mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-25 02:42:33 -05:00
704f73353d
(cherry picked from commit f13c7b01746a07bef87a386ceff93ccb2a7488a9)
(cherry picked from commit 56c6fc0dac)
94 lines
2 KiB
C
94 lines
2 KiB
C
/*
|
|
* Copyright (C) 2012, 2014-2016 Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
/* $Id$ */
|
|
|
|
/*! \file */
|
|
|
|
#include <config.h>
|
|
|
|
#include <atf-c.h>
|
|
|
|
#include <unistd.h>
|
|
|
|
#include <dns/db.h>
|
|
#include <dns/nsec3.h>
|
|
|
|
#include "dnstest.h"
|
|
|
|
#if defined(OPENSSL) || defined(PKCS11CRYPTO)
|
|
/*
|
|
* Helper functions
|
|
*/
|
|
|
|
static void
|
|
iteration_test(const char *file, unsigned int expected) {
|
|
isc_result_t result;
|
|
dns_db_t *db = NULL;
|
|
unsigned int iterations;
|
|
|
|
result = dns_test_loaddb(&db, dns_dbtype_zone, "test", file);
|
|
ATF_CHECK_EQ_MSG(result, ISC_R_SUCCESS, "%s", file);
|
|
|
|
result = dns_nsec3_maxiterations(db, NULL, mctx, &iterations);
|
|
ATF_CHECK_EQ_MSG(result, ISC_R_SUCCESS, "%s", file);
|
|
|
|
ATF_CHECK_EQ_MSG(iterations, expected, "%s", file);
|
|
|
|
dns_db_detach(&db);
|
|
}
|
|
|
|
/*
|
|
* Individual unit tests
|
|
*/
|
|
|
|
ATF_TC(max_iterations);
|
|
ATF_TC_HEAD(max_iterations, tc) {
|
|
atf_tc_set_md_var(tc, "descr", "check that appropriate max iterations "
|
|
" is returned for different key size mixes");
|
|
}
|
|
ATF_TC_BODY(max_iterations, tc) {
|
|
isc_result_t result;
|
|
|
|
UNUSED(tc);
|
|
|
|
result = dns_test_begin(NULL, ISC_FALSE);
|
|
ATF_REQUIRE_EQ(result, ISC_R_SUCCESS);
|
|
|
|
iteration_test("testdata/nsec3/1024.db", 150);
|
|
iteration_test("testdata/nsec3/2048.db", 500);
|
|
iteration_test("testdata/nsec3/4096.db", 2500);
|
|
iteration_test("testdata/nsec3/min-1024.db", 150);
|
|
iteration_test("testdata/nsec3/min-2048.db", 500);
|
|
|
|
dns_test_end();
|
|
}
|
|
#else
|
|
ATF_TC(untested);
|
|
ATF_TC_HEAD(untested, tc) {
|
|
atf_tc_set_md_var(tc, "descr", "skipping nsec3 test");
|
|
}
|
|
ATF_TC_BODY(untested, tc) {
|
|
UNUSED(tc);
|
|
atf_tc_skip("DNSSEC not available");
|
|
}
|
|
#endif
|
|
|
|
/*
|
|
* Main
|
|
*/
|
|
ATF_TP_ADD_TCS(tp) {
|
|
#if defined(OPENSSL) || defined(PKCS11CRYPTO)
|
|
ATF_TP_ADD_TC(tp, max_iterations);
|
|
#else
|
|
ATF_TP_ADD_TC(tp, untested);
|
|
#endif
|
|
|
|
return (atf_no_error());
|
|
}
|
|
|