test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking positive validation NSEC using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.example > delv.out$n || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking positive validation NSEC3 using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.nsec3.example > delv.out$n || ret=1
SP="[[:space:]]+"
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking positive validation OPTOUT using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.optout.example > delv.out$n || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking positive wildcard validation NSEC using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.wild.example > delv.out$n || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking positive wildcard validation NSEC3 using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.wild.nsec3.example > delv.out$n || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking positive wildcard validation OPTOUT using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.wild.optout.example > delv.out$n || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative validation NXDOMAIN NSEC using dns_client ($n)"
delv_with_opts @10.53.0.4 a q.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative validation NXDOMAIN NSEC3 using dns_client ($n)"
delv_with_opts @10.53.0.4 a q.nsec3.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative validation NXDOMAIN OPTOUT using dns_client ($n)"
delv_with_opts @10.53.0.4 a q.optout.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative validation NODATA OPTOUT using dns_client ($n)"
delv_with_opts @10.53.0.4 txt a.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative validation NODATA NSEC3 using dns_client ($n)"
delv_with_opts @10.53.0.4 txt a.nsec3.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative validation NODATA OPTOUT using dns_client ($n)"
delv_with_opts @10.53.0.4 txt a.optout.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative wildcard validation NSEC using dns_client ($n)"
delv_with_opts @10.53.0.4 txt b.wild.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative wildcard validation NSEC3 using dns_client ($n)"
delv_with_opts @10.53.0.4 txt b.wild.nsec3.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking negative wildcard validation OPTOUT using dns_client ($n)"
delv_with_opts @10.53.0.4 txt b.optout.nsec3.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking 1-server insecurity proof NSEC using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.insecure.example > delv.out$n || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking 1-server insecurity proof NSEC3 using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.insecure.nsec3.example > delv.out$n || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking 1-server insecurity proof OPTOUT using dns_client ($n)"
delv_with_opts @10.53.0.4 a a.insecure.optout.example > delv.out$n || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking 1-server negative insecurity proof NSEC using dns_client ($n)"
delv_with_opts @10.53.0.4 a q.insecure.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking 1-server negative insecurity proof NSEC3 using dns_client ($n)"
delv_with_opts @10.53.0.4 a q.insecure.nsec3.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking 1-server negative insecurity proof OPTOUT using dns_client ($n)"
delv_with_opts @10.53.0.4 a q.insecure.optout.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking failed validation using dns_client ($n)"
delv_with_opts +cd @10.53.0.4 a a.bogus.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking that validation fails when key record is missing using dns_client ($n)"
delv_with_opts +cd @10.53.0.4 a a.b.keyless.example > delv.out$n 2>&1 || ret=1
test "$ret" -eq 0 || echo_i "failed"
status=$((status+ret))
-if [ -x ${DELV} ] ; then
+if [ -x "${DELV}" ] ; then
ret=0
echo_i "checking that validation succeeds when a revoked key is encountered using dns_client ($n)"
delv_with_opts +cd @10.53.0.4 soa revkey.example > delv.out$n 2>&1 || ret=1