upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-25 19:04:57 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/bin/tests/system/mkeys
History
Michał Kępień 7d6eaad1bd Add and use keyfile_to_key_id() helper function 
When trying to extract the key ID from a key file name, some test code
incorrectly attempts to strip all leading zeros.  This breaks tests when
keys with ID 0 are generated.  Add a new helper shell function,
keyfile_to_key_id(), which properly handles keys with ID 0 and use it in
test code whenever a key ID needs to be extracted from a key file name.
2019-06-28 14:05:04 +02:00
..
ns1 Add and use keyfile_to_key_id() helper function 2019-06-28 14:05:04 +02:00
ns2 remove "dnssec-enable" from all system tests 2019-03-14 23:30:13 -07:00
ns3 "dnssec-keys" is now a synonym for "managed-keys" 2019-06-05 07:49:57 -07:00
ns4 remove "dnssec-enable" from all system tests 2019-03-14 23:30:13 -07:00
ns5 remove "dnssec-enable" from all system tests 2019-03-14 23:30:13 -07:00
ns6 rename keyfile_to_*_keys system test shell functions 2019-06-05 07:49:57 -07:00
ns7 remove "dnssec-enable" from all system tests 2019-03-14 23:30:13 -07:00
clean.sh Add tests for mkeys with unsupported algorithm 2019-02-20 19:44:33 -08:00
README "dnssec-keys" is now a synonym for "managed-keys" 2019-06-05 07:49:57 -07:00
setup.sh Add tests for mkeys with unsupported algorithm 2019-02-20 19:44:33 -08:00
tests.sh Add and use keyfile_to_key_id() helper function 2019-06-28 14:05:04 +02:00

README 

Copyright (C) Internet Systems Consortium, Inc. ("ISC")

See COPYRIGHT in the source root or http://isc.org/copyright.html for terms.

This is for testing RFC 5011 Automated Updates of DNSSEC Trust Anchors.

ns1 is the root server that offers new KSKs and hosts one record for
testing. The TTL for the zone's records is 2 seconds.

ns2 is a validator that uses managed keys.  "-T mkeytimers=2/20/40"
is used so it will attempt do automated updates frequently. "-T tat=1"
is used so it will send TAT queries once per second.

ns3 is a validator with a broken initializing key in dnssec-keys.

ns4 is a validator with a deliberately broken managed-keys.bind and
managed-keys.jnl, causing RFC 5011 initialization to fail.

ns5 is a validator which is prevented from getting a response from the
root server, causing key refresh queries to fail.

ns6 is a validator which has unsupported algorithms, one at start up,
one because of an algorithm rollover.

ns7 is a validator with multiple views configured.  It is used for
testing per-view rndc commands and checking interactions between options
related to and potentially affecting RFC 5011 processing.