mirror of
https://github.com/isc-projects/bind9.git
synced 2026-03-13 06:02:37 -04:00
4cb8b13987
All changes in this commit were automated using the command: shfmt -w -i 2 -ci -bn . $(find . -name "*.sh.in") By default, only *.sh and files without extension are checked, so *.sh.in files have to be added additionally. (See mvdan/sh#944)
253 lines
7 KiB
Bash
253 lines
7 KiB
Bash
#!/bin/sh
|
|
|
|
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
set -e
|
|
|
|
. ../conf.sh
|
|
|
|
DIGOPTS="-p ${PORT}"
|
|
RNDCCMD="$RNDC -c ../_common/rndc.conf -p ${CONTROLPORT} -s"
|
|
|
|
status=0
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which refers to a CNAME"
|
|
if $CHECKZONE . cname.db >cname.out 2>&1; then
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
else
|
|
if grep "is a CNAME" cname.out >/dev/null; then
|
|
:
|
|
else
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
fi
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which is below a DNAME"
|
|
if $CHECKZONE . dname.db >dname.out 2>&1; then
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
else
|
|
if grep "is below a DNAME" dname.out >/dev/null; then
|
|
:
|
|
else
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
fi
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which has no address records (A/AAAA)"
|
|
if $CHECKZONE . noaddress.db >noaddress.out; then
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
else
|
|
if grep "has no address records" noaddress.out >/dev/null; then
|
|
:
|
|
else
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
fi
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which has no records"
|
|
if $CHECKZONE . nxdomain.db >nxdomain.out; then
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
else
|
|
if grep "has no address records" noaddress.out >/dev/null; then
|
|
:
|
|
else
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
fi
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which looks like a A record (fail)"
|
|
if $CHECKZONE -n fail . a.db >a.out 2>&1; then
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
else
|
|
if grep "appears to be an address" a.out >/dev/null; then
|
|
:
|
|
else
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
fi
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which looks like a A record (warn=default)"
|
|
if $CHECKZONE . a.db >a.out 2>&1; then
|
|
if grep "appears to be an address" a.out >/dev/null; then
|
|
:
|
|
else
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
fi
|
|
else
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which looks like a A record (ignore)"
|
|
if $CHECKZONE -n ignore . a.db >a.out 2>&1; then
|
|
if grep "appears to be an address" a.out >/dev/null; then
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
else
|
|
:
|
|
fi
|
|
else
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which looks like a AAAA record (fail)"
|
|
if $CHECKZONE -n fail . aaaa.db >aaaa.out 2>&1; then
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
else
|
|
if grep "appears to be an address" aaaa.out >/dev/null; then
|
|
:
|
|
else
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
fi
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which looks like a AAAA record (warn=default)"
|
|
if $CHECKZONE . aaaa.db >aaaa.out 2>&1; then
|
|
if grep "appears to be an address" aaaa.out >/dev/null; then
|
|
:
|
|
else
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
fi
|
|
else
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
fi
|
|
|
|
#
|
|
echo_i "checking that we detect a NS which looks like a AAAA record (ignore)"
|
|
if $CHECKZONE -n ignore . aaaa.db >aaaa.out 2>&1; then
|
|
if grep "appears to be an address" aaaa.out >/dev/null; then
|
|
echo_i "failed (message)"
|
|
status=$((status + 1))
|
|
else
|
|
:
|
|
fi
|
|
else
|
|
echo_i "failed (status)"
|
|
status=$((status + 1))
|
|
fi
|
|
|
|
#
|
|
echo_i "checking 'rdnc zonestatus' output"
|
|
ret=0
|
|
for i in 0 1 2 3 4 5 6 7 8 9; do
|
|
$RNDCCMD 10.53.0.1 zonestatus primary.example >rndc.out.pri 2>&1
|
|
grep "zone not loaded" rndc.out.pri >/dev/null || break
|
|
sleep 1
|
|
done
|
|
checkfor() {
|
|
grep "$1" $2 >/dev/null || {
|
|
ret=1
|
|
echo_i "missing string '$1' from '$2'"
|
|
}
|
|
}
|
|
checkfor "name: primary.example" rndc.out.pri
|
|
checkfor "type: primary" rndc.out.pri
|
|
checkfor "files: primary.db, primary.db.signed" rndc.out.pri
|
|
checkfor "serial: " rndc.out.pri
|
|
checkfor "nodes: " rndc.out.pri
|
|
checkfor "last loaded: " rndc.out.pri
|
|
checkfor "secure: yes" rndc.out.pri
|
|
checkfor "inline signing: no" rndc.out.pri
|
|
checkfor "key maintenance: automatic" rndc.out.pri
|
|
checkfor "next key event: " rndc.out.pri
|
|
checkfor "next resign node: " rndc.out.pri
|
|
checkfor "next resign time: " rndc.out.pri
|
|
checkfor "dynamic: yes" rndc.out.pri
|
|
checkfor "frozen: no" rndc.out.pri
|
|
for i in 0 1 2 3 4 5 6 7 8 9; do
|
|
$RNDCCMD 10.53.0.2 zonestatus primary.example >rndc.out.sec 2>&1
|
|
grep "zone not loaded" rndc.out.sec >/dev/null || break
|
|
sleep 1
|
|
done
|
|
checkfor "name: primary.example" rndc.out.sec
|
|
checkfor "type: secondary" rndc.out.sec
|
|
checkfor "files: sec.db" rndc.out.sec
|
|
checkfor "serial: " rndc.out.sec
|
|
checkfor "nodes: " rndc.out.sec
|
|
checkfor "next refresh: " rndc.out.sec
|
|
checkfor "expires: " rndc.out.sec
|
|
checkfor "secure: yes" rndc.out.sec
|
|
for i in 0 1 2 3 4 5 6 7 8 9; do
|
|
$RNDCCMD 10.53.0.1 zonestatus reload.example >rndc.out.prereload 2>&1
|
|
grep "zone not loaded" rndc.out.prereload >/dev/null || break
|
|
sleep 1
|
|
done
|
|
checkfor "files: reload.db, soa.db$" rndc.out.prereload
|
|
echo "@ 0 SOA . . 2 0 0 0 0" >ns1/soa.db
|
|
$RNDCCMD 10.53.0.1 reload reload.example | sed 's/^/ns1 /' | cat_i
|
|
for i in 0 1 2 3 4 5 6 7 8 9; do
|
|
$DIG $DIGOPTS reload.example SOA @10.53.0.1 >dig.out
|
|
grep " 2 0 0 0 0" dig.out >/dev/null && break
|
|
sleep 1
|
|
done
|
|
$RNDCCMD 10.53.0.1 zonestatus reload.example >rndc.out.postreload 2>&1
|
|
checkfor "files: reload.db, soa.db$" rndc.out.postreload
|
|
sleep 1
|
|
echo "@ 0 SOA . . 3 0 0 0 0" >ns1/reload.db
|
|
echo "@ 0 NS ." >>ns1/reload.db
|
|
rndc_reload ns1 10.53.0.1 reload.example
|
|
for i in 0 1 2 3 4 5 6 7 8 9; do
|
|
$DIG $DIGOPTS reload.example SOA @10.53.0.1 >dig.out
|
|
grep " 3 0 0 0 0" dig.out >/dev/null && break
|
|
sleep 1
|
|
done
|
|
$RNDCCMD 10.53.0.1 zonestatus reload.example >rndc.out.removeinclude 2>&1
|
|
checkfor "files: reload.db$" rndc.out.removeinclude
|
|
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=$((status + ret))
|
|
|
|
echo_i "checking 'rdnc zonestatus' with duplicated zone name"
|
|
ret=0
|
|
$RNDCCMD 10.53.0.1 zonestatus duplicate.example >rndc.out.duplicate 2>&1 && ret=1
|
|
checkfor "zone 'duplicate.example' was found in multiple views" rndc.out.duplicate
|
|
$RNDCCMD 10.53.0.1 zonestatus duplicate.example in primary >rndc.out.duplicate 2>&1 || ret=1
|
|
checkfor "name: duplicate.example" rndc.out.duplicate
|
|
$RNDCCMD 10.53.0.1 zonestatus nosuchzone.example >rndc.out.duplicate 2>&1 && ret=1
|
|
checkfor "no matching zone 'nosuchzone.example' in any view" rndc.out.duplicate
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=$((status + ret))
|
|
|
|
echo_i "checking 'rdnc zonestatus' with big serial value"
|
|
ret=0
|
|
$RNDCCMD 10.53.0.1 zonestatus bigserial.example >rndc.out.bigserial 2>&1
|
|
checkfor "serial: 3003113544" rndc.out.bigserial
|
|
if [ $ret != 0 ]; then echo_i "failed"; fi
|
|
status=$((status + ret))
|
|
|
|
echo_i "exit status: $status"
|
|
[ $status -eq 0 ] || exit 1
|