bind9/bin/python/isc/tests/policy_test.py.in

# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
#
# SPDX-License-Identifier: MPL-2.0
#
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0.  If a copy of the MPL was not distributed with this
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
#
# See the COPYRIGHT file distributed with this work for additional
# information regarding copyright ownership.

import sys
import unittest

sys.path.append("../..")
from isc import *


class PolicyTest(unittest.TestCase):
    def test_keysize(self):
        pol = policy.dnssec_policy()
        pol.load("test-policies/01-keysize.pol")

        p = pol.policy("good_rsa.test", novalidate=True)
        self.assertEqual(p.get_name(), "good_rsa.test")
        self.assertEqual(p.constructed(), False)
        self.assertEqual(p.validate(), (True, ""))

    def test_prepublish(self):
        pol = policy.dnssec_policy()
        pol.load("test-policies/02-prepublish.pol")
        p = pol.policy("good_prepublish.test", novalidate=True)
        self.assertEqual(p.validate(), (True, ""))

        p = pol.policy("bad_prepublish.test", novalidate=True)
        self.assertEqual(
            p.validate(),
            (
                False,
                "KSK pre/post-publish periods "
                "(10368000/5184000) combined exceed "
                "rollover period 10368000",
            ),
        )

    def test_postpublish(self):
        pol = policy.dnssec_policy()
        pol.load("test-policies/03-postpublish.pol")

        p = pol.policy("good_postpublish.test", novalidate=True)
        self.assertEqual(p.validate(), (True, ""))

        p = pol.policy("bad_postpublish.test", novalidate=True)
        self.assertEqual(
            p.validate(),
            (
                False,
                "KSK pre/post-publish periods "
                "(10368000/5184000) combined exceed "
                "rollover period 10368000",
            ),
        )

    def test_combined_pre_post(self):
        pol = policy.dnssec_policy()
        pol.load("test-policies/04-combined-pre-post.pol")

        p = pol.policy("good_combined_pre_post_ksk.test", novalidate=True)
        self.assertEqual(p.validate(), (True, ""))

        p = pol.policy("bad_combined_pre_post_ksk.test", novalidate=True)
        self.assertEqual(
            p.validate(),
            (
                False,
                "KSK pre/post-publish periods "
                "(5184000/5184000) combined exceed "
                "rollover period 10368000",
            ),
        )

        p = pol.policy("good_combined_pre_post_zsk.test", novalidate=True)
        self.assertEqual(p.validate(), (True, ""))
        p = pol.policy("bad_combined_pre_post_zsk.test", novalidate=True)
        self.assertEqual(
            p.validate(),
            (
                False,
                "ZSK pre/post-publish periods "
                "(5184000/5184000) combined exceed "
                "rollover period 7776000",
            ),
        )

    def test_numeric_zone(self):
        pol = policy.dnssec_policy()
        pol.load("test-policies/05-numeric-zone.pol")

        p = pol.policy("99example.test", novalidate=True)
        self.assertEqual(p.validate(), (True, ""))


if __name__ == "__main__":
    unittest.main()