rsabigexponent: convert the test from RSASHA1 to RSASHA256

RSASHA1 is not supported on some platforms.

(cherry picked from commit 8c3c0118607f0b2c7b69ce072037634c881794a8)

diff --git a/bin/tests/system/rsabigexponent/README.md b/bin/tests/system/rsabigexponent/README.md
index 3390e63c23f3925bdc80ac43444bc9ee5176daa3..44afdbd42122998c2161f85848c5a2f36b2502b0 100644 (file)
--- a/bin/tests/system/rsabigexponent/README.md
+++ b/bin/tests/system/rsabigexponent/README.md
@@ -29,3 +29,11 @@ Do **not** remove `bigkey.c` as it may be needed to generate a new
 
 `bigkey` is used to both test that we are not running under PKCS#11 and
 generate a `DNSKEY` key with a large RSA exponent.
+
+To regenerate `ns2/example.db.bad` comment out the range test in
+opensslrsa_parse before signing the zone with a ZSK key generated
+by `bigkey`.
+
+        if (BN_num_bits(e) > RSA_MAX_PUBEXP_BITS) {
+                DST_RET(ISC_R_RANGE);
+        }

diff --git a/bin/tests/system/rsabigexponent/bigkey.c b/bin/tests/system/rsabigexponent/bigkey.c
index 502af625a44bba2b7a2350f8ad89e5971b0d569b..ea57b344196483455e9b87f7c4e818d804beca14 100644 (file)
--- a/bin/tests/system/rsabigexponent/bigkey.c
+++ b/bin/tests/system/rsabigexponent/bigkey.c
@@ -46,7 +46,7 @@
 dst_key_t *key;
 dns_fixedname_t fname;
 dns_name_t *name;
-unsigned int bits = 1024U;
+unsigned int bits = 2048U;
 isc_mem_t *mctx;
 isc_log_t *log_;
 isc_logconfig_t *logconfig;
@@ -134,7 +134,7 @@ main(int argc, char **argv) {
                                                                    "\"example."
                                                                    "\")");
 
-       CHECK(dst_key_buildinternal(name, DNS_KEYALG_RSASHA1, bits,
+       CHECK(dst_key_buildinternal(name, DNS_KEYALG_RSASHA256, bits,
                                    DNS_KEYOWNER_ZONE, DNS_KEYPROTO_DNSSEC,
                                    dns_rdataclass_in, pkey, mctx, &key),
              "dst_key_buildinternal(...)");

diff --git a/bin/tests/system/rsabigexponent/ns1/sign.sh b/bin/tests/system/rsabigexponent/ns1/sign.sh
index 0e5dc22704689c5c9e41b89be27bfc85dd8e58ef..d045fe24521eac5179d98cb17200497e15225edb 100755 (executable)
--- a/bin/tests/system/rsabigexponent/ns1/sign.sh
+++ b/bin/tests/system/rsabigexponent/ns1/sign.sh
@@ -20,7 +20,7 @@ zonefile=root.db
 
 cp ../ns2/dsset-example.in dsset-example$TP
 
-keyname=`$KEYGEN -q -a RSASHA1 -b 1024 -n zone $zone`
+keyname=`$KEYGEN -q -a RSASHA256 -b 2048 -n zone $zone`
 
 cat $infile $keyname.key > $zonefile
 

diff --git a/bin/tests/system/rsabigexponent/ns2/Xexample.+005+05896.key b/bin/tests/system/rsabigexponent/ns2/Xexample.+005+05896.key
deleted file mode 100644 (file)
index 1030c21..0000000
--- a/bin/tests/system/rsabigexponent/ns2/Xexample.+005+05896.key
+++ /dev/null
@@ -1,2 +0,0 @@
-; This is a key-signing key, keyid 5896, for example.
-example. IN DNSKEY 257 3 5 AwEAAaLNbgMfH/XUwZC9DBVG4OpYVUVyCyZEBqhk3k6WziIAY+2f7MN3 L9CoZR9GqfqM+/c6g8gfkIaZZ2YP/YUUaN73xH/nxtHYkrP5Rqe/dw7q ONnsVwvf3HJ8HvURG3wjaOrPoe207+HpNTNhe/sT2usKhokSU8yKB0DK lnrKQvp9vScsIB/RsIxOXWmYgOMkSXtpI3lQ07l1i2Tv6UnecD9s8ruk fl/gPbRBketLYACrqpb2j/1f7ciQv+rz1GnN9ma8XK1Yw8173/hrVL1S /ZqTGczwdeA3AVyiHThOZ15EPhSuL7jaJusHOi43Aa8ZfCMCeimT73F5 epktGomAxFU=

diff --git a/bin/tests/system/rsabigexponent/ns2/Xexample.+005+05896.private b/bin/tests/system/rsabigexponent/ns2/Xexample.+005+05896.private
deleted file mode 100644 (file)
index dbac306..0000000
--- a/bin/tests/system/rsabigexponent/ns2/Xexample.+005+05896.private
+++ /dev/null
@@ -1,10 +0,0 @@
-Private-key-format: v1.3
-Algorithm: 5 (RSASHA1)
-Modulus: os1uAx8f9dTBkL0MFUbg6lhVRXILJkQGqGTeTpbOIgBj7Z/sw3cv0KhlH0ap+oz79zqDyB+QhplnZg/9hRRo3vfEf+fG0diSs/lGp793Duo42exXC9/ccnwe9REbfCNo6s+h7bTv4ek1M2F7+xPa6wqGiRJTzIoHQMqWespC+n29JywgH9GwjE5daZiA4yRJe2kjeVDTuXWLZO/pSd5wP2zyu6R+X+A9tEGR60tgAKuqlvaP/V/tyJC/6vPUac32ZrxcrVjDzXvf+GtUvVL9mpMZzPB14DcBXKIdOE5nXkQ+FK4vuNom6wc6LjcBrxl8IwJ6KZPvcXl6mS0aiYDEVQ==
-PublicExponent: AQAB
-PrivateExponent: K9juX1LbtccmlwgDoBtl6lf+J2UO0bCSpnn8UehV/lxijZZ8Gy0XqLgh/Cl5EG02U6Dj61ts/oOEkL2Px272y86pktVm/A+7e1ORDw8HTvIQe8kmrKEPa5o4cEK6R1X2JP/lGfOYhBzeYkdIMBhp5tH/6B0Sis1GJNIrc0jUf0g+JvOH/j1SpLoKoDpHUwOWnAt92AZsYhyJgeDXgw+xTBcOVvRfmh3Zmoi6x58lmQsU3loloqQ2V2V3xw1qEhTwBtFiguqeUV/FZl+RerT+lld7v2KkuxchyxlCCavgq6bZSUpn3TxcmnK6pj42oTy11hG9PHvIS8VNpGLr0p6mpQ==
-Prime1: 2KZlb2BXJHEJJv2iuJoddNuDlDStG77cA7FR84Dsarbc5rHj1BjwOPDec235LQOzNAAVMTh3B8/8kcAkx/U0F2FPfgAS/ZK2dOBKcJFU4bmUQDsLMXJn67Pf7d1HeDYfVPSFp1Ib/G91dXuo11+nRZJRfKUW19aFYXybSLVmifM=
-Prime2: wF9HHnv17f1L3VLBJ+qndiPcp/l24fVk5xWrbZlivK+WFrZkHFbmN+WRIkjKbe1mBf4z2fMp1JZKt8wViJVG9Bkk2wSCQA74MrejPFlD9AEMC/TrV7F/l89DryG9YeLAk6td38opGiAmRHzSdrjstUF+iv7IAW+fghPQ3O4ogpc=
-Exponent1: Nmtlo1phyUeTcvXW/+PGbmoNXRb2PLfucAcEfNPvjsasKk6Y2dgBz2vBlOEU7Be31eIHcLusOowl9z56fre7A/xviUjffE50AluslyYKWkDRWmj6YMtKC0y9fPROVYXSzPY29FaNrRUaPg531NG0JKeiTFrzp/e8vUYdg1/9h70=
-Exponent2: r5+MNwlmaQJBG2psivuQLKvqy7NU1E8K8mj3G1TYLniCpnOXC8RN4yQDDvCzVg5QgRIk1kpHmxwmVIvN8OaPY1P9MLJ6Eu9Xqj26meLIxd+a1uOfY2zZloeTPDSqR84Sj/338tIGGiLVrNrj7Z1ABO4pD84wXBdC4SckHD6U3zs=
-Coefficient: c1jE021ke1G/1+C/mqhVtXF9/+ivfw9Ae6na3PofQREs3wiBJH7kpbLmTqc1ovXrHA3BbD1CfWUBhrFK/n5MvsU59VGmz5mD+HGsHC1eoaS4JCG5EWFUP8MStiv+JJGyfuK8MUGsEXQorfQmzGXhe5N2S+4dEYDfksSVd9Wg9d0=

diff --git a/bin/tests/system/rsabigexponent/ns2/Xexample.+005+51829.key b/bin/tests/system/rsabigexponent/ns2/Xexample.+005+51829.key
deleted file mode 100644 (file)
index 5343267..0000000
--- a/bin/tests/system/rsabigexponent/ns2/Xexample.+005+51829.key
+++ /dev/null
@@ -1,2 +0,0 @@
-; This is a zone-signing key, keyid 51829, for example.
-example. IN DNSKEY 256 3 5 BwEAAAAAAAGfDKVFak/2o446xOsi39QnfZmRidaRyg3LaCxDBM6kVqCH QKI3a2lEf4FWVSbp+dYjGavsqWJ/Z7poMRy9JJol2bMLhtsZhESK5EYR aR/2dLw5H10SR+wb/qRVVYovWlk67sql7XYc3x5cjc4XaMVziBBrQMiW qkQS2oGQLwKCLw==

diff --git a/bin/tests/system/rsabigexponent/ns2/Xexample.+005+51829.private b/bin/tests/system/rsabigexponent/ns2/Xexample.+005+51829.private
deleted file mode 100644 (file)
index 35acd10..0000000
--- a/bin/tests/system/rsabigexponent/ns2/Xexample.+005+51829.private
+++ /dev/null
@@ -1,10 +0,0 @@
-Private-key-format: v1.3
-Algorithm: 5 (RSASHA1)
-Modulus: nwylRWpP9qOOOsTrIt/UJ32ZkYnWkcoNy2gsQwTOpFagh0CiN2tpRH+BVlUm6fnWIxmr7Klif2e6aDEcvSSaJdmzC4bbGYREiuRGEWkf9nS8OR9dEkfsG/6kVVWKL1pZOu7Kpe12HN8eXI3OF2jFc4gQa0DIlqpEEtqBkC8Cgi8=
-PublicExponent: AQAAAAAAAQ==
-PrivateExponent: Aidz1Ah0WnUxdjZQ5J2bkXXOvP7ZhxtrmNvaQkQpEOjc5EW0mh+8f6rmp19CZHVwjk1nRfTgSnPk/y+xsyfroBRf5RH+6bjvB3mk+uSor6+xibdTy+HlEyd5YPdGzHmqFUe7pcL25kO0QSqdEVjvBP9SCgscDBhrTHURYsPxudE=
-Prime1: 0nuP62sq8a1OyjGqmsqhf6XrpwRXSKYVjdJEdRzogi/fnU/AWDZdc2W8JOC1nxdbfVC68b8G+Vc+5GOsuUw56Q==
-Prime2: wXG1f8INIsNLGtEhAuqw320onFrqBEgs+EkEZeUxHP5hUkchoUSnqTZrfRUA+UuOD2sI0NtA3OYCXaihgWu0Vw==
-Exponent1: QooxjUxTEcn9N5ehnpK0VD3gKwoW3C2NIv/2GeKVpL+ZcsD6iMzmHou/WVOAt0oz+RdWDLxpEzakwUhslPN6+Q==
-Exponent2: PP9JlJFaGEs3ckmvj53NXKz0fkbjtIOJvWwnkT7WrVpTgaUISjuSxLOfUDrrFC9JGAIAmoWDrI76QrTanbLiyw==
-Coefficient: u4jEvCVMxzmDBCjw8MLuTZtuBqs0ScAT7NkceBrjhdpCV1DtzVGJgbwI2GEHqEcSlcVAQCM92vPz76lL4Q94zw==

diff --git a/bin/tests/system/rsabigexponent/ns2/Xexample.+008+51650.key b/bin/tests/system/rsabigexponent/ns2/Xexample.+008+51650.key
new file mode 100644 (file)
index 0000000..60ff187
--- /dev/null
+++ b/bin/tests/system/rsabigexponent/ns2/Xexample.+008+51650.key
@@ -0,0 +1,5 @@
+; This is a key-signing key, keyid 51650, for example.
+; Created: 20220721024334 (Thu Jul 21 12:43:34 2022)
+; Publish: 20220721024334 (Thu Jul 21 12:43:34 2022)
+; Activate: 20220721024334 (Thu Jul 21 12:43:34 2022)
+example. IN DNSKEY 257 3 8 AwEAAeeXAGBcXxSNj5X/PWT8XDBk4U9OUkZ7YKQBf2IN3V6OZomt/s3F UWIh70Wot+z1Ld3Rfswq1DjCaWNRFOMhs+9j3Fhc46wMZ4pnsDW1nLHk 2TnQRdrbiuhLkQy5oNMjSRxu924XLw5ylsuqjxE7vXcCeKSFe674roSq wo39atWsTJMDz0FQGxlPucnXai0nHoCeC7+u1s+wLaGcpNSZlsab7Zny FD4HZ3HKUCJw/Jjr5CZjqal9KdmWSC1SINRtlAN6PX5VSiNEncnYMCdj iv+ZhRGn+aHh1BmEWomGbAm2Jjw5mrYMgDs9lJRc5Vtg0YXb9OkYvxNF V4QGw1oeF+M=

diff --git a/bin/tests/system/rsabigexponent/ns2/Xexample.+008+51650.private b/bin/tests/system/rsabigexponent/ns2/Xexample.+008+51650.private
new file mode 100644 (file)
index 0000000..d38a0b3
--- /dev/null
+++ b/bin/tests/system/rsabigexponent/ns2/Xexample.+008+51650.private
@@ -0,0 +1,13 @@
+Private-key-format: v1.3
+Algorithm: 8 (RSASHA256)
+Modulus: 55cAYFxfFI2Plf89ZPxcMGThT05SRntgpAF/Yg3dXo5mia3+zcVRYiHvRai37PUt3dF+zCrUOMJpY1EU4yGz72PcWFzjrAxnimewNbWcseTZOdBF2tuK6EuRDLmg0yNJHG73bhcvDnKWy6qPETu9dwJ4pIV7rviuhKrCjf1q1axMkwPPQVAbGU+5yddqLScegJ4Lv67Wz7AtoZyk1JmWxpvtmfIUPgdnccpQInD8mOvkJmOpqX0p2ZZILVIg1G2UA3o9flVKI0SdydgwJ2OK/5mFEaf5oeHUGYRaiYZsCbYmPDmatgyAOz2UlFzlW2DRhdv06Ri/E0VXhAbDWh4X4w==
+PublicExponent: AQAB
+PrivateExponent: QaMgBa+YeRxIElS1g14tCMBGxXHmyrgkI0eTYWiZkbedYy8v1QU0NDJ2/NC9VEkHF2PNYrNO08lyEiaEW32NYG92n4qwMm6PmAAcRpSzFQ5N7N9VNRrdK0pjkW45IS5Shd8DfK3QdfFPQOkVxGYgpE7Mf6Cfde9gkxRMsO6erXEud6KyBm8kwBR/ipDeUQvpyGkZEQPjLxJG6REjMVhPKTzCV+82DWEf+Ok/3Uxa94+ocAbySHAV3j4YcWpVGWT002gc6CGk8c6TsPYnDkfKQ3moPQZijH7F8zrARtoobCX9TsMFhBqReceZrbzN7en2cZGR5MSISzoTNSr4rGo6aQ==
+Prime1: 8AV9EllWtclD62XHo95Z3h7JJ9t2gY7fUFG0WMbkI0Wj6kcr7k3bFfLj7GEJ1qgVW4Qpu7XnBvPB9hnqoCkbHLzc8ws1D2tY+PsXzvw9IxoXNM/eCobeulu/rYhJl2PcpY9bPcaaR0hldGoCHdFYSo8oi+C5hfRtIMVjnDtHSmk=
+Prime2: 9wHRxgyHjtl8ro9HAkvujxFkhChm4xLxIRM8pfZ+D1VHpzFRD3/RK8CVYVRB8GsQoFRygHBMOW1oHqynN9jddvJrQbHOqFZAbQQlesp0jRPd9Mm6q0cDwYcD4apscB2CUrUswMzoD3H4saIjGnitCsG/t+sLTvuK/giuMdS2Tms=
+Exponent1: pnSH+pOuiL+dtMCPJVvsoxhilJukodD9mewv0GmOic+gD7dwBgJEcAJUgvgBJLbIqQENGDrcj3u5Bf2PM6eOP+3SpVMeZyUhPPqV1lwj4hYUBfIqoM5L5J4AXk5oCu+cc8zpj/wNvmW8xnFGKnumaX7Ctc8Rmo6ap+F8ZTrPBBE=
+Exponent2: txXZKIRnAkJAwZ6f0pr3w4Hv0GmmAZArvQlmPdncDH94sfvDCssB/v0rfE4Y5hxl4YFWsc8LINHwiDQPajzLwvvi9nnWJT5xWJznLwHbrCparbPNMmFb7lmmTeGlqOCmlamG942qQLCI1xnIDTn/gWalNaz539xhZPSIMZVqX+s=
+Coefficient: eK9cQKFRLaU4udqB8t8KSQxlNl0x9J+9bcaEzn0+579LrZUZvspfiR4DNGwr9qK+PWk+CU7/6xsWbq2zbKIEWucoR97t+E8Zhx00GCDbiu/QI2wviEcYbB2udznRv1WSIDoCWf2TXeh5G2E2ugt5F4+b56qMXmT7IudxYGPtQCY=
+Created: 20220721024334
+Publish: 20220721024334
+Activate: 20220721024334

diff --git a/bin/tests/system/rsabigexponent/ns2/Xexample.+008+52810.key b/bin/tests/system/rsabigexponent/ns2/Xexample.+008+52810.key
new file mode 100644 (file)
index 0000000..a1f14c9
--- /dev/null
+++ b/bin/tests/system/rsabigexponent/ns2/Xexample.+008+52810.key
@@ -0,0 +1,2 @@
+; This is a zone-signing key, keyid 52810, for example.
+example. IN DNSKEY 256 3 8 BwEAAAAAAAHYYy161+wCg6yFHRlyex8oVkcK+K2SBUryI1+DEKzjusH6 yLfzzlJCPGrubmD+jseKYwXfzelJkRQbMDjWbMYLHKytuPtwnJMSeVh+ a/Ore6oVPXy716EYpsEBSmVjfQyS0mGHpwrYk4QaKjJDM7Q173EFl/sE eXjHqInlzOgJbXqsCrSfA94anSt42DGhJeeIfQ8b3vqD/nCnA6C7khIt AWlfJto7d42Ev8tckjr3CrTW9tn9pHb2DKeh85rKeJBBLMYQU3jfF5KH EEsjztLGMnPLlXTteh8wKrk/0IJrot17w0FR0H2v8oG3xDXxfhJ0OeTW 7dtBHD6ISgqeJ9zt

diff --git a/bin/tests/system/rsabigexponent/ns2/Xexample.+008+52810.private b/bin/tests/system/rsabigexponent/ns2/Xexample.+008+52810.private
new file mode 100644 (file)
index 0000000..bbb5ad9
--- /dev/null
+++ b/bin/tests/system/rsabigexponent/ns2/Xexample.+008+52810.private
@@ -0,0 +1,10 @@
+Private-key-format: v1.3
+Algorithm: 8 (RSASHA256)
+Modulus: 2GMtetfsAoOshR0ZcnsfKFZHCvitkgVK8iNfgxCs47rB+si3885SQjxq7m5g/o7HimMF383pSZEUGzA41mzGCxysrbj7cJyTEnlYfmvzq3uqFT18u9ehGKbBAUplY30MktJhh6cK2JOEGioyQzO0Ne9xBZf7BHl4x6iJ5czoCW16rAq0nwPeGp0reNgxoSXniH0PG976g/5wpwOgu5ISLQFpXybaO3eNhL/LXJI69wq01vbZ/aR29gynofOayniQQSzGEFN43xeShxBLI87SxjJzy5V07XofMCq5P9CCa6Lde8NBUdB9r/KBt8Q18X4SdDnk1u3bQRw+iEoKnifc7Q==
+PublicExponent: AQAAAAAAAQ==
+PrivateExponent: aD+JLNdCtAk1++UwcGdPslSoWq2szZHGrY+I+YfhfcBZrPP13exC40hgUgRNuYJOaJ3WMpgsKI4p8YDVNttF6LI7WNBURQhmBSwquB5BWWkoh7uR4PfKWGB0ZkDwUQcA2IdMVS4+QAKVQMmUXGnXhQI1p8duAORZp0gE71VsHTEzwf5AIEG2+f/oCjDsMJN0J7X3qktJr5ho64aMHyHf5+yKk6fFcy7wfC175SkIZ53uBfpCsFXkgq8YukXfcyoG5o4FUHheGnDwkVOzviEUHk8xweJnNNRbV6n/ck9AXzq3VSA9BbrXtRzZmre/L6tJvEnbH0EycwDkxCMlOSqGbQ==
+Prime1: /hnW5M2vzAoAjx2wum98YZZ6gv1IpV88c4HDLA3vY79Qxd8FYanldxPNjgQJEPjHD5hG6tGN+cjZdXv/X+sk5j3fmCB7RKwMKcoD8A/jyH2JaQLTbXm6EBd1BCMIN+w3W+A2E6evYYyINLwMUwqRlUcAaD8HoDLK8iz6iAUhFss=
+Prime2: 2gEuuug1PDnbWWFVzzMUrVXiRiFqJVTTvR3AjJVJNZPwAL4FMenh98rtI3s1zSB6P4RSyvRJ6YMOAT0ZrMxviJy76EExGgCB5F4w7g67I7VGPuA1tLn5kt5j9j5wQmdq1yMG5QpCJWr7bxjSDYvIzy2sZjZ/KTuHGtUzFUnHrCc=
+Exponent1: MaDlpmDYxZ2QvM+cp58Bj160u+21qIA/UZ2ysh6102uQmYHm92481z2+AvCJuq2PpkuROMd/4i2w7L0RbfZ2MYzUFndLZ8NgmNDjNDfUzeRQl2KQdAOLK4DNXmf3mKwLO0Sbj/pxgj0vYAe9gcU4Pe8ukVuSX0nkehbDi4cjfr0=
+Exponent2: cNHFlVCwvEPNVnpQCZS3iqF/D3HN8FtP2st0CrYbjQI8DYpcQUWVMqUqdqFOkYM0/qadpkX+JMlPJTjJZ8YDYYWIZGSC2ruMPIxB7DayVDBbgugmsC1isZjyApdQ44xtdNVyMYmcYeHUz5gR1x/eWdGNyjzMEvfbEjXIKbRykAM=
+Coefficient: ovH/7MP64Dai8draXD3t+jl6UTchig+LDwXA2GvlZY0HVP+9yvE49VSKhoYxolL/ZmabIgzzOAyJ66SyYq31ozxbpKrBGiFdzAbgkJgFIbdYMgfLHXNkH1vissGeY0KdS5ee6sKDfk1VmE94UOVHi11oslvnTiG2RF/I3koYV7Q=

diff --git a/bin/tests/system/rsabigexponent/ns2/dsset-example.in b/bin/tests/system/rsabigexponent/ns2/dsset-example.in
index 06bc89aac68dd9d1e4f0708f490e9ee421f3ff9c..9ad254ba428d7e54e7688d24abd71690d6a4e573 100644 (file)
--- a/bin/tests/system/rsabigexponent/ns2/dsset-example.in
+++ b/bin/tests/system/rsabigexponent/ns2/dsset-example.in
@@ -1,2 +1 @@
-example.               IN DS 5896 5 1 07766192DA7BDE32F6DC719B9F5A3476686F8758
-example.               IN DS 5896 5 2 CFBFD9C06EA15B0A984566573A18ACEC234FDC9C09103C0C53E75989 088A8FB4
+example. IN DS 51650 8 2 F225122667540159A30620B2D0888036BDF76276D245DE3453C883F0C3276705

diff --git a/bin/tests/system/rsabigexponent/ns2/example.db.bad b/bin/tests/system/rsabigexponent/ns2/example.db.bad
index 449e474ac29abb0561d2334d59a157179b0a1c08..b105978f6a4da92f735839c93c8157b02cbd09d5 100644 (file)
--- a/bin/tests/system/rsabigexponent/ns2/example.db.bad
+++ b/bin/tests/system/rsabigexponent/ns2/example.db.bad
@@ -16,97 +16,141 @@ example.           300     IN SOA  mname1. . (
                                        604800     ; expire (1 week)
                                        3600       ; minimum (1 hour)
                                        )
-                       300     RRSIG   SOA 5 1 300 (
-                                       20361231235959 20000101000000 51829 example.
-                                       HW8O/KHJEObWSYtQD14+3MRtD6rasy/AeIAo
-                                       1HmtELxeUoMvVcQzm7z1RoeV6S7+r/SrUjAz
-                                       PwtlE4TpyTEj9sfTr4mJhU0DwrNW6dN6qHCw
-                                       vB3nuURVOKzU8V26PdFcjJB+/HnJT2LyLUqr
-                                       KAzHwU1tAXkgx0FOwfyOs2rxooo= )
+                       300     RRSIG   SOA 8 1 300 (
+                                       20361231235959 20000101000000 52810 example.
+                                       IfZrUTjdr4Ull5MSQW4eHxrub6X5O8VWB3vG
+                                       kg6TBT8f2Aw4hLcwT0X47xRqL9nU1kKA3qpu
+                                       mi71wqiZPbYI+suHYGuqRO/V6YujdQRpLhGS
+                                       gTpLmETa46unkMDY6sze41AlCyzR79yaDxVS
+                                       +pS2V1AVYzQzzeswJXHwSLO5HKtClPL3izpV
+                                       AJD1+dL0UZRs9yOqbxU1RgvASPFEt+1Wd2p6
+                                       qwyeadJ7PB0PL7QQXSDsQ09Ms1BGoKq5p6Os
+                                       HtgXPo+aZQR2gczm3Yals9I1tZnk/ZM86aS0
+                                       63NrEEUQycMNCr100WgWzYQzO90SmJMqpdeZ
+                                       fxzlRQbY7jN4qRbM7A== )
                        300     NS      ns2.example.
-                       300     RRSIG   NS 5 1 300 (
-                                       20361231235959 20000101000000 51829 example.
-                                       EO8/KzfhppvhD2b0hGCdEN8/WTNexK6zkC1Z
-                                       oW3vu0cFVvac+wrV9Vox90lHI0jTce/R+bvT
-                                       T9RbpZiZcBKLVyBuHIdFPOdc3ogHMPwaPNkD
-                                       pvVvLfV6auHCvINiVw+jWinBpTjqoROH/yTC
-                                       03BQ41vewKsz3fYZ03XUr2xga5Q= )
-                       3600    NSEC    a.example. NS SOA RRSIG NSEC DNSKEY
-                       3600    RRSIG   NSEC 5 1 3600 (
-                                       20361231235959 20000101000000 51829 example.
-                                       FiUyrwO7MV9Lhg6yu0XN/hLZPOiDg/NqIIUc
-                                       HfA9Yix90Z9G/yzn8NBC92Yp5EPiI4HiE24T
-                                       t1p4YwHe6n/IJA4KZUIpCxEY5xhQL/mVMeuj
-                                       dlFA2LaiDwbOh//42zdocaeGPrcV+u6OmXoU
-                                       xkQIuWeJ1QCaD5FXJdN6zELZsnw= )
-                       300     DNSKEY  256 3 5 (
-                                       BwEAAAAAAAGfDKVFak/2o446xOsi39QnfZmR
-                                       idaRyg3LaCxDBM6kVqCHQKI3a2lEf4FWVSbp
-                                       +dYjGavsqWJ/Z7poMRy9JJol2bMLhtsZhESK
-                                       5EYRaR/2dLw5H10SR+wb/qRVVYovWlk67sql
-                                       7XYc3x5cjc4XaMVziBBrQMiWqkQS2oGQLwKC
-                                       Lw==
-                                       ) ; ZSK; alg = RSASHA1; key id = 51829
-                       300     DNSKEY  257 3 5 (
-                                       AwEAAaLNbgMfH/XUwZC9DBVG4OpYVUVyCyZE
-                                       Bqhk3k6WziIAY+2f7MN3L9CoZR9GqfqM+/c6
-                                       g8gfkIaZZ2YP/YUUaN73xH/nxtHYkrP5Rqe/
-                                       dw7qONnsVwvf3HJ8HvURG3wjaOrPoe207+Hp
-                                       NTNhe/sT2usKhokSU8yKB0DKlnrKQvp9vScs
-                                       IB/RsIxOXWmYgOMkSXtpI3lQ07l1i2Tv6Une
-                                       cD9s8rukfl/gPbRBketLYACrqpb2j/1f7ciQ
-                                       v+rz1GnN9ma8XK1Yw8173/hrVL1S/ZqTGczw
-                                       deA3AVyiHThOZ15EPhSuL7jaJusHOi43Aa8Z
-                                       fCMCeimT73F5epktGomAxFU=
-                                       ) ; KSK; alg = RSASHA1; key id = 5896
-                       300     RRSIG   DNSKEY 5 1 300 (
-                                       20361231235959 20000101000000 5896 example.
-                                       b07impYEH+uW8iPCVE0QXqYSs6Yyu7Nb8q1f
-                                       rXv+NgE5wbsIvdo4PDdSfScP41WgVKdLPipH
-                                       gaTyk4CKAuGSvIBMzlc3yib03zdvzBDgn3Yi
-                                       lONpl2yH47vhvn5iXYcVV4kbuYE9+SFVoVO8
-                                       m6xvihm1D17m8emivnG6DuJSpJJM09v0toSd
-                                       3yGI3bgUtki85ehOPU0ZkvA20InVgP5kKUgw
-                                       /M4vP4VkcwenNO7koMZOorI02KFOH3vvZSI4
-                                       hzuwJVaQZ35IBBVmSSMAD+0LTBk6sMPSpcmP
-                                       Pff75NLhU+4+UflWie6mzWIvm3ovcG3fveq0
-                                       W4G3TCriTIKSjY3Jqg== )
-                       300     RRSIG   DNSKEY 5 1 300 (
-                                       20361231235959 20000101000000 51829 example.
-                                       a7WU2WcHEpDfM5NBUzN7t4WXEwldn1EM/HkH
-                                       XEo9NnZhFV16414qbuwWMlUsc5MTii+T4OFZ
-                                       p2+XHj9M8glM1d98o+EDSYT7LdrrE7AqdtSO
-                                       gcXdeY6WRI9R5wkLP3cP6kADp5WIOcQ78IPb
-                                       pRJ4jhxqMPFV3cqCWH/Lp8JPghY= )
+                       300     RRSIG   NS 8 1 300 (
+                                       20361231235959 20000101000000 52810 example.
+                                       VUPhDucH6rlx93V13b7OSAQ6fE/9jlxhCTXv
+                                       peBD69WOa4jZHMZf60gqy10gLVMx35gZdEaU
+                                       cJqaBcAniSwPY3a7mxclMja7fmuCB9wcSbiP
+                                       pwk5KIYSgIvoWp3ro2I19C0IDQDVWtH1xqdQ
+                                       Dv+3MV39Zpf0AnXB05mBopI2DQI9mYHCnmis
+                                       F3pfcfs+h/ipyodE5kccBBRvtfKWHly342Xe
+                                       azHKM4eyuGj9NLwuwsoVgnyQ3I9hrKVAiUjS
+                                       fQ4cxyBVhh+Wb1/VrVSbX+X9VNzQ04mcREHS
+                                       yXIPoIQBNju3dyOSTQ+VIeasRvRU8nqMS/1f
+                                       oeqj5ehTjtfejF6Jfw== )
+                       300     NSEC    a.example. NS SOA RRSIG NSEC DNSKEY
+                       300     RRSIG   NSEC 8 1 300 (
+                                       20361231235959 20000101000000 52810 example.
+                                       bG90DOCaN7BhihvtCUs2eJhSHkRaV582ROQi
+                                       AbamawevX8NQGJeVpHb3t5ekQuK5EWjLFr6i
+                                       bga5TpeP8HOv3lDb8w7kb7xOrHycw5Sizws5
+                                       PZTvtuty9nT6dZ9h4pfLNTbW+SBV904xv3JT
+                                       ZlXoxtm4JAdmKUcGiCFLjMvwbQ5SKEZq27uN
+                                       9xCeY0CPkQmiGbTrySYFyNZsBBsL2OI5ec2V
+                                       TbQVSDhnnEhbVdMb8Yh2sTt9H/CT1yG2s4U9
+                                       a9ccxguFzt6mk+f5ZL+WKgxkTOMOrZW3dyiI
+                                       x53dNQyZN/tczibox/LLG/SaET5wR/V5gDsh
+                                       9DObfc9u1+of/H0lhg== )
+                       300     DNSKEY  257 3 8 (
+                                       AwEAAeeXAGBcXxSNj5X/PWT8XDBk4U9OUkZ7
+                                       YKQBf2IN3V6OZomt/s3FUWIh70Wot+z1Ld3R
+                                       fswq1DjCaWNRFOMhs+9j3Fhc46wMZ4pnsDW1
+                                       nLHk2TnQRdrbiuhLkQy5oNMjSRxu924XLw5y
+                                       lsuqjxE7vXcCeKSFe674roSqwo39atWsTJMD
+                                       z0FQGxlPucnXai0nHoCeC7+u1s+wLaGcpNSZ
+                                       lsab7ZnyFD4HZ3HKUCJw/Jjr5CZjqal9KdmW
+                                       SC1SINRtlAN6PX5VSiNEncnYMCdjiv+ZhRGn
+                                       +aHh1BmEWomGbAm2Jjw5mrYMgDs9lJRc5Vtg
+                                       0YXb9OkYvxNFV4QGw1oeF+M=
+                                       ) ; KSK; alg = RSASHA256 ; key id = 51650
+                       300     DNSKEY  256 3 8 (
+                                       BwEAAAAAAAHYYy161+wCg6yFHRlyex8oVkcK
+                                       +K2SBUryI1+DEKzjusH6yLfzzlJCPGrubmD+
+                                       jseKYwXfzelJkRQbMDjWbMYLHKytuPtwnJMS
+                                       eVh+a/Ore6oVPXy716EYpsEBSmVjfQyS0mGH
+                                       pwrYk4QaKjJDM7Q173EFl/sEeXjHqInlzOgJ
+                                       bXqsCrSfA94anSt42DGhJeeIfQ8b3vqD/nCn
+                                       A6C7khItAWlfJto7d42Ev8tckjr3CrTW9tn9
+                                       pHb2DKeh85rKeJBBLMYQU3jfF5KHEEsjztLG
+                                       MnPLlXTteh8wKrk/0IJrot17w0FR0H2v8oG3
+                                       xDXxfhJ0OeTW7dtBHD6ISgqeJ9zt
+                                       ) ; ZSK; alg = RSASHA256 ; key id = 52810
+                       300     RRSIG   DNSKEY 8 1 300 (
+                                       20361231235959 20000101000000 52810 example.
+                                       O4q1oueEgPoWHhrLiobGvMQLS2KHN+xxSddf
+                                       y6fqksqivRLgj0633fnEZrFtc44YueV+L4gQ
+                                       kaoWCCpR0yQH4BOw4p3FVjEgl+jXLzIc7amw
+                                       ZfKAnSOtMoTaBCQ2hN8b2ducUHgKV7ta9bca
+                                       lO0wuqqp2OOO/n9S3YMBVfrCW4jL2w1QPC+b
+                                       lm/4ka8OwqKKGAcO0d/nGeOPJZnfbddSzqEQ
+                                       C3j1tGavwBC4RAGilxw3XoyoICDp0LQR7M9a
+                                       tWAxYmMfilEEfpip9R3HhCa+ynIVsHP8yTXE
+                                       dlWM3LUZePm44aV38YeObJpRMkb8sO5VrbZn
+                                       8hJoIs3eyguC4HKKTg== )
+                       300     RRSIG   DNSKEY 8 1 300 (
+                                       20361231235959 20000101000000 51650 example.
+                                       Eaw79mOoImGg+ymMJ+9paoanUgR/Od0Pxv/X
+                                       mevid1TRbssSc2KynAToxSXRcOQwRQjto9sC
+                                       qj0pOekPPmW1I6DRlMOGDS6l0Uuk51GvUuRD
+                                       Xbr19BG73mcPuKfYHNbx6cUHvBlPilnjM803
+                                       m9E8DK6Ba9uo/MNhgtWoWj8wQxqP2YS+HW3v
+                                       bOv/p4en9Dc5ft6ATtSYj84ejuPAKnfVbleI
+                                       fJW+qIQ7q9A24xEZ4QlWuRovjsoASVsuLnX+
+                                       X4sQYlWBIPMQYQ8RIN1CgSRPGb603pAq9ru6
+                                       ySpjlxHQRtdOGBNJleg9Wz612rHRd3x7BM+8
+                                       /Lvz31Ot/JSh3u4DSQ== )
 a.example.             300     IN A    10.0.0.1
-                       300     RRSIG   A 5 2 300 (
-                                       20361231235959 20000101000000 51829 example.
-                                       h4WyY0hUkZobUbt2xWC4lJLEbGvzxGczH/mN
-                                       WHZBpgg+1tuoTAdVbt6a2TfQcJV/iPQGAHte
-                                       Vu/U6tD8KzP08krlqrcefwvR5LDAQygWRdjt
-                                       Rx105w9F0GiL6kpDH6S9T8xCw3aF5Rl1lu/u
-                                       8eiUzDIMIBTijhXmM96Nde18RdA= )
-                       3600    NSEC    ns2.example. A RRSIG NSEC
-                       3600    RRSIG   NSEC 5 2 3600 (
-                                       20361231235959 20000101000000 51829 example.
-                                       LbzeWbk9r119I95TVCebEPfnCCk9zBRq4nAR
-                                       swliQVQ84bCjwVJfakvlD4mgilSPtypxpyXC
-                                       DQaiOQWOz9LFzro5u71VuSS5fY7U4elp/lq6
-                                       5BJB6o/dmk5xASAHHbOO6e5dcoQ5vRxcnJaE
-                                       0vE1jGppo2FiQzkVi7Zbrghoolg= )
+                       300     RRSIG   A 8 2 300 (
+                                       20361231235959 20000101000000 52810 example.
+                                       zp4L0Um0guehtT+4GQaMeYx5PiwEbSRyi7sg
+                                       Xv2uFn/wFML/Df0PgCxCYkWKL2Db/j15IZON
+                                       uz2CNRG7lDMZsb+JgyLZ6R3OuSKjwzA++kUu
+                                       8ExPpdrFHxZFMPefkU1vjf7E1yt4/aSaO23T
+                                       m0F6yFHcVfBE1DElG1vLWO6cWtSIMKjXOo15
+                                       Zy2hHhT/7jKhqcHnwwCBHLuV9/e9OmI34H7I
+                                       Sd3Ik8dnNEjRTVbLem3tQMfQ9ZfYDHPHli+z
+                                       Z5dGgPmpyNPq5bfs7O5uCO5cNCbouFdEnc6O
+                                       DA9QiyOGba8w7vI1gHMvA+rWPpA+fTGgrVRq
+                                       7bTfa0jTOsybR8rZjg== )
+                       300     NSEC    ns2.example. A RRSIG NSEC
+                       300     RRSIG   NSEC 8 2 300 (
+                                       20361231235959 20000101000000 52810 example.
+                                       oh6oqdC9OIoO0jIN0x9MIBlYlzAg2LFYffrP
+                                       QlgPAtPn8A9cPCxU2i6hJ1ubqc6o1LVD7LH6
+                                       GVj842Ytys1uO2Nwf9xXS4gbchJ6NE9IjQh6
+                                       IoBNmlgdfprzJEJlEFx73dytakfcjc+hIj8t
+                                       b14Lu2/5BBDSamw+uVyeV8Wg2jNdrN7UEqyA
+                                       ccnhLPWHAOtspzxrmCrBDPc6Geelu8KzARs5
+                                       qOZ/p9CKffmKL/65K/N8WWKQWVNI22tAbiWT
+                                       J1t3BNkOLUSKMvEVLFcgStV4QtFcQrSB96Hu
+                                       D2rSbAGsH5Ujmz4GTxhOSqd8OJ7XDEWlhZod
+                                       LhUBltfjmakorhGqqg== )
 ns2.example.           300     IN A    10.53.0.2
-                       300     RRSIG   A 5 2 300 (
-                                       20361231235959 20000101000000 51829 example.
-                                       Jfp3xzrym5GksbZ+a2rjOXzV/Ct+eX2DCo8a
-                                       lSbriEhuK9OR3WUnXoDqp1X/d7adNL2lI9c+
-                                       B3UVL+EOCyvNxt9kECcN8KgQdXKExZEQUwnN
-                                       UB51QESM9pW6akavhXJu98sjnhtpdTwrtKbg
-                                       nMJkfYe5Mw3e/8RFY+wpEq/8cHw= )
-                       3600    NSEC    example. A RRSIG NSEC
-                       3600    RRSIG   NSEC 5 2 3600 (
-                                       20361231235959 20000101000000 51829 example.
-                                       Wxkz4nY5rty6O90QhFZguyqbaz9njnJKUs7m
-                                       qYF9u7dDk8vUf3yS97fw3e0N13X5zGZa7hTr
-                                       +65U4NKEOqYDBbvWaXSVFxrzVfSVXqY6l4jX
-                                       kWjA6q4q5TTgcjOUJ0MfvcjtgxcaKUiPGmPJ
-                                       RWdOV7t9YMWnf7QAbPI55QN9sfY= )
+                       300     RRSIG   A 8 2 300 (
+                                       20361231235959 20000101000000 52810 example.
+                                       sDlETJwDoWqYZdcwYBW/l+Ot4Tb3mSXJvW3R
+                                       1fsoiq/obWZeC+bU2MszckcZKPET2CRqBD+c
+                                       uLCcOhZrcH0m25Y02SAzOOG2V12KNvWVznSz
+                                       bZw+/+ucYhxhiNKherdwpHOAdjlhG//zFHDy
+                                       sAxmrtjWO2DT9pv1Hd/Hm3aGgAYTs0ryyeyo
+                                       k05sTgdr43APFkX4SNoNXGUEt8E0uMghIvhi
+                                       mgKSQ45fZFsZeUiEfwvtQ8uAuDNOLWK49Bw5
+                                       184QrQ/NZ3YVyJercg7wm/jFMVkgxggiOl2q
+                                       ZCLadaSQNnsvtbwgyTktRJb5YovzZEQrH7O0
+                                       vW/DAN1Cqa1nXw/kZA== )
+                       300     NSEC    example. A RRSIG NSEC
+                       300     RRSIG   NSEC 8 2 300 (
+                                       20361231235959 20000101000000 52810 example.
+                                       DyLuymW3Bv6irCLzfUGnz2cy1XctqfW7ycLc
+                                       7wgDzDLNvJ6tqr8tjHKMdCODJDiG+lR5oFo7
+                                       8RA604OYcmJjLIAMj3fCxzBkIlH5SXRcJ86X
+                                       a8U6oXrgt6IvUMC2crdWMVgVnSWlqBS4TNNg
+                                       QhUa+vt+Em8ce3fveqh1tXm1hzysSroOQtMk
+                                       HOPAtwYR9XP4mTdbC43AU/67jsYPqXq59lm4
+                                       sE1tmnVdhXuOk7yNAt8O2CSZGGZl5bYMC4On
+                                       IgWZP7liebXAmhmXpHbBf5/BaE9dVfvWzYTT
+                                       4wUch+f8TDwwyTqumrlrPsVnvkQ9V0LwODox
+                                       PxWWxFAznmUMEtlo3g== )

diff --git a/bin/tests/system/rsabigexponent/ns2/sign.sh b/bin/tests/system/rsabigexponent/ns2/sign.sh
index 2f3fa05492dbaa1dbe99fa66956e75d1c11008b8..015f6a90ad79fc2b572c1cdd3f77b085f7ac2476 100755 (executable)
--- a/bin/tests/system/rsabigexponent/ns2/sign.sh
+++ b/bin/tests/system/rsabigexponent/ns2/sign.sh
@@ -18,12 +18,12 @@ zone=example.
 infile=example.db.in
 outfile=example.db.bad
 
-for i in Xexample.+005+51829.key Xexample.+005+51829.private \
-       Xexample.+005+05896.key Xexample.+005+05896.private
+for i in Xexample.+008+51650.key Xexample.+008+51650.private \
+        Xexample.+008+52810.key Xexample.+008+52810.private
 do
        cp $i `echo $i | sed s/X/K/`
 done
 
 $SIGNER -g -s 20000101000000 -e 20361231235959 -o $zone \
-       $infile Kexample.+005+51829 Kexample.+005+51829 \
+       $infile Kexample.+008+52810.key \
        > /dev/null 2> signer.err || true