From: Pieter Lexis Date: Wed, 22 Jul 2015 18:44:58 +0000 (+0200) Subject: Add regression test for CDS/CDNSKEY X-Git-Tag: dnsdist-1.0.0-alpha1~248^2~27^2~2 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=8bbc66ec19318d56efcc4348a0b04de83b1ea71f;p=pdns Add regression test for CDS/CDNSKEY --- diff --git a/regression-tests/start-test-stop b/regression-tests/start-test-stop index 53325893c..5e6dc7b18 100755 --- a/regression-tests/start-test-stop +++ b/regression-tests/start-test-stop @@ -76,6 +76,8 @@ securezone () keyid=`$PDNSSEC --config-dir=. $configname show-zone $zone | grep ZSK | cut -d' ' -f3` $PDNSSEC --config-dir=. $configname activate-zone-key $zone $keyid 2>&1 $PDNSSEC --config-dir=. $configname rectify-zone $zone 2>&1 + $PDNSSEC --config-dir=. $configname set-publish-cds $zone 2>&1 + $PDNSSEC --config-dir=. $configname set-publish-cdnskey $zone 2>&1 else # check if PKCS#11 should be used if [ "$pkcs11" -eq 1 ]; then diff --git a/regression-tests/tests/publishing-cds-cdnskey/command b/regression-tests/tests/publishing-cds-cdnskey/command new file mode 100755 index 000000000..2cf7d9c20 --- /dev/null +++ b/regression-tests/tests/publishing-cds-cdnskey/command @@ -0,0 +1,5 @@ +#!/bin/sh + +cleandig secure-delegated.dnssec-parent.com CDS dnssec +cleandig secure-delegated.dnssec-parent.com CDNSKEY dnssec +cleandig secure-delegated.dnssec-parent.com ANY dnssec tcp | grep 'CDS\|CDNSKEY' | grep -v 'NSEC' diff --git a/regression-tests/tests/publishing-cds-cdnskey/description b/regression-tests/tests/publishing-cds-cdnskey/description new file mode 100644 index 000000000..d3310dc9f --- /dev/null +++ b/regression-tests/tests/publishing-cds-cdnskey/description @@ -0,0 +1,2 @@ +Test whether we get a correct response for CDS query, a CDNSKEY query and an ANY +query on the apex. diff --git a/regression-tests/tests/publishing-cds-cdnskey/expected_result b/regression-tests/tests/publishing-cds-cdnskey/expected_result new file mode 100644 index 000000000..f47e54db0 --- /dev/null +++ b/regression-tests/tests/publishing-cds-cdnskey/expected_result @@ -0,0 +1,16 @@ +0 secure-delegated.dnssec-parent.com. IN CDS 86400 54319 8 1 a28ebe791e9cc7f4c2821131be367326ddd7434c +0 secure-delegated.dnssec-parent.com. IN CDS 86400 54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7 +0 secure-delegated.dnssec-parent.com. IN RRSIG 86400 CDS 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ... +2 . IN OPT 32768 +Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='secure-delegated.dnssec-parent.com.', qtype=CDS +0 secure-delegated.dnssec-parent.com. IN CDNSKEY 86400 257 3 8 AwEAAZd9R7SWWGqA12oG7Ls+h3b0/IAyMj/Pqn/ZuKWM/OdpxT/cn2xwLDhkdmqP/pUqAzvyFPyd4kTqrmLfbohBwA7+07pBVa4qf/jxlHivdMNUD72H+dUYqBlmhCC6l3eG+8FZi2tkdwn8kUoa9kyLMtrEaFnOd/oUQbmNvIDp+8VWv1cSnRJ8UXKdXLl0smpvC7h1K2AUiC5oGIYQTCYWwYRM1wCbb+q1fbFCdkbI7OQW/h7Pj30eLpIuz0bJj4vdKXXZHK8clSdTMAFm6rQsNDI0w7QdCgaDmTn3b6TF2UJi4eDnh7uDbSpUd1mI5XWNw4C6WrUmebFLfiry6vqdiIc= +0 secure-delegated.dnssec-parent.com. IN RRSIG 86400 CDNSKEY 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ... +2 . IN OPT 32768 +Rcode: 0, RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='secure-delegated.dnssec-parent.com.', qtype=CDNSKEY +0 secure-delegated.dnssec-parent.com. IN CDNSKEY 86400 257 3 8 AwEAAZd9R7SWWGqA12oG7Ls+h3b0/IAyMj/Pqn/ZuKWM/OdpxT/cn2xwLDhkdmqP/pUqAzvyFPyd4kTqrmLfbohBwA7+07pBVa4qf/jxlHivdMNUD72H+dUYqBlmhCC6l3eG+8FZi2tkdwn8kUoa9kyLMtrEaFnOd/oUQbmNvIDp+8VWv1cSnRJ8UXKdXLl0smpvC7h1K2AUiC5oGIYQTCYWwYRM1wCbb+q1fbFCdkbI7OQW/h7Pj30eLpIuz0bJj4vdKXXZHK8clSdTMAFm6rQsNDI0w7QdCgaDmTn3b6TF2UJi4eDnh7uDbSpUd1mI5XWNw4C6WrUmebFLfiry6vqdiIc= +0 secure-delegated.dnssec-parent.com. IN CDS 86400 54319 8 1 a28ebe791e9cc7f4c2821131be367326ddd7434c +0 secure-delegated.dnssec-parent.com. IN CDS 86400 54319 8 2 a0b9c38cd324182af0ef66830d0a0e85a1d58979c9834e18c871779e040857b7 +0 secure-delegated.dnssec-parent.com. IN RRSIG 86400 CDNSKEY 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ... +0 secure-delegated.dnssec-parent.com. IN RRSIG 86400 CDS 8 3 86400 [expiry] [inception] [keytag] secure-delegated.dnssec-parent.com. ... diff --git a/regression-tests/tests/publishing-cds-cdnskey/skip.nodnssec b/regression-tests/tests/publishing-cds-cdnskey/skip.nodnssec new file mode 100644 index 000000000..e69de29bb