]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Add configuration that causes setnsec3param hang
authorMatthijs Mekking <matthijs@isc.org>
Wed, 23 Jun 2021 09:17:02 +0000 (11:17 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Mon, 28 Jun 2021 08:34:19 +0000 (10:34 +0200)
Add a zone to the configuration file that uses NSEC3 with dnssec-policy
and fails to load. This will cause setnsec3param to go into a busy wait
and will cause a hang on shutdown.

bin/tests/system/nsec3/ns3/named2.conf.in
bin/tests/system/nsec3/ns3/nsec3-fails-to-load.kasp.db.in [new file with mode: 0644]
bin/tests/system/nsec3/ns3/setup.sh

index ece1549395175bec1f7adc6da01667f158f546dc..5c1094e276c2264f5a979fee6b5191c7fee4d5fd 100644 (file)
@@ -117,3 +117,11 @@ zone "nsec3-to-nsec.kasp" {
        //dnssec-policy "nsec3";
        dnssec-policy "nsec";
 };
+
+/* Add a zone that fails to load, should not prevent shutdown. */
+zone "nsec3-fails-to-load.kasp" {
+       type primary;
+       file "nsec3-fails-to-load.kasp.db";
+       dnssec-policy "nsec3";
+       allow-update { any; };
+};
diff --git a/bin/tests/system/nsec3/ns3/nsec3-fails-to-load.kasp.db.in b/bin/tests/system/nsec3/ns3/nsec3-fails-to-load.kasp.db.in
new file mode 100644 (file)
index 0000000..5703d81
--- /dev/null
@@ -0,0 +1,8 @@
+@                      IN SOA  kasp. nsec3-fails-to-load.kasp. (
+                                1          ; serial
+                                30         ; refresh (30 seconds)
+                                10         ; retry (10 seconds)
+                                3600000    ; expire (5 weeks 6 days 16 hours)
+                                300        ; minimum (5 minutes)
+                                )
+                        NS      nsec3-fails-to-load.kasp.
index 4b529d33d99aee8ee5c4a88ce46327df4cf521b9..ffedec558fbfd10e90ec4ca7962938c50ce826cc 100644 (file)
@@ -27,3 +27,5 @@ for zn in nsec-to-nsec3 nsec3 nsec3-other nsec3-change nsec3-to-nsec \
 do
        setup "${zn}.kasp"
 done
+
+cp nsec3-fails-to-load.kasp.db.in nsec3-fails-to-load.kasp.db