--- /dev/null
+#!/usr/bin/env bash
+if [ $ALGORITHM == "hmac-md5" ]
+then
+ dig -t axfr tsig.com @$nameserver -p $port -y hmac-sha1:test:$KEY | grep -i 'failed'
+else
+ dig -t axfr tsig.com @$nameserver -p $port -y hmac-md5:test:$KEY | grep -i 'failed'
+fi
--- /dev/null
+Basic TSIG axfr test with algorithm mismatch
--- /dev/null
+; Transfer failed.
--- /dev/null
+#!/bin/sh
+dig -t axfr tsig.com @$nameserver -p $port -y $ALGORITHM:test:ZmFpbGZhaWxmYWlsZmFpbGZhaWxmYWlsZmFpbGZhaWxmYWlsZmFpbA== | grep -i 'failed'
--- /dev/null
+Basic TSIG axfr test with key mismatch
--- /dev/null
+; Transfer failed.
-#!/bin/sh
+#!/bin/sh
dig -t axfr tsig.com @$nameserver -p $port -y $ALGORITHM:test:$KEY | grep 'IN\s*SOA'
--- /dev/null
+#!/usr/bin/env bash
+if [ $ALGORITHM == "hmac-md5" ]
+then
+ dig -t ixfr=2000081501 tsig.com @$nameserver -p $port -y hmac-sha1:test:$KEY | grep -i 'failed'
+else
+ dig -t ixfr=2000081501 tsig.com @$nameserver -p $port -y hmac-md5:test:$KEY | grep -i 'failed'
+fi
--- /dev/null
+Basic TSIG ixfr test with algorithm mismatch
--- /dev/null
+; Transfer failed.
--- /dev/null
+#!/bin/sh
+dig -t ixfr=2000081501 tsig.com @$nameserver -p $port -y $ALGORITHM:test:ZmFpbGZhaWxmYWlsZmFpbGZhaWxmYWlsZmFpbGZhaWxmYWlsZmFpbA== | grep -i 'failed'
--- /dev/null
+Basic TSIG ixfr test with key mismatch
--- /dev/null
+; Transfer failed.
--- /dev/null
+#!/bin/sh
+
+dig -t ixfr=2000081501 tsig.com @$nameserver -p $port -y $ALGORITHM:test:$KEY | grep 'IN\s*SOA'
--- /dev/null
+Basic TSIG ixfr test
--- /dev/null
+tsig.com. 120 IN SOA ns1.example.com. ahu.example.com. 2000081501 28800 7200 604800 86400