Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CDS/CDNSKEY test cases improvements (DNSSEC15/DNSSEC16/DNSSEC17) #989

Merged

Conversation

vlevigneron
Copy link
Contributor

@vlevigneron vlevigneron commented Oct 22, 2021

Purpose

This PR add new tests and message in DNSSEC16 and DNSSEC17 (Cf zonemaster/zonemaster#966).
This PR also add a complete set of unit tests for the 2 methods (all message tags are tested)
This PR also add missing unit test for DNSSEC15

Context

Fixes #988
Fixes #907
Fixes #896

Changes

methods Zonemaster::Engine::Test::DNSSEC::dnssec16 and Zonemaster::Engine::Test::DNSSEC::dnssec17 modified with new messages
6 new messages tag implemented (no translation yet)
Unit tests updated (no more unit tests missing)

How to test this PR

Use one of the following domains to do the tests:

DNSSEC15:
dnssec15-mismatch-cds-cdnskey.zft-root.rd.nic.fr

DNSSEC16 :
dnssec16-cds-cdnskey-signed.zft-root.rd.nic.fr
dnssec16-cds-cdnskey-unsigned.zft-root.rd.nic.fr
dnssec16-cds-cdnskey-invalid-rrsig-01.zft-root.rd.nic.fr
dnssec16-cds-cdnskey-invalid-rrsig-02.zft-root.rd.nic.fr
dnssec16-cds-unsigned.zft-root.rd.nic.fr
dnssec16-delete-cds.zft-root.rd.nic.fr
dnssec16-cds-without-dnskey.zft-root.rd.nic.fr
dnssec16-mixed-delete-cds.zft-root.rd.nic.fr
dnssec16-cds-matches-no-dnskey.zft-root.rd.nic.fr
dnssec16-cds-matches-non-sep-dnskey.zft-root.rd.nic.fr
dnssec16-cds-signed-by-unknown-dnskey.zft-root.rd.nic.fr
dnssec16-cds-matches-non-zone-dnskey.zft-root.rd.nic.fr

DNSSEC17:
dnssec16-cds-cdnskey-signed.zft-root.rd.nic.fr
dnssec16-cds-cdnskey-unsigned.zft-root.rd.nic.fr
dnssec16-cds-cdnskey-invalid-rrsig-01.zft-root.rd.nic.fr
dnssec16-cds-cdnskey-invalid-rrsig-02.zft-root.rd.nic.fr
dnssec17-cdnskey-unsigned.zft-root.rd.nic.fr
dnssec16-cds-without-dnskey.zft-root.rd.nic.fr
dnssec17-cdnskey-signed-by-unknown-dnskey.zft-root.rd.nic.fr
dnssec17-cdnskey-matches-no-dnskey.zft-root.rd.nic.fr
dnssec17-delete-cdnskey.zft-root.rd.nic.fr
dnssec17-mixed-delete-cdnskey.zft-root.rd.nic.fr
dnssec17-cdnskey-is-non-zone.zft-root.rd.nic.fr

@vlevigneron vlevigneron added this to the v2021.2 milestone Oct 22, 2021
@vlevigneron vlevigneron changed the title Implementation of DNSSEC16 and DNSSEC17 with enhanced specifications CDS/CDNSKEY test cases improvements (DNSSEC15/DNSSEC16/DNSSEC17) Oct 23, 2021
matsduf
matsduf previously approved these changes Oct 24, 2021
Copy link
Contributor

@matsduf matsduf left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks good. I approve.

@vlevigneron
Copy link
Contributor Author

Sorry @matsduf I did not see your approval. I add a cosmetic change.

@matsduf
Copy link
Contributor

matsduf commented Nov 30, 2021

Testing v2021.2

LGTM.

I tested available test zones and compared with the output when using dig.

@matsduf matsduf added A-TestCase Area: Test case specification or implementation of test case S-ReleaseTested Status: The PR has been successfully tested in release testing labels Nov 30, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-TestCase Area: Test case specification or implementation of test case S-ReleaseTested Status: The PR has been successfully tested in release testing
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants