upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-28 04:21:07 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/bin/tests/system/inline/setup.sh

54 lines
1.7 KiB
Bash
Raw Normal View History

Update license headers to not include years in copyright in all applicable files
2018-02-23 03:53:12 -05:00
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
reverse bad copyright update
2012-06-28 21:39:47 -04:00
#
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 00:56:38 -04:00
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
update all copyright headers to eliminate the typo
2020-09-14 19:50:58 -04:00
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
Update license headers to not include years in copyright in all applicable files
2018-02-23 03:53:12 -05:00
#
# See the COPYRIGHT file distributed with this work for additional
# information regarding copyright ownership.
update copyright notice
2011-08-30 19:46:53 -04:00
[master] testcrypto.sh in system tests 3714. [test] System tests that need to test for cryptography support before running can now use a common "testcrypto.sh" script to do so. [RT #35213]
2014-01-20 19:08:09 -05:00
SYSTEMTESTTOP=..
. $SYSTEMTESTTOP/conf.sh
3177. [func] 'rndc keydone', remove the indicator record that named has finished signing the zone with the corresponding key. [RT #26206]
2011-10-24 21:54:22 -04:00
cp ns1/root.db.in ns1/root.db
3147. [func] Initial inline signing support. [RT #23657]
2011-08-30 01:16:15 -04:00
touch ns2/trusted.conf
Simplify the inline clean script
2019-02-05 16:23:11 -05:00
cp ns2/nsec3-loop.db.in ns2/nsec3-loop.db
3147. [func] Initial inline signing support. [RT #23657]
2011-08-30 01:16:15 -04:00
cp ns2/bits.db.in ns2/bits.db
4840. [test] Add tests to cover fallback to using ZSK on inactive KSK. [RT #46787]
2017-12-06 04:26:43 -05:00
cp ns2/bits.db.in ns2/inactiveksk.db
4837. [bug] dns_update_signatures{inc} (add_sigs) was not properly determining if there were active KSK and ZSK keys for a algorithm when update-check-ksk is true (default) leaving records unsigned. [RT #46743]
2017-12-03 18:03:51 -05:00
cp ns2/bits.db.in ns2/inactivezsk.db
Apply raw zone deltas to yet unsigned secure zones When inline signing is enabled for a zone without creating signing keys for it, changes subsequently applied to the raw zone will not be reflected in the secure zone due to the dns_update_signaturesinc() call inside receive_secure_serial() failing. Given that an inline zone will be served (without any signatures) even with no associated signing keys being present, keep applying raw zone deltas to the secure zone until keys become available in an attempt to follow the principle of least astonishment.
2018-03-16 19:12:23 -04:00
cp ns2/bits.db.in ns2/nokeys.db
cp ns2/bits.db.in ns2/removedkeys-secondary.db
3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
2012-02-23 01:53:15 -05:00
cp ns2/bits.db.in ns2/retransfer.db
3958. [bug] Detect when writeable files have multiple references in named.conf. [RT #37172]
2014-09-28 22:10:10 -04:00
cp ns2/bits.db.in ns2/retransfer3.db
3147. [func] Initial inline signing support. [RT #23657]
2011-08-30 01:16:15 -04:00
3181. [func] Inline-signing is now supported for master zones. [RT #26224]
2011-10-26 16:56:45 -04:00
cp ns3/master.db.in ns3/master.db
cp ns3/master.db.in ns3/dynamic.db
3252. [bug] When master zones using inline-signing were updated while the server was offline, the source zone could fall out of sync with the signed copy. They can now resynchronize. [RT #26676]
2011-12-22 02:32:41 -05:00
cp ns3/master.db.in ns3/updated.db
Add inline test related to unsupported algorithms
2019-01-14 10:02:30 -05:00
cp ns3/master.db.in ns3/unsupported.db
3264. [bug] Automatic regeneration of signatures in an inline-signing zone could stall when the server was restarted. [RT #27344] 3263. [bug] "rndc sync" did not affect the unsigned side of an inline-signing zone. [RT #27337]
2012-01-10 13:13:37 -05:00
cp ns3/master.db.in ns3/expired.db
3635. [bug] Signatures were not being removed from a zone with only KSK keys for a algorithm. [RT #24439]
2013-08-14 23:37:07 -04:00
cp ns3/master.db.in ns3/nsec3.db
3642. [func] Allow externally generated DNSKEY to be imported into the DNSKEY management framework. A new tool dnssec-importkey is used to this. [RT #34698]
2013-09-03 23:53:02 -04:00
cp ns3/master.db.in ns3/externalkey.db
Set DNS_JOURNALOPT_RESIGN when loading the secure journal for an inline-signed zone When an inline-signed zone is loaded, the master file for its signed version is loaded and then a rollforward of the journal for the signed version of the zone is performed. If DNS_JOURNALOPT_RESIGN is not set during the latter phase, signatures loaded from the journal for the signed version of the zone will not be scheduled for refresh. Fix the conditional expression determining which flags should be used for the dns_journal_rollforward() call so that DNS_JOURNALOPT_RESIGN is set when zone_postload() is called for the signed version of an inline-signed zone. Extend bin/tests/system/stop.pl so that it can use "rndc halt" instead of "rndc stop" as the former allows master file flushing upon shutdown to be suppressed.
2018-08-22 04:48:07 -04:00
cp ns3/master.db.in ns3/delayedkeys.db
Apply raw zone deltas to yet unsigned secure zones When inline signing is enabled for a zone without creating signing keys for it, changes subsequently applied to the raw zone will not be reflected in the secure zone due to the dns_update_signaturesinc() call inside receive_secure_serial() failing. Given that an inline zone will be served (without any signatures) even with no associated signing keys being present, keep applying raw zone deltas to the secure zone until keys become available in an attempt to follow the principle of least astonishment.
2018-03-16 19:12:23 -04:00
cp ns3/master.db.in ns3/removedkeys-primary.db
Fix inline test with missing $INCLUDE The test case for a zone with a missing include file was wrong for two reasons: 1. It was loading the wrong file (master5 instead of master6) 2. It did actually not set the $ret variable to 1 if the test failed (it should default to ret=1 and clear the variable if the appropriate log is found). (cherry picked from commit 96583e7c40bf25605385c8a71500fcfeaaa1833e)
2021-03-19 10:23:01 -04:00
cp ns3/include.db.in ns3/include.db
Apply raw zone deltas to yet unsigned secure zones When inline signing is enabled for a zone without creating signing keys for it, changes subsequently applied to the raw zone will not be reflected in the secure zone due to the dns_update_signaturesinc() call inside receive_secure_serial() failing. Given that an inline zone will be served (without any signatures) even with no associated signing keys being present, keep applying raw zone deltas to the secure zone until keys become available in an attempt to follow the principle of least astonishment.
2018-03-16 19:12:23 -04:00
mkdir ns3/removedkeys
3181. [func] Inline-signing is now supported for master zones. [RT #26224]
2011-10-26 16:56:45 -04:00
touch ns4/trusted.conf
cp ns4/noixfr.db.in ns4/noixfr.db
parallelize most system tests
2018-02-20 18:43:27 -05:00
copy_setports ns1/named.conf.in ns1/named.conf
copy_setports ns2/named.conf.in ns2/named.conf
copy_setports ns3/named.conf.in ns3/named.conf
copy_setports ns4/named.conf.in ns4/named.conf
copy_setports ns5/named.conf.pre ns5/named.conf
copy_setports ns6/named.conf.in ns6/named.conf
copy_setports ns7/named.conf.in ns7/named.conf
Check inline master zones that are touched reload correctly. (cherry picked from commit 50e079d6c3eea1a16b94bdb10d9e19939147bc30)
2020-03-02 03:38:29 -05:00
copy_setports ns8/named.conf.in ns8/named.conf
3166. [bug] Upgrading a zone to support inline-signing failed. [RT #26014]
2011-10-11 20:10:20 -04:00
[master] use posix-compatible shell in system tests 3839. [test] Use only posix-compatible shell in system tests. [RT #35625]
2014-05-07 01:06:04 -04:00
(cd ns3; $SHELL -e sign.sh)
(cd ns1; $SHELL -e sign.sh)
[master] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3 4727. [bug] Retransferring an inline-signed slave using NSEC3 around the time its NSEC3 salt was changed could result in an infinite signing loop. [RT #45080]
2017-09-18 03:18:45 -04:00
(cd ns7; $SHELL -e sign.sh)
Check inline master zones that are touched reload correctly. (cherry picked from commit 50e079d6c3eea1a16b94bdb10d9e19939147bc30)
2020-03-02 03:38:29 -05:00
(cd ns8; $SHELL -e sign.sh)
Reference in a new issue Copy permalink