Tweak kasp system test script

The retry 3 times when checking signatures did not make sense because
at this point the input file does not change.

Raise the number of retries when checking the apex DNSKEY response to
reduce the number of intermittent failures due to unexpected delays.

diff --git a/bin/tests/system/kasp.sh b/bin/tests/system/kasp.sh
index 702a239296e49ffdd5b39b436854d83cd2b5bc3a..f0c83b19ab92d0adec93c4f62a2c2e687a5c8485 100644 (file)
--- a/bin/tests/system/kasp.sh
+++ b/bin/tests/system/kasp.sh
@@ -1107,7 +1107,7 @@ _check_apex_dnskey() {
 
        test "$_checksig" -eq 0 && return 0
 
-       retry_quiet 3 _check_signatures "DNSKEY" "dig.out.$DIR.test$n" "KSK" || return 1
+       _check_signatures "DNSKEY" "dig.out.$DIR.test$n" "KSK" || return 1
 
        return 0
 }
@@ -1120,11 +1120,11 @@ check_apex() {
        n=$((n+1))
        echo_i "check DNSKEY rrset is signed correctly for zone ${ZONE} ($n)"
        ret=0
-       retry_quiet 3 _check_apex_dnskey || ret=1
+       retry_quiet 10 _check_apex_dnskey || ret=1
        test "$ret" -eq 0 || echo_i "failed"
        status=$((status+ret))
 
-       # We retry the DNSKEY query for at most three seconds to avoid test
+       # We retry the DNSKEY query for at most ten seconds to avoid test
        # failures due to timing issues. If the DNSKEY query check passes this
        # means the zone is resigned and further apex checks (SOA, CDS, CDNSKEY)
        # don't need to be retried quietly.