)
commit8d554c0c030f6941ac6bc8274f872342d4f64985
tree891b5e60fc98e80043f5f94976938238d2245cd2
parent92393f3c97a7b473a043401a25f6074bb7cbc9ba
Add tests using PRIVATEOID algorithms

There are 4 tests:

1) a zone using a known private OID.  Validations should succeed
and return AD=1.

2) a zone using an unknown private OID.  Validation should succeed
and return AD=0 as the DS to DNSKEY has provably unsupported
algorithm.

3) a zone using a known private OID and an extra DS record. Validation
should succeed as there is DS to DNSKEY with a known algorithm
linkage.

4) a zone using an unknown private OID and an extra DS record.
Validation should fail as only one of the DS records can be matched
to a provable unknown algorithm.  The algorithm of the second DS
is indeterminate.
bin/tests/system/dnssec/ns2/example.db.in
bin/tests/system/dnssec/ns2/sign.sh
bin/tests/system/dnssec/ns3/extradsoid.example.db.in [new file with mode: 0644]
bin/tests/system/dnssec/ns3/extradsunknownoid.example.db.in [new file with mode: 0644]
bin/tests/system/dnssec/ns3/named.conf.in
bin/tests/system/dnssec/ns3/rsasha256oid.example.db.in [new file with mode: 0644]
bin/tests/system/dnssec/ns3/rsasha512oid.example.db.in [new file with mode: 0644]
bin/tests/system/dnssec/ns3/sign.sh
bin/tests/system/dnssec/ns3/unknownoid.example.db.in [new file with mode: 0644]
bin/tests/system/dnssec/tests.sh
bin/tests/system/dnssec/tests_sh_dnssec.py