WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-09-08 02:47:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

zonemd, fix that dnssec denial does not invalidate zone.

Browse Source 
zonemd, unit test of nsec and nsec3 denial.
This commit is contained in:
W.C.A. Wijngaards
2020-10-21 11:51:30 +02:00
parent 2ebc4eae2f
commit e8d29f973d
4 changed files with 97 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testcode/unitmain.c
+15 -1
View File
@@ -1098,7 +1098,8 @@ static void zonemd_verify_test(char* zname, char* zfile, char* tastr,
if(!result)
fatal_exit("out of memory");
unit_assert(strcmp(result, result_wanted) == 0);
if(strcmp(result, "ZONEMD verification successful") == 0) {
if(strcmp(result, "ZONEMD verification successful") == 0 ||
strcmp(result, "ZONEMD successful, DNSSEC verified nonexistence of ZONEMD") == 0) {
lock_rw_rdlock(&z->lock);
unit_assert(!z->zone_expired);
lock_rw_unlock(&z->lock);
@@ -1187,6 +1188,19 @@ static void zonemd_verify_tests(void)
"example.com. IN DS 55566 8 2 9c148338951ce1c3b5cd3da532f3d90dfcf92595148022f2c2fd98e5deee90af",
"20201020135527",
"ZONEMD verification successful");
/* load a DNSSEC NSEC zone without ZONEMD */
zonemd_verify_test("example.com",
"testdata/zonemd.example7.zone",
"example.com. IN DS 55566 8 2 9c148338951ce1c3b5cd3da532f3d90dfcf92595148022f2c2fd98e5deee90af",
"20201020135527",
"ZONEMD successful, DNSSEC verified nonexistence of ZONEMD");
/* load a DNSSEC NSEC3 zone without ZONEMD */
zonemd_verify_test("example.com",
"testdata/zonemd.example8.zone",
"example.com. IN DS 55566 8 2 9c148338951ce1c3b5cd3da532f3d90dfcf92595148022f2c2fd98e5deee90af",
"20201020135527",
"ZONEMD successful, DNSSEC verified nonexistence of ZONEMD");
}
/** zonemd unit tests */