bind9/bin/tests/system/dnssec
Ondřej Surý bdd59dace8
Add a test for non-existence of RRSIG in the unsigned zone
This tests that the result is NOERROR and a single SOA record is
returned.
2025-08-26 09:03:04 +02:00
..
ans10 Check insecure response with missing RRSIG in authority 2025-02-20 20:31:07 +00:00
ns1 convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
ns2 Various TTL fixes in dnssec tests 2025-07-31 12:55:40 -07:00
ns3 tidy up the dnssec test tree 2025-07-31 12:55:40 -07:00
ns4 convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
ns5 convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
ns6 tidy up the dnssec test tree 2025-07-31 12:55:40 -07:00
ns9 Split up badkey tests into separate modules 2025-07-31 12:55:40 -07:00
signer fix handling of revoked keys 2025-03-14 22:25:44 +00:00
prereq.sh Reformat shell scripts with shfmt 2023-10-26 10:23:50 +02:00
README convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
setup.sh convert dnssec validation tests to python 2025-07-31 12:55:40 -07:00
tests_badkey.py Split up badkey tests into separate modules 2025-07-31 12:55:40 -07:00
tests_badkey_broken.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_badkey_revoked.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_delv.py Various TTL fixes in dnssec tests 2025-07-31 12:55:40 -07:00
tests_policy.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_signing.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_tat.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_validation.py Add a test for non-existence of RRSIG in the unsigned zone 2025-08-26 09:03:04 +02:00
tests_validation_accept_expired.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_validation_managed_keys.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_validation_many_anchors.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00
tests_validation_multiview.py Use nsX fixtures rather than servers 2025-07-31 12:55:40 -07:00

Copyright (C) Internet Systems Consortium, Inc. ("ISC")

SPDX-License-Identifier: MPL-2.0

This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0.  If a copy of the MPL was not distributed with this
file, you can obtain one at https://mozilla.org/MPL/2.0/.

See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.

The test setup for the DNSSEC tests has a secure root.

ns1 is the root server.

ns2 and ns3 are authoritative servers for the various test domains.

ns4 is a caching-only server, configured with the correct trusted key
for the root.

ns5 is a caching-only server, configured with the an incorrect trusted
key for the root, or with unsupported and disabled algorithms.  It is used
for testing failure cases.

ns6 is a caching and authoritative server used for testing unusual
server behaviors such as disabled DNSSEC algorithms and non-cacheable
responses. It runs with -T nonearest, -T nosoa, and -T tat=3.

ns9 is a forwarding-only server.