mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-24 10:21:10 -05:00
the default value of dnssec-validation is 'auto', which causes a server to send a key refresh query to the root zone when starting up. this is undesirable behavior in system tests, so this commit sets dnssec-validation to either 'yes' or 'no' in all tests where it had not previously been set. this change had the mostly-harmless side effect of changing the cached trust level of unvalidated answer data from 'answer' to 'authanswer', which caused a few test cases in which dumped cache data was examined in the serve-stale system test to fail. those test cases have now been updated to expect 'authanswer'. |
||
|---|---|---|
| .. | ||
| ns1 | ||
| ns2 | ||
| ns3 | ||
| clean.sh | ||
| README | ||
| setup.sh | ||
| tests.sh | ||
| tests_sh_mirror.py | ||
<!--
Copyright (C) Internet Systems Consortium, Inc. ("ISC")
SPDX-License-Identifier: MPL-2.0
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, you can obtain one at https://mozilla.org/MPL/2.0/.
See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.
-->
This test checks whether zones configured with "type mirror;" behave as
expected.
ns1 is an authoritative-only server. It only serves the root zone, which is
mirrored by ns3.
ns2 is an authoritative-only server. It serves a number of zones, some of which
are delegated to it by ns1 and used in recursive resolution tests aimed at ns3
while others are only served so that ns3 has a primary server to mirror zones
from during various tests of the mirror zone implementation.
ns3 is a recursive resolver. It has a number of mirror zones configured. This
is the only server whose behavior is being examined by this system test.