]> git.ipfire.org Git - thirdparty/bind9.git/commit
Test secure chain that includes inactive KSK
authorMatthijs Mekking <matthijs@isc.org>
Mon, 11 Mar 2024 10:52:03 +0000 (11:52 +0100)
committerMatthijs Mekking <matthijs@isc.org>
Tue, 12 Mar 2024 08:10:41 +0000 (09:10 +0100)
commitf0bfd276e02f861b7a98d569b03e267b0261f599
tree94dcce4a0ed53c2dca3f52fa32eb5b8778652ca8
parent28536786ded365c595b02efb07c9d7d7d23de775
Test secure chain that includes inactive KSK

Add a regression test case for the scenario where a secure chain of
trust includes an inactive KSK, that is a KSK that is not signing the
DNSKEY RRset.
bin/tests/system/dnssec/ns1/root.db.in
bin/tests/system/dnssec/ns1/sign.sh
bin/tests/system/dnssec/ns2/lazy-ksk.db.in [new file with mode: 0644]
bin/tests/system/dnssec/ns2/named.conf.in
bin/tests/system/dnssec/ns2/sign.sh
bin/tests/system/dnssec/tests.sh