bind9/bin
Nicki Křížek fe2fea73a4 Add extra expired RRSIGs test to dnssec_py
The test verifies that a validating resolver enforces the
max-validations-per-fetch limit when encountering a record with multiple
expired RRSIGs followed by a valid one. One of the records is signed
three times: twice with expired timestamps (to produce two expired
RRSIGs for a.rrsigs-extra-expired/A) and once with valid timestamps,
after which the expired RRSIGs are injected back into the signed zone
file. max-validations-per-fetch is set to 2 via the template variable so
that the third (valid) RRSIG is never reached, causing SERVFAIL.

Assisted-by: Claude:claude-opus-4-8
2026-06-24 15:09:38 +02:00
..
check Resolve ERR_MISSING_GLUE / ERR_EXTRA_AAAA value collision 2026-04-29 17:31:23 +02:00
confgen Allow any valid DNS name as a key name 2026-05-15 10:14:46 +02:00
delv Skip detach when delv's client never created 2026-04-30 10:56:11 +02:00
dig Replace the shared work pool with per-loop, per-lane worker threads 2026-06-17 19:07:08 +02:00
dnssec Check wildcard signer and NOQNAME signer match 2026-06-18 10:01:29 -07:00
include Add the tcp-reuse-timeout option 2026-06-24 13:52:46 +02:00
named Add the tcp-reuse-timeout option 2026-06-24 13:52:46 +02:00
nsupdate nsupdate does not handle zero length RDATA well 2026-04-09 09:24:47 +10:00
plugins Do not assert on synthrecord reverse mode with huge prefix 2026-06-04 13:51:59 +02:00
rndc Dump delegation database in 'rndc dumpdb' 2026-03-30 20:41:13 +02:00
tests Add extra expired RRSIGs test to dnssec_py 2026-06-24 15:09:38 +02:00
tools Disallow configuration of user-defined non-IN class views 2026-06-08 17:50:15 +02:00
meson.build replace the build system with meson 2025-06-11 10:30:12 +03:00