upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-03-14 06:32:14 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/bin/tests/system/forward/setup.sh

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

50 lines
1.4 KiB
Bash
Raw Normal View History

parallelize most system tests
2018-02-20 18:43:27 -05:00
#!/bin/sh
Update the copyright information in all files in the repository This commit converts the license handling to adhere to the REUSE specification. It specifically: 1. Adds used licnses to LICENSES/ directory 2. Add "isc" template for adding the copyright boilerplate 3. Changes all source files to include copyright and SPDX license header, this includes all the C sources, documentation, zone files, configuration files. There are notes in the doc/dev/copyrights file on how to add correct headers to the new files. 4. Handle the rest that can't be modified via .reuse/dep5 file. The binary (or otherwise unmodifiable) files could have license places next to them in <foo>.license file, but this would lead to cluttered repository and most of the files handled in the .reuse/dep5 file are system test files.
2021-06-03 02:37:05 -04:00
final cleanup - add CHANGES note - update copyrights and license headers - add -j to the make commands in .gitlab-ci.yml to take advantage of parallelization in the gitlab CI process
2018-02-22 18:10:37 -05:00
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
parallelize most system tests
2018-02-20 18:43:27 -05:00
#
# SPDX-License-Identifier: MPL-2.0
Update the copyright information in all files in the repository This commit converts the license handling to adhere to the REUSE specification. It specifically: 1. Adds used licnses to LICENSES/ directory 2. Add "isc" template for adding the copyright boilerplate 3. Changes all source files to include copyright and SPDX license header, this includes all the C sources, documentation, zone files, configuration files. There are notes in the doc/dev/copyrights file on how to add correct headers to the new files. 4. Handle the rest that can't be modified via .reuse/dep5 file. The binary (or otherwise unmodifiable) files could have license places next to them in <foo>.license file, but this would lead to cluttered repository and most of the files handled in the .reuse/dep5 file are system test files.
2021-06-03 02:37:05 -04:00
#
parallelize most system tests
2018-02-20 18:43:27 -05:00
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
Update license headers to not include years in copyright in all applicable files
2018-02-23 03:53:12 -05:00
#
parallelize most system tests
2018-02-20 18:43:27 -05:00
# See the COPYRIGHT file distributed with this work for additional
# information regarding copyright ownership.
Drop $SYSTEMTESTTOP from bin/tests/system/ The $SYSTEMTESTTOP shell variable if often set to .. in various shell scripts inside bin/tests/system/, but most of the time it is only used one line later, while sourcing conf.sh. This hardly improves code readability. $SYSTEMTESTTOP is also used for the purpose of referencing scripts/files living in bin/tests/system/, but given that the variable is always set to a short, relative path, we can drop it and replace all of its occurrences with the relative path without adversely affecting code readability.
2020-07-21 06:12:59 -04:00
. ../conf.sh
parallelize most system tests
2018-02-20 18:43:27 -05:00
copy_setports ns1/named.conf.in ns1/named.conf
forward: Check if TLS is working in FIPS mode Skip test that depend on TLS working in FIPS mode
2023-03-21 20:02:02 -04:00
if $FEATURETEST --have-fips-dh; then
copy_setports ns2/named-tls.conf.in ns2/named-tls.conf
copy_setports ns2/options-tls.conf.in ns2/options-tls.conf
copy_setports ns2/named.conf.in ns2/named.conf
else
cp /dev/null ns2/named-tls.conf
cp /dev/null ns2/options-tls.conf
copy_setports ns2/named.conf.in ns2/named.conf
fi
test whether DS chasing works correctly when forwarding
2020-07-10 20:57:23 -04:00
copy_setports ns3/named1.conf.in ns3/named.conf
forward: Check if TLS is working in FIPS mode Skip test that depend on TLS working in FIPS mode
2023-03-21 20:02:02 -04:00
if $FEATURETEST --have-fips-dh; then
copy_setports ns4/named-tls.conf.in ns4/named-tls.conf
copy_setports ns4/options-tls.conf.in ns4/options-tls.conf
copy_setports ns4/named.conf.in ns4/named.conf
else
cp /dev/null ns4/named-tls.conf
cp /dev/null ns4/options-tls.conf
copy_setports ns4/named.conf.in ns4/named.conf
fi
parallelize most system tests
2018-02-20 18:43:27 -05:00
copy_setports ns5/named.conf.in ns5/named.conf
If possible don't use forwarders when priming the resolver. If we try to fetch a record from cache and need to look into hints database we assume that the resolver is not primed and start dns_resolver_prime(). Priming query is supposed to return NSes for "." in ANSWER section and glue records for them in ADDITIONAL section, so that we can fill that info in 'regular' cache and not use hints db anymore. However, if we're using a forwarder the priming query goes through it, and if it's configured to return minimal answers we won't get the addresses of root servers in ADDITIONAL section. Since the only records for root servers we have are in hints database we'll try to prime the resolver with every single query. This patch adds a DNS_FETCHOPT_NOFORWARD flag which avoids using forwarders if possible (that is if we have forward-first policy). Using this flag on priming fetch fixes the problem as we get the proper glue. With forward-only policy the problem is non-existent, as we'll never ask for root server addresses because we'll never have a need to query them. Also added a test to confirm priming queries are not forwarded.
2019-01-03 08:58:05 -05:00
copy_setports ns7/named.conf.in ns7/named.conf
check recovery from forwarding to a non-recursive server
2019-09-11 03:08:47 -04:00
copy_setports ns8/named.conf.in ns8/named.conf
Add tests for forwarder cache poisoning scenarios - Check that an NS in an authority section returned from a forwarder which is above the name in a configured "forward first" or "forward only" zone (i.e., net/NS in a response from a forwarder configured for local.net) is not cached. - Test that a DNAME for a parent domain will not be cached when sent in a response from a forwarder configured to answer for a child. - Check that glue is rejected if its name falls below that of zone configured locally. - Check that an extra out-of-bailiwick data in the answer section is not cached (this was already working correctly, but was not explicitly tested before).
2022-01-17 08:19:47 -05:00
copy_setports ns9/named1.conf.in ns9/named.conf
copy_setports ns10/named.conf.in ns10/named.conf
test whether DS chasing works correctly when forwarding
2020-07-10 20:57:23 -04:00
(
cd ns1
$SHELL sign.sh
)
Reference in a new issue Copy permalink