From: Pieter Lexis <pieter.lexis@powerdns.com>
Date: Wed, 22 Jul 2015 18:44:58 +0000 (+0200)
Subject: Add regression test for CDS/CDNSKEY
X-Git-Tag: dnsdist-1.0.0-alpha1~248^2~27^2~2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=8bbc66ec19318d56efcc4348a0b04de83b1ea71f;p=pdns

Add regression test for CDS/CDNSKEY
---

diff --git a/regression-tests/start-test-stop b/regression-tests/start-test-stop
index 53325893c..5e6dc7b18 100755
--- a/regression-tests/start-test-stop
+++ b/regression-tests/start-test-stop
@@ -76,6 +76,8 @@ securezone ()
 		keyid=`$PDNSSEC --config-dir=. $configname show-zone $zone | grep ZSK | cut -d' ' -f3`
 		$PDNSSEC --config-dir=. $configname activate-zone-key $zone $keyid 2>&1
 		$PDNSSEC --config-dir=. $configname rectify-zone $zone 2>&1
+		$PDNSSEC --config-dir=. $configname set-publish-cds $zone 2>&1
+		$PDNSSEC --config-dir=. $configname set-publish-cdnskey $zone 2>&1
 	else
 		# check if PKCS#11 should be used
 		if [ "$pkcs11" -eq 1 ]; then
diff --git a/regression-tests/tests/publishing-cds-cdnskey/command b/regression-tests/tests/publishing-cds-cdnskey/command
new file mode 100755
index 000000000..2cf7d9c20
--- /dev/null
+++ b/regression-tests/tests/publishing-cds-cdnskey/command
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+cleandig secure-delegated.dnssec-parent.com CDS dnssec
+cleandig secure-delegated.dnssec-parent.com CDNSKEY dnssec
+cleandig secure-delegated.dnssec-parent.com ANY dnssec tcp | grep 'CDS\|CDNSKEY' | grep -v 'NSEC'
diff --git a/regression-tests/tests/publishing-cds-cdnskey/description b/regression-tests/tests/publishing-cds-cdnskey/description
new file mode 100644
index 000000000..d3310dc9f
--- /dev/null
+++ b/regression-tests/tests/publishing-cds-cdnskey/description
@@ -0,0 +1,2 @@
+Test whether we get a correct response for CDS query, a CDNSKEY query and an ANY
+query on the apex.
diff --git a/regression-tests/tests/publishing-cds-cdnskey/expected_result b/regression-tests/tests/publishing-cds-cdnskey/expected_result
new file mode 100644
index 000000000..f47e54db0
--- /dev/null
+++ b/regression-tests/tests/publishing-cds-cdnskey/expected_result
@@ -0,0 +1,16 @@
+0	secure-delegated.dnssec-parent.com.	IN	CDS	86400	54319 8 1 a28ebe791e9cc7f4c2821131be367326ddd7434c
+0	secure-delegated.dnssec-parent.com.	IN	CDS	86400	54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7
+0	secure-delegated.dnssec-parent.com.	IN	RRSIG	86400	CDS 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ...
+2	.	IN	OPT	32768	
+Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='secure-delegated.dnssec-parent.com.', qtype=CDS
+0	secure-delegated.dnssec-parent.com.	IN	CDNSKEY	86400	257 3 8 AwEAAZd9R7SWWGqA12oG7Ls+h3b0/IAyMj/Pqn/ZuKWM/OdpxT/cn2xwLDhkdmqP/pUqAzvyFPyd4kTqrmLfbohBwA7+07pBVa4qf/jxlHivdMNUD72H+dUYqBlmhCC6l3eG+8FZi2tkdwn8kUoa9kyLMtrEaFnOd/oUQbmNvIDp+8VWv1cSnRJ8UXKdXLl0smpvC7h1K2AUiC5oGIYQTCYWwYRM1wCbb+q1fbFCdkbI7OQW/h7Pj30eLpIuz0bJj4vdKXXZHK8clSdTMAFm6rQsNDI0w7QdCgaDmTn3b6TF2UJi4eDnh7uDbSpUd1mI5XWNw4C6WrUmebFLfiry6vqdiIc=
+0	secure-delegated.dnssec-parent.com.	IN	RRSIG	86400	CDNSKEY 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ...
+2	.	IN	OPT	32768	
+Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='secure-delegated.dnssec-parent.com.', qtype=CDNSKEY
+0	secure-delegated.dnssec-parent.com.	IN	CDNSKEY	86400	257 3 8 AwEAAZd9R7SWWGqA12oG7Ls+h3b0/IAyMj/Pqn/ZuKWM/OdpxT/cn2xwLDhkdmqP/pUqAzvyFPyd4kTqrmLfbohBwA7+07pBVa4qf/jxlHivdMNUD72H+dUYqBlmhCC6l3eG+8FZi2tkdwn8kUoa9kyLMtrEaFnOd/oUQbmNvIDp+8VWv1cSnRJ8UXKdXLl0smpvC7h1K2AUiC5oGIYQTCYWwYRM1wCbb+q1fbFCdkbI7OQW/h7Pj30eLpIuz0bJj4vdKXXZHK8clSdTMAFm6rQsNDI0w7QdCgaDmTn3b6TF2UJi4eDnh7uDbSpUd1mI5XWNw4C6WrUmebFLfiry6vqdiIc=
+0	secure-delegated.dnssec-parent.com.	IN	CDS	86400	54319 8 1 a28ebe791e9cc7f4c2821131be367326ddd7434c
+0	secure-delegated.dnssec-parent.com.	IN	CDS	86400	54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7
+0	secure-delegated.dnssec-parent.com.	IN	RRSIG	86400	CDNSKEY 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ...
+0	secure-delegated.dnssec-parent.com.	IN	RRSIG	86400	CDS 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ...
diff --git a/regression-tests/tests/publishing-cds-cdnskey/skip.nodnssec b/regression-tests/tests/publishing-cds-cdnskey/skip.nodnssec
new file mode 100644
index 000000000..e69de29bb