upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-04-27 09:06:51 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/bin/tests/system/kasp
History
Matthijs Mekking 04e6711029 Increase migrate.kasp DNSKEY TTL 
Increate the DNSKEY TTL of the migrate.kasp zone for the following
reason:  The key states are initialized depending on the timing
metadata. If a key is present long enough in the zone it will be
initialized to OMNIPRESENT.  Long enough here is the time when it
was published (when the setup script was run) plus DNSKEY TTL.
Otherwise it is set to RUMOURED, or to HIDDEN if no timing metadata
is set or the time is still in the future.

Since the TTL is "only" 5 minutes, the DNSKEY state may be
initialized to OMNIPRESENT if the test is slow, but we expect it
to be in RUMOURED state.  If we increase the TTL to a couple of
hours it is very unlikely that it will be initialized to something
else than RUMOURED.
2020-04-07 15:51:43 +02:00
..
ns2 dnssec-policy inheritance from options/view 2019-11-06 22:36:21 +01:00
ns3 Remove unneeded step6 zone 2020-03-06 15:53:57 +01:00
ns4 Fix race condition dnssec-policy with views 2020-03-09 14:48:17 +01:00
ns5 dnssec-policy inheritance from options/view 2019-11-06 22:36:21 +01:00
ns6 Increase migrate.kasp DNSKEY TTL 2020-04-07 15:51:43 +02:00
clean.sh Add additional wait period for algorithm rollover 2020-03-06 15:57:48 +01:00
kasp.conf Use keywords in dnssec-policy keys configuration 2019-11-06 22:36:21 +01:00
README Add algorithm rollover test case 2020-03-06 15:53:57 +01:00
setup.sh Add algorithm rollover test case 2020-03-06 15:53:57 +01:00
tests.sh Increase migrate.kasp DNSKEY TTL 2020-04-07 15:51:43 +02:00

README 

Copyright (C) Internet Systems Consortium, Inc. ("ISC")

See COPYRIGHT in the source root or http://isc.org/copyright.html for terms.

The test setup for the KASP tests.

ns1 is reserved for the root server.

ns2 is running primary service for ns3.

ns3 is an authoritative server for the various test domains.

ns4 and ns5 are authoritative servers for various test domains related to views.

ns6 is an authoritative server that tests changes in dnssec-policy.