mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-28 12:31:29 -05:00
c64ed484c8
Temporary files created by a given system test should be removed by its clean.sh script, not its setup.sh script. Remove redundant "rm" invocations from setup.sh scripts. Move required "rm" invocations from setup.sh scripts to their corresponding clean.sh scripts.
188 lines
6.9 KiB
Bash
188 lines
6.9 KiB
Bash
#!/bin/sh
|
|
#
|
|
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
SYSTEMTESTTOP=..
|
|
. $SYSTEMTESTTOP/conf.sh
|
|
|
|
KEYGEN="$KEYGEN -q"
|
|
|
|
$SHELL clean.sh
|
|
|
|
# Test 1: KSK goes inactive before successor is active
|
|
dir=01-ksk-inactive
|
|
echo_i "set up $dir"
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
$SETTIME -K $dir -I +9mo -D +1y $ksk1 > /dev/null 2>&1
|
|
ksk2=`$KEYGEN -K $dir -S $ksk1`
|
|
$SETTIME -K $dir -I +7mo $ksk1 > /dev/null 2>&1
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
|
|
# Test 2: ZSK goes inactive before successor is active
|
|
dir=02-zsk-inactive
|
|
echo_i "set up $dir"
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
$SETTIME -K $dir -I +9mo -D +1y $zsk1 > /dev/null 2>&1
|
|
zsk2=`$KEYGEN -K $dir -S $zsk1`
|
|
$SETTIME -K $dir -I +7mo $zsk1 > /dev/null 2>&1
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
|
|
# Test 3: KSK is unpublished before its successor is published
|
|
dir=03-ksk-unpublished
|
|
echo_i "set up $dir"
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
$SETTIME -K $dir -I +9mo -D +1y $ksk1 > /dev/null 2>&1
|
|
ksk2=`$KEYGEN -K $dir -S $ksk1`
|
|
$SETTIME -K $dir -D +6mo $ksk1 > /dev/null 2>&1
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
|
|
# Test 4: ZSK is unpublished before its successor is published
|
|
dir=04-zsk-unpublished
|
|
echo_i "set up $dir"
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
$SETTIME -K $dir -I +9mo -D +1y $zsk1 > /dev/null 2>&1
|
|
zsk2=`$KEYGEN -K $dir -S $zsk1`
|
|
$SETTIME -K $dir -D +6mo $zsk1 > /dev/null 2>&1
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
|
|
# Test 5: KSK deleted and successor published before KSK is deactivated
|
|
# and successor activated.
|
|
dir=05-ksk-unpub-active
|
|
echo_i "set up $dir"
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
$SETTIME -K $dir -I +9mo -D +8mo $ksk1 > /dev/null 2>&1
|
|
ksk2=`$KEYGEN -K $dir -S $ksk1`
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
|
|
# Test 6: ZSK deleted and successor published before ZSK is deactivated
|
|
# and successor activated.
|
|
dir=06-zsk-unpub-active
|
|
echo_i "set up $dir"
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
$SETTIME -K $dir -I +9mo -D +8mo $zsk1 > /dev/null 2>&1
|
|
zsk2=`$KEYGEN -K $dir -S $zsk1`
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
|
|
# Test 7: KSK rolled with insufficient delay after prepublication.
|
|
dir=07-ksk-ttl
|
|
echo_i "set up $dir"
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
$SETTIME -K $dir -I +9mo -D +1y $ksk1 > /dev/null 2>&1
|
|
ksk2=`$KEYGEN -K $dir -S $ksk1`
|
|
$SETTIME -K $dir -P +269d $ksk2 > /dev/null 2>&1
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
|
|
# Test 8: ZSK rolled with insufficient delay after prepublication.
|
|
dir=08-zsk-ttl
|
|
echo_i "set up $dir"
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
$SETTIME -K $dir -I +9mo -D +1y $zsk1 > /dev/null 2>&1
|
|
zsk2=`$KEYGEN -K $dir -S $zsk1`
|
|
# allow only 1 day between publication and activation
|
|
$SETTIME -K $dir -P +269d $zsk2 > /dev/null 2>&1
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
|
|
# Test 9: No special preparation needed
|
|
|
|
# Test 10: Valid key set, but rollover period has changed
|
|
dir=10-change-roll
|
|
echo_i "set up $dir"
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
$SETTIME -K $dir -I +3mo -D +4mo $zsk1 > /dev/null 2>&1
|
|
zsk2=`$KEYGEN -K $dir -S $zsk1`
|
|
|
|
# Test 11: Many keys all simultaneously scheduled to be active in the future
|
|
dir=11-many-simul
|
|
echo_i "set up $dir"
|
|
k1=`$KEYGEN -K $dir -a rsasha1 -q3fk -P now+1mo -A now+1mo example.com`
|
|
z1=`$KEYGEN -K $dir -a rsasha1 -q3 -P now+1mo -A now+1mo example.com`
|
|
z2=`$KEYGEN -K $dir -a rsasha1 -q3 -P now+1mo -A now+1mo example.com`
|
|
z3=`$KEYGEN -K $dir -a rsasha1 -q3 -P now+1mo -A now+1mo example.com`
|
|
z4=`$KEYGEN -K $dir -a rsasha1 -q3 -P now+1mo -A now+1mo example.com`
|
|
|
|
# Test 12: Many keys all simultaneously scheduled to be active in the past
|
|
dir=12-many-active
|
|
echo_i "set up $dir"
|
|
k1=`$KEYGEN -K $dir -a rsasha1 -q3fk example.com`
|
|
z1=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
z2=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
z3=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
z4=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
|
|
# Test 13: Multiple simultaneous keys with no configured roll period
|
|
dir=13-noroll
|
|
echo_i "set up $dir"
|
|
k1=`$KEYGEN -K $dir -a rsasha1 -q3fk example.com`
|
|
k2=`$KEYGEN -K $dir -a rsasha1 -q3fk example.com`
|
|
k3=`$KEYGEN -K $dir -a rsasha1 -q3fk example.com`
|
|
z1=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
|
|
# Test 14: Keys exist but have the wrong algorithm
|
|
dir=14-wrongalg
|
|
echo_i "set up $dir"
|
|
k1=`$KEYGEN -K $dir -a rsasha1 -qfk example.com`
|
|
z1=`$KEYGEN -K $dir -a rsasha1 -q example.com`
|
|
$SETTIME -K $dir -I now+6mo -D now+8mo $z1 > /dev/null
|
|
z2=`$KEYGEN -K $dir -q -S ${z1}.key`
|
|
$SETTIME -K $dir -I now+1y -D now+14mo $z2 > /dev/null
|
|
z3=`$KEYGEN -K $dir -q -S ${z2}.key`
|
|
$SETTIME -K $dir -I now+18mo -D now+20mo $z3 > /dev/null
|
|
z4=`$KEYGEN -K $dir -q -S ${z3}.key`
|
|
|
|
# Test 15: No zones specified; just search the directory for keys
|
|
dir=15-unspec
|
|
echo_i "set up $dir"
|
|
k1=`$KEYGEN -K $dir -a rsasha1 -q3fk example.com`
|
|
z1=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
$SETTIME -K $dir -I now+6mo -D now+8mo $z1 > /dev/null
|
|
z2=`$KEYGEN -K $dir -q -S ${z1}.key`
|
|
$SETTIME -K $dir -I now+1y -D now+14mo $z2 > /dev/null
|
|
z3=`$KEYGEN -K $dir -q -S ${z2}.key`
|
|
$SETTIME -K $dir -I now+18mo -D now+20mo $z3 > /dev/null
|
|
z4=`$KEYGEN -K $dir -q -S ${z3}.key`
|
|
|
|
# Test 16: No zones specified; search the directory for keys;
|
|
# keys have the wrong algorithm for their policies
|
|
dir=16-wrongalg-unspec
|
|
echo_i "set up $dir"
|
|
k1=`$KEYGEN -K $dir -a rsasha1 -qfk example.com`
|
|
z1=`$KEYGEN -K $dir -a rsasha1 -q example.com`
|
|
$SETTIME -K $dir -I now+6mo -D now+8mo $z1 > /dev/null
|
|
z2=`$KEYGEN -K $dir -q -S ${z1}.key`
|
|
$SETTIME -K $dir -I now+1y -D now+14mo $z2 > /dev/null
|
|
z3=`$KEYGEN -K $dir -q -S ${z2}.key`
|
|
$SETTIME -K $dir -I now+18mo -D now+20mo $z3 > /dev/null
|
|
z4=`$KEYGEN -K $dir -q -S ${z3}.key`
|
|
|
|
# Test 17: Keys are simultaneously active but we run with no force
|
|
# flag (this should fail)
|
|
dir=17-noforce
|
|
echo_i "set up $dir"
|
|
k1=`$KEYGEN -K $dir -a rsasha1 -q3fk example.com`
|
|
z1=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
z2=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
z3=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
z4=`$KEYGEN -K $dir -a rsasha1 -q3 example.com`
|
|
|
|
# Test 18: Prepublication interval is set to a nonstandard value
|
|
dir=18-nonstd-prepub
|
|
echo_i "set up $dir"
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
$SETTIME -K $dir -I now+2mo -D now+3mo $zsk1 > /dev/null
|
|
|
|
# Test 19: Key has been published/active a long time
|
|
dir=19-old-keys
|
|
echo_i "set up $dir"
|
|
ksk1=`$KEYGEN -K $dir -a rsasha1 -3fk example.com`
|
|
zsk1=`$KEYGEN -K $dir -a rsasha1 -3 example.com`
|
|
$SETTIME -K $dir -P now-2y -A now-2y $ksk1 > /dev/null
|
|
$SETTIME -K $dir -P now-2y -A now-2y $zsk1 > /dev/null
|