bind9/bin/tests
Matthijs Mekking 2f5c670ce9
Add new test cases with DNSSEC signing
kasp-max-types-per-name (named2.conf.in):
An unsigned zone with RR type count on a name right below the
configured limit. Then sign the zone using KASP. Adding a RRSIG would
push it over the RR type limit per name. Signing should fail, but
the server should not crash, nor end up in infinite resign-attempt loop.

kasp-max-records-per-type-dnskey (named1.conf.in):
Test with low max-record-per-rrset limit and a DNSSEC policy requiring
more than the limit. Signing should fail.

kasp-max-types-per-name (named1.conf.in):
Each RRSIG(covered type) is counted as an individual RR type. Test the
corner case where a signed zone, which is just below the limit-1,
adds a new type - doing so would trigger signing for the new type and
thus increase the number of "types" by 2, pushing it over the limit
again.

(cherry picked from commit 14e5230f897a178221b606c242b8fbcb357704aa)
2024-06-10 18:51:27 +02:00
..
startperf Reformat shell scripts with shfmt 2023-10-26 13:05:00 +02:00
system Add new test cases with DNSSEC signing 2024-06-10 18:51:27 +02:00
testdata/wire move all optional tests from bin/tests to bin/tests/optional 2018-03-09 14:12:47 -08:00
.gitignore Refactor TLSDNS module to work with libuv/ssl directly 2021-01-25 09:19:22 +01:00
convert-trs-to-junit.py Auto-format Python files with black 2022-06-08 13:18:27 +02:00
Makefile.am Fix JUnit test status generator for out-of-tree system tests 2022-09-22 16:17:25 +02:00
test_client.c DoT: implement TLS client session resumption 2022-06-15 17:02:45 +03:00
test_server.c Rename yield() to the test_server_yield() 2022-04-27 20:13:24 +03:00
wire_test.c Adjust message buffer sizes in test code 2023-11-16 12:22:08 +11:00