mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-03 20:40:08 -05:00
b3c7bd1c04
This patch is strictly the result of: $ black $(git ls-files '*.py' '*.py.in') There have been no manual changes.
104 lines
3.2 KiB
Python
104 lines
3.2 KiB
Python
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
import sys
|
|
import unittest
|
|
|
|
sys.path.append("../..")
|
|
from isc import *
|
|
|
|
|
|
class PolicyTest(unittest.TestCase):
|
|
def test_keysize(self):
|
|
pol = policy.dnssec_policy()
|
|
pol.load("test-policies/01-keysize.pol")
|
|
|
|
p = pol.policy("good_rsa.test", novalidate=True)
|
|
self.assertEqual(p.get_name(), "good_rsa.test")
|
|
self.assertEqual(p.constructed(), False)
|
|
self.assertEqual(p.validate(), (True, ""))
|
|
|
|
def test_prepublish(self):
|
|
pol = policy.dnssec_policy()
|
|
pol.load("test-policies/02-prepublish.pol")
|
|
p = pol.policy("good_prepublish.test", novalidate=True)
|
|
self.assertEqual(p.validate(), (True, ""))
|
|
|
|
p = pol.policy("bad_prepublish.test", novalidate=True)
|
|
self.assertEqual(
|
|
p.validate(),
|
|
(
|
|
False,
|
|
"KSK pre/post-publish periods "
|
|
"(10368000/5184000) combined exceed "
|
|
"rollover period 10368000",
|
|
),
|
|
)
|
|
|
|
def test_postpublish(self):
|
|
pol = policy.dnssec_policy()
|
|
pol.load("test-policies/03-postpublish.pol")
|
|
|
|
p = pol.policy("good_postpublish.test", novalidate=True)
|
|
self.assertEqual(p.validate(), (True, ""))
|
|
|
|
p = pol.policy("bad_postpublish.test", novalidate=True)
|
|
self.assertEqual(
|
|
p.validate(),
|
|
(
|
|
False,
|
|
"KSK pre/post-publish periods "
|
|
"(10368000/5184000) combined exceed "
|
|
"rollover period 10368000",
|
|
),
|
|
)
|
|
|
|
def test_combined_pre_post(self):
|
|
pol = policy.dnssec_policy()
|
|
pol.load("test-policies/04-combined-pre-post.pol")
|
|
|
|
p = pol.policy("good_combined_pre_post_ksk.test", novalidate=True)
|
|
self.assertEqual(p.validate(), (True, ""))
|
|
|
|
p = pol.policy("bad_combined_pre_post_ksk.test", novalidate=True)
|
|
self.assertEqual(
|
|
p.validate(),
|
|
(
|
|
False,
|
|
"KSK pre/post-publish periods "
|
|
"(5184000/5184000) combined exceed "
|
|
"rollover period 10368000",
|
|
),
|
|
)
|
|
|
|
p = pol.policy("good_combined_pre_post_zsk.test", novalidate=True)
|
|
self.assertEqual(p.validate(), (True, ""))
|
|
p = pol.policy("bad_combined_pre_post_zsk.test", novalidate=True)
|
|
self.assertEqual(
|
|
p.validate(),
|
|
(
|
|
False,
|
|
"ZSK pre/post-publish periods "
|
|
"(5184000/5184000) combined exceed "
|
|
"rollover period 7776000",
|
|
),
|
|
)
|
|
|
|
def test_numeric_zone(self):
|
|
pol = policy.dnssec_policy()
|
|
pol.load("test-policies/05-numeric-zone.pol")
|
|
|
|
p = pol.policy("99example.test", novalidate=True)
|
|
self.assertEqual(p.validate(), (True, ""))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
unittest.main()
|