system/nsec3/tests.sh

35 	ZONE=$1
50 	dig_with_opts +noquestion "@${SERVER}" "$ZONE" NSEC3PARAM > "dig.out.test$n.wait" || return 1
51 …grep "${ZONE}\..*IN.*NSEC3PARAM.*1.*0.*${ITERATIONS}.*${SALT}" "dig.out.test$n.wait" > /dev/null |…
52 	grep "${ZONE}\..*IN.*RRSIG" "dig.out.test$n.wait" > /dev/null || return 1
57 	dig_with_opts +noquestion "@${SERVER}" "$ZONE" NSEC > "dig.out.test$n.wait" || return 1
59 	grep "${ZONE}\..*IN.*RRSIG" "dig.out.test$n.wait" > /dev/null || return 1
60 	grep "${ZONE}\..*IN.*NSEC3PARAM" "dig.out.test$n.wait" > /dev/null && return 1
68 	echo_i "wait for ${ZONE} to be signed ($n)"
71 		retry_quiet 10 _wait_for_nsec3param || log_error "wait for ${ZONE} to be signed failed"
73 		retry_quiet 10 _wait_for_nsec || log_error "wait for ${ZONE} to be signed failed"
83 …dig_with_opts +noquestion @$SERVER "${ZONE}" NSEC3PARAM > "dig.out.test$n.nsec3param.$ZONE" || ret…
84 	grep "NSEC3PARAM" "dig.out.test$n.nsec3param.$ZONE" > /dev/null && return 1
90 	dig_with_opts @$SERVER "nosuchname.${ZONE}" > "dig.out.test$n.nxdomain.$ZONE" || return 1
91 …grep "${ZONE}.*IN.*NSEC.*NS.*SOA.*RRSIG.*NSEC.*DNSKEY" "dig.out.test$n.nxdomain.$ZONE" > /dev/null…
92 	grep "NSEC3" "dig.out.test$n.nxdomain.$ZONE" > /dev/null && return 1
99 	echo_i "check NSEC3PARAM response for zone ${ZONE} ($n)"
101 …y_quiet 10 _check_nsec_nsec3param || log_error "unexpected NSEC3PARAM in response for zone ${ZONE}"
106 	echo_i "check NXDOMAIN response for zone ${ZONE} ($n)"
108 	retry_quiet 10 _check_nsec_nxdomain || log_error "bad NXDOMAIN response for zone ${ZONE}"
116 …dig_with_opts +noquestion @$SERVER "${ZONE}" NSEC3PARAM > "dig.out.test$n.nsec3param.$ZONE" || ret…
117 …grep "${ZONE}.*0.*IN.*NSEC3PARAM.*1.*0.*${ITERATIONS}.*${SALT}" "dig.out.test$n.nsec3param.$ZONE" …
120 		SALT=`awk '$4 == "NSEC3PARAM" { print $8 }' dig.out.test$n.nsec3param.$ZONE`
127 	dig_with_opts @$SERVER "nosuchname.${ZONE}" > "dig.out.test$n.nxdomain.$ZONE" || return 1
128 …grep ".*\.${ZONE}.*IN.*NSEC3.*1.${FLAGS}.*${ITERATIONS}.*${SALT}" "dig.out.test$n.nxdomain.$ZONE" …
135 	echo_i "check that NSEC3PARAM 1 0 ${ITERATIONS} is published zone ${ZONE} ($n)"
137 	retry_quiet 10 _check_nsec3_nsec3param || log_error "bad NSEC3PARAM response for ${ZONE}"
142 …echo_i "check NXDOMAIN response has correct NSEC3 1 ${FLAGS} ${ITERATIONS} ${SALT} for zone ${ZONE…
144 	retry_quiet 10 _check_nsec3_nxdomain || log_error "bad NXDOMAIN response for zone ${ZONE}"
156 echo_i "initial check zone ${ZONE}"
163 echo_i "initial check zone ${ZONE}"
170 echo_i "initial check zone ${ZONE}"
177 echo_i "initial check zone ${ZONE}"
184 echo_i "initial check zone ${ZONE}"
191 echo_i "initial check zone ${ZONE}"
198 echo_i "initial check zone ${ZONE}"
205 echo_i "initial check zone ${ZONE}"
212 echo_i "initial check zone ${ZONE}"
224 echo_i "check zone ${ZONE} after reconfig"
231 echo_i "check zone ${ZONE} after reconfig"
238 echo_i "check zone ${ZONE} after reconfig"
245 echo_i "check zone ${ZONE} after reconfig"
252 echo_i "check zone ${ZONE} after reconfig"
259 echo_i "check zone ${ZONE} after reconfig"
286 echo_i "check zone ${ZONE} after reconfig"
292 echo_i "use rndc signing -nsec3param ${ZONE} to change NSEC3 settings"
293 …ning -nsec3param 1 1 12 ffff $ZONE > rndc.signing.test$n.$ZONE || log_error "failed to call rndc s…
294 grep "zone uses dnssec-policy, use rndc dnssec command instead" rndc.signing.test$n.$ZONE > /dev/nu…
301 echo_i "check zone ${ZONE} before restart"
322 echo_i "check zone ${ZONE} after restart has salt ${SALT}"
332 echo_i "check zone ${ZONE} after reload"