bind9/bin/tests/system/kasp
Matthijs Mekking 80a20c9643 Add test for "three is a crowd" bug (GL #2375)
Add this test scenario for a bug fixed a while ago. When a third key is
introduced while the previous rollover hasn't finished yet, the keymgr
could decide to remove the first two keys, because it was not checking
for an indirect dependency on the keys.

In other words, the previous bug behavior was that the first two keys
were removed from the zone too soon.

This test case checks that all three keys stay in the zone, and no keys
are removed premature after another new key has been introduced.

(cherry picked from commit 9c40cf0566)
2023-07-06 10:30:53 +02:00
..
ns2 Update system tests 2022-09-06 10:27:33 +02:00
ns3 Add test for "three is a crowd" bug (GL #2375) 2023-07-06 10:30:53 +02:00
ns4 Upgrade uses of hmac-sha1 to DEFAULT_HMAC 2022-10-03 13:19:35 +02:00
ns5 Update system tests 2022-09-06 10:27:33 +02:00
ns6 Update kasp system test to work with .signed files 2022-11-03 14:39:38 +01:00
clean.sh Update kasp system test to work with .signed files 2022-11-03 14:39:38 +01:00
kasp.conf kasp: stop using RSASHA1 unless necessary for the test 2022-10-03 13:28:25 +02:00
prereq.sh Update the copyright information in all files in the repository 2022-01-11 12:22:09 +01:00
README Update the copyright information in all files in the repository 2022-01-11 12:22:09 +01:00
setup.sh kasp: stop using RSASHA1 unless necessary for the test 2022-10-03 13:28:25 +02:00
tests.sh Add test for "three is a crowd" bug (GL #2375) 2023-07-06 10:30:53 +02:00

Copyright (C) Internet Systems Consortium, Inc. ("ISC")

SPDX-License-Identifier: MPL-2.0

This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0.  If a copy of the MPL was not distributed with this
file, you can obtain one at https://mozilla.org/MPL/2.0/.

See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.

The test setup for the KASP tests.

ns1 is reserved for the root server.

ns2 is running primary service for ns3.

ns3 is an authoritative server for the various test domains.

ns4 and ns5 are authoritative servers for various test domains related to views.

ns6 is an authoritative server that tests changes in dnssec-policy (algorithm
rollover).