]> git.ipfire.org Git - thirdparty/bind9.git/commit
Convert zsk rollover test case to pytest
authorMatthijs Mekking <matthijs@isc.org>
Tue, 18 Mar 2025 11:18:34 +0000 (12:18 +0100)
committerMatthijs Mekking <matthijs@isc.org>
Mon, 2 Jun 2025 09:21:06 +0000 (09:21 +0000)
commitbd6c70bd67bb150b4c163f64cd02c94fea3d9bc6
tree8d0a2cc07043d6fb76b0edaa73fd10509708682a
parent233fdb8d520bda11fe18efe9c14e36930e6e96b0
Convert zsk rollover test case to pytest

Move the 'zsk-prepub' zones to the rollover test dir and convert ZSK
rollover test to pytest.

We need a way to signal a smooth rollover is going on. Signatures are
being replaced gradually during a ZSK rollover, so the existing
signatures of the predecessor ZSK are still being used. Add a smooth
operator to set the right expectations on what signatures are being
used.

Setting expected key relationships is a bit crude: a list of two
elements where the first element is the index of the expected keys that
is the predecessor, and the second element is the index of the expected
keys that is the successor.

We are changing the KSK lifetime to unlimited in this test case as it
is of no importance.
bin/tests/system/isctest/kasp.py
bin/tests/system/kasp/ns3/named-fips.conf.in
bin/tests/system/kasp/ns3/policies/autosign.conf.in
bin/tests/system/kasp/ns3/setup.sh
bin/tests/system/kasp/tests.sh
bin/tests/system/rollover/ns3/kasp.conf.j2
bin/tests/system/rollover/ns3/named.conf.j2
bin/tests/system/rollover/ns3/setup.sh
bin/tests/system/rollover/tests_rollover.py