bind9/bin/tests/system/autosign
Matthijs Mekking e5736de60d Implement draft-vandijk-dnsop-nsec-ttl
The draft says that the NSEC(3) TTL must have the same TTL value
as the minimum of the SOA MINIMUM field and the SOA TTL. This was
always the intended behaviour.

Update the zone structure to also track the SOA TTL. Whenever we
use the MINIMUM value to determine the NSEC(3) TTL, use the minimum
of MINIMUM and SOA TTL instead.

There is no specific test for this, however two tests need adjusting
because otherwise they failed: They were testing for NSEC3 records
including the TTL. Update these checks to use 600 (the SOA TTL),
rather than 3600 (the SOA MINIMUM).

(cherry picked from commit 9af8caa733)
2021-04-13 14:18:33 +02:00
..
ns1 further tidying of primary/secondary terminology in system tests 2021-01-12 15:21:14 +01:00
ns2 further tidying of primary/secondary terminology in system tests 2021-01-12 15:21:14 +01:00
ns3 further tidying of primary/secondary terminology in system tests 2021-01-12 15:21:14 +01:00
ns4 remove "dnssec-enable" from all system tests 2019-03-14 23:30:13 -07:00
ns5 remove "dnssec-enable" from all system tests 2019-03-14 23:30:13 -07:00
clean.sh update all copyright headers to eliminate the typo 2020-09-14 16:50:58 -07:00
setup.sh update all copyright headers to eliminate the typo 2020-09-14 16:50:58 -07:00
tests.sh Implement draft-vandijk-dnsop-nsec-ttl 2021-04-13 14:18:33 +02:00