#!/bin/sh -e
set pipefail
rm -f trustedkeys
+rm -f unbound-host.conf
for zone in $(grep zone named.conf | cut -f2 -d\")
do
- drill -p $port -o rd -D dnskey $zone @$nameserver | grep -v '^;' >> trustedkeys
+ drill -p $port -o rd -D dnskey $zone @$nameserver | grep -v '^;' | grep -v AwEAAarTiHhPgvD28WCN8UBXcEcf8f >> trustedkeys
+ echo "stub-zone:" >> unbound-host.conf
+ echo " name: $zone" >> unbound-host.conf
+ echo " stub-addr: $nameserver@$port" >> unbound-host.conf
+ echo "" >> unbound-host.conf
done
+
+echo "server:" >> unbound-host.conf
+echo ' trust-anchor-file: "trustedkeys"' >> unbound-host.conf
#!/bin/sh
../pdns/sdig $nameserver $port $1 $2 $3 | sort
-if drill -p $port -o rd -D -k trustedkeys $1 $2 @$nameserver > drill.test.output
+drill -a -p $port -o rd -D -S -k trustedkeys $1 $2 @$nameserver > $testname/drillchase.out 2>&1
+echo $? >> $testname/drillchase.out
+drill -a -p $port -o rd -D -k trustedkeys $1 $2 @$nameserver > $testname/drill.out 2>&1
+echo $? >> $testname/drill.out
+/usr/lib/go/bin/q -rd=false -check -dnssec -port=$port @$nameserver $2 $1 > $testname/q.out 2>&1
+echo $? >> $testname/q.out
+if [ ! -e $testname/skip-unboundhost ]
then
- rm -f drill.test.output
-else
- cat drill.test.output >> dnssec-validation-failures
- echo '-- MARK --' >> dnssec-validation-failures
-fi
+ unbound-host -v -C unbound-host.conf -t $2 $1 > $testname/unbound-host.out 2>&1
+ echo $? >> $testname/unbound-host.out
+fi
\ No newline at end of file
make -C ../pdns sdig || false
-rm -f test-results failed_tests passed_tests skipped_tests */real_result */diff dnssec-validation-failures
+rm -f test-results failed_tests passed_tests skipped_tests */real_result */diff */*.out
passed=0
failed=0
for a in $(find . -type d | grep -v ^.$ | sed s:^./:: | grep -v .svn | grep -v ^confdir | LC_ALL=C sort)
do
+ testname=$a
+ export testname
echo "$a: "
cat $a/description
res=$((echo scale=2; echo 100*$passed/\($passed+$failed\)) | bc )
echo -n "$res%) "
echo tests passed, $skipped were skipped
-if [ -s dnssec-validation-failures ]
-then
- echo
- echo there appear to have been $(grep -c '^-- MARK --' dnssec-validation-failures) DNSSEC validation failures.
- echo Please see the 'dnssec-validation-failures' file for details.
-fi