Add regression test for CDS/CDNSKEY

diff --git a/regression-tests/start-test-stop b/regression-tests/start-test-stop
index 53325893c6b344e1fbb9f2926df60b6a072c03df..5e6dc7b1815f2476b1fecb982da4e58f79fada12 100755 (executable)
--- a/regression-tests/start-test-stop
+++ b/regression-tests/start-test-stop
@@ -76,6 +76,8 @@ securezone ()
                keyid=`$PDNSSEC --config-dir=. $configname show-zone $zone | grep ZSK | cut -d' ' -f3`
                $PDNSSEC --config-dir=. $configname activate-zone-key $zone $keyid 2>&1
                $PDNSSEC --config-dir=. $configname rectify-zone $zone 2>&1
+               $PDNSSEC --config-dir=. $configname set-publish-cds $zone 2>&1
+               $PDNSSEC --config-dir=. $configname set-publish-cdnskey $zone 2>&1
        else
                # check if PKCS#11 should be used
                if [ "$pkcs11" -eq 1 ]; then

diff --git a/regression-tests/tests/publishing-cds-cdnskey/command b/regression-tests/tests/publishing-cds-cdnskey/command
new file mode 100755 (executable)
index 0000000..2cf7d9c
--- /dev/null
+++ b/regression-tests/tests/publishing-cds-cdnskey/command
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+cleandig secure-delegated.dnssec-parent.com CDS dnssec
+cleandig secure-delegated.dnssec-parent.com CDNSKEY dnssec
+cleandig secure-delegated.dnssec-parent.com ANY dnssec tcp | grep 'CDS\|CDNSKEY' | grep -v 'NSEC'

diff --git a/regression-tests/tests/publishing-cds-cdnskey/description b/regression-tests/tests/publishing-cds-cdnskey/description
new file mode 100644 (file)
index 0000000..d3310dc
--- /dev/null
+++ b/regression-tests/tests/publishing-cds-cdnskey/description
@@ -0,0 +1,2 @@
+Test whether we get a correct response for CDS query, a CDNSKEY query and an ANY
+query on the apex.

diff --git a/regression-tests/tests/publishing-cds-cdnskey/expected_result b/regression-tests/tests/publishing-cds-cdnskey/expected_result
new file mode 100644 (file)
index 0000000..f47e54d
--- /dev/null
+++ b/regression-tests/tests/publishing-cds-cdnskey/expected_result
@@ -0,0 +1,16 @@
+0      secure-delegated.dnssec-parent.com.     IN      CDS     86400   54319 8 1 a28ebe791e9cc7f4c2821131be367326ddd7434c
+0      secure-delegated.dnssec-parent.com.     IN      CDS     86400   54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7
+0      secure-delegated.dnssec-parent.com.     IN      RRSIG   86400   CDS 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ...
+2      .       IN      OPT     32768   
+Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='secure-delegated.dnssec-parent.com.', qtype=CDS
+0      secure-delegated.dnssec-parent.com.     IN      CDNSKEY 86400   257 3 8 AwEAAZd9R7SWWGqA12oG7Ls+h3b0/IAyMj/Pqn/ZuKWM/OdpxT/cn2xwLDhkdmqP/pUqAzvyFPyd4kTqrmLfbohBwA7+07pBVa4qf/jxlHivdMNUD72H+dUYqBlmhCC6l3eG+8FZi2tkdwn8kUoa9kyLMtrEaFnOd/oUQbmNvIDp+8VWv1cSnRJ8UXKdXLl0smpvC7h1K2AUiC5oGIYQTCYWwYRM1wCbb+q1fbFCdkbI7OQW/h7Pj30eLpIuz0bJj4vdKXXZHK8clSdTMAFm6rQsNDI0w7QdCgaDmTn3b6TF2UJi4eDnh7uDbSpUd1mI5XWNw4C6WrUmebFLfiry6vqdiIc=
+0      secure-delegated.dnssec-parent.com.     IN      RRSIG   86400   CDNSKEY 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ...
+2      .       IN      OPT     32768   
+Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='secure-delegated.dnssec-parent.com.', qtype=CDNSKEY
+0      secure-delegated.dnssec-parent.com.     IN      CDNSKEY 86400   257 3 8 AwEAAZd9R7SWWGqA12oG7Ls+h3b0/IAyMj/Pqn/ZuKWM/OdpxT/cn2xwLDhkdmqP/pUqAzvyFPyd4kTqrmLfbohBwA7+07pBVa4qf/jxlHivdMNUD72H+dUYqBlmhCC6l3eG+8FZi2tkdwn8kUoa9kyLMtrEaFnOd/oUQbmNvIDp+8VWv1cSnRJ8UXKdXLl0smpvC7h1K2AUiC5oGIYQTCYWwYRM1wCbb+q1fbFCdkbI7OQW/h7Pj30eLpIuz0bJj4vdKXXZHK8clSdTMAFm6rQsNDI0w7QdCgaDmTn3b6TF2UJi4eDnh7uDbSpUd1mI5XWNw4C6WrUmebFLfiry6vqdiIc=
+0      secure-delegated.dnssec-parent.com.     IN      CDS     86400   54319 8 1 a28ebe791e9cc7f4c2821131be367326ddd7434c
+0      secure-delegated.dnssec-parent.com.     IN      CDS     86400   54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7
+0      secure-delegated.dnssec-parent.com.     IN      RRSIG   86400   CDNSKEY 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ...
+0      secure-delegated.dnssec-parent.com.     IN      RRSIG   86400   CDS 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ...

diff --git a/regression-tests/tests/publishing-cds-cdnskey/skip.nodnssec b/regression-tests/tests/publishing-cds-cdnskey/skip.nodnssec
new file mode 100644 (file)
index 0000000..e69de29