Check that DNAME is not treated as a delegation when signing

(cherry picked from commit adbca54079a7ebac26dec72b24fb25d229f5160a)

diff --git a/bin/tests/system/autosign/ns3/dname-at-apex-nsec3.example.db.in b/bin/tests/system/autosign/ns3/dname-at-apex-nsec3.example.db.in
index c4a378eba1225e12e581417c593b2aff41020cef..def9dd7d560247ce1bab6c44bce87f3fbd3f4a97 100644 (file)
--- a/bin/tests/system/autosign/ns3/dname-at-apex-nsec3.example.db.in
+++ b/bin/tests/system/autosign/ns3/dname-at-apex-nsec3.example.db.in
@@ -1,3 +1,12 @@
+; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+;
+; This Source Code Form is subject to the terms of the Mozilla Public
+; License, v. 2.0. If a copy of the MPL was not distributed with this
+; file, You can obtain one at http://mozilla.org/MPL/2.0/.
+;
+; See the COPYRIGHT file distributed with this work for additional
+; information regarding copyright ownership.
+
 $TTL   600
 @      SOA     ns3.example. . 1 1200 1200 1814400 3600
 @      NS      ns3.example.

diff --git a/bin/tests/system/autosign/ns3/secure.example.db.in b/bin/tests/system/autosign/ns3/secure.example.db.in
index 3f10748395e0198ed58e517bb815e42ae9697425..a3abaefac9a7ba70b0dd7afbebc1ea34429a921b 100644 (file)
--- a/bin/tests/system/autosign/ns3/secure.example.db.in
+++ b/bin/tests/system/autosign/ns3/secure.example.db.in
@@ -31,3 +31,5 @@ ns.private            A       10.53.0.2
 insecure               NS      ns.insecure
 ns.insecure            A       10.53.0.2
 
+dname-and-txt          DNAME   @
+                       TXT     "DNAME and TXT"

diff --git a/bin/tests/system/autosign/tests.sh b/bin/tests/system/autosign/tests.sh
index 238f5c11a74348c4505465ce3c02f11bfbdd8442..542990084577648d9ce2927b7608e86ac4cd40fe 100755 (executable)
--- a/bin/tests/system/autosign/tests.sh
+++ b/bin/tests/system/autosign/tests.sh
@@ -1432,5 +1432,15 @@ n=`expr $n + 1`
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=`expr $status + $ret`
 
+echo_i "checking that DNAME is not treated as a delegation when signing ($n)"
+ret=0
+$DIG $DIGOPTS dname-and-txt.secure.example. DNAME @10.53.0.3 > dig.out.ns3.1.test$n || ret=1
+grep "dname-and-txt.secure.example.*RRSIG.*DNAME" dig.out.ns3.1.test$n > /dev/null 2>&1 || ret=1
+$DIG $DIGOPTS dname-and-txt.secure.example. TXT @10.53.0.3 > dig.out.ns3.2.test$n || ret=1
+grep "dname-and-txt.secure.example.*RRSIG.*TXT" dig.out.ns3.2.test$n > /dev/null 2>&1 || ret=1
+n=`expr $n + 1`
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=`expr $status + $ret`
+
 echo_i "exit status: $status"
 [ $status -eq 0 ] || exit 1