bind9/bin/tests/system/dnssec/setup.sh

#!/bin/sh -e
#
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
#
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
#
# See the COPYRIGHT file distributed with this work for additional
# information regarding copyright ownership.

SYSTEMTESTTOP=..
. $SYSTEMTESTTOP/conf.sh

$SHELL clean.sh 

test -r $RANDFILE || $GENRANDOM 800 $RANDFILE

copy_setports ns1/named.conf.in ns1/named.conf
copy_setports ns2/named.conf.in ns2/named.conf
copy_setports ns3/named.conf.in ns3/named.conf

copy_setports ns4/named1.conf.in ns4/named.conf
copy_setports ns5/named1.conf.in ns5/named.conf

copy_setports ns6/named.conf.in ns6/named.conf
copy_setports ns7/named.conf.in ns7/named.conf

cd ns1
$SHELL sign.sh

echo "a.bogus.example.	A	10.0.0.22" >>../ns3/bogus.example.db.signed
echo "b.bogus.example.	A	10.0.0.23" >>../ns3/bogus.example.db.signed
echo "c.bogus.example.	A	10.0.0.23" >>../ns3/bogus.example.db.signed

cd ../ns3
cp -f siginterval1.conf siginterval.conf

cd ../ns5
cp -f trusted.conf.bad trusted.conf
$SHELL sign.sh
2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system test. [RT #20453] 2009-10-27 18:25:37 -04:00			`#!/bin/sh -e`
Add copyright entries 2000-05-19 18:45:47 -04:00			`#`
Update license headers to not include years in copyright in all applicable files 2018-02-23 03:53:12 -05:00			`# Copyright (C) Internet Systems Consortium, Inc. ("ISC")`
reverse bad copyright update 2012-06-28 21:39:47 -04:00			`#`
4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 00:56:38 -04:00			`# This Source Code Form is subject to the terms of the Mozilla Public`
			`# License, v. 2.0. If a copy of the MPL was not distributed with this`
			`# file, You can obtain one at http://mozilla.org/MPL/2.0/.`
Update license headers to not include years in copyright in all applicable files 2018-02-23 03:53:12 -05:00			`#`
			`# See the COPYRIGHT file distributed with this work for additional`
			`# information regarding copyright ownership.`
added system tests 2000-05-15 18:53:15 -04:00
[master] testcrypto.sh in system tests 3714. [test] System tests that need to test for cryptography support before running can now use a common "testcrypto.sh" script to do so. [RT #35213] 2014-01-20 19:08:09 -05:00			`SYSTEMTESTTOP=..`
			`. $SYSTEMTESTTOP/conf.sh`
3020. [bug] auto-dnssec failed to correctly update the zone when changing the DNSKEY RRset. [RT #23232] 2011-02-15 17:02:36 -05:00
[master] use posix-compatible shell in system tests 3839. [test] Use only posix-compatible shell in system tests. [RT #35625] 2014-05-07 01:06:04 -04:00			`$SHELL clean.sh`
Added a small program to generate "random" data. It's not really random, but it's only for tests. This allows the large files containing random data to be removed from the tree. 2000-08-08 17:47:55 -04:00
Increase minimum RSA keygen size to 1024 bits (#36895) 2017-04-21 02:24:23 -04:00			`test -r $RANDFILE \|\| $GENRANDOM 800 $RANDFILE`
add RCS id string 2000-06-22 18:00:42 -04:00
parallelize most system tests 2018-02-20 18:43:27 -05:00			`copy_setports ns1/named.conf.in ns1/named.conf`
			`copy_setports ns2/named.conf.in ns2/named.conf`
			`copy_setports ns3/named.conf.in ns3/named.conf`

			`copy_setports ns4/named1.conf.in ns4/named.conf`
			`copy_setports ns5/named1.conf.in ns5/named.conf`

			`copy_setports ns6/named.conf.in ns6/named.conf`
			`copy_setports ns7/named.conf.in ns7/named.conf`

			`cd ns1`
			`$SHELL sign.sh`
added system tests 2000-05-15 18:53:15 -04:00
Sweeping changes to system test suite 2000-05-18 18:49:29 -04:00			`echo "a.bogus.example. A 10.0.0.22" >>../ns3/bogus.example.db.signed`
[master] rndc nta 3867. [func] "rndc nta" can now be used to set a temporary negative trust anchor, which disables DNSSEC validation below a specified name for a specified period of time (not exceeding 24 hours). This can be used when validation for a domain is known to be failing due to a configuration error on the part of the domain owner rather than a spoofing attack. [RT #29358] 2014-05-30 01:22:53 -04:00			`echo "b.bogus.example. A 10.0.0.23" >>../ns3/bogus.example.db.signed`
[master] complete NTA work 3882. [func] By default, negative trust anchors will be tested periodically to see whether data below them can be validated, and if so, they will be allowed to expire early. The "rndc nta -force" option overrides this behvaior. The default NTA lifetime and the recheck frequency can be configured by the "nta-lifetime" and "nta-recheck" options. [RT #36146] 2014-06-18 19:47:22 -04:00			`echo "c.bogus.example. A 10.0.0.23" >>../ns3/bogus.example.db.signed`
Put the bad trusted key in place on ns5 2000-06-07 21:58:04 -04:00
parallelize most system tests 2018-02-20 18:43:27 -05:00			`cd ../ns3`
			`cp -f siginterval1.conf siginterval.conf`

			`cd ../ns5`
			`cp -f trusted.conf.bad trusted.conf`
			`$SHELL sign.sh`