tests/system/kasp.sh

202   ZONE=$1
290     $PYTHON >python.out.$ZONE.$1.$2 <<EOF
299     key_set "$1" "$2" $(cat python.out.$ZONE.$1.$2)
324   _zone="$ZONE"
386   grep "; Created:" "$KEY_FILE" >"${ZONE}.${KEY_ID}.${_alg_num}.created" || _log_error "mismatch created comment in $KEY_FILE"
387   KEY_CREATED=$(awk '{print $3}' <"${ZONE}.${KEY_ID}.${_alg_num}.created")
465   _zone="$ZONE"
499   echo_i "check key timing metadata for key $1 id ${_key_id} zone ${ZONE} ($n)"
644   _zone=$ZONE
699   echo_i "dnssec-verify zone ${ZONE} ($n)"
701   _dig_with_opts "$ZONE" "@${SERVER}" AXFR >dig.out.axfr.test$n || _log_error "dig ${ZONE} AXFR failed"
702   $VERIFY -z -o "$ZONE" dig.out.axfr.test$n >verify.out.$ZONE.test$n || _log_error "dnssec verify zone $ZONE failed"
710   _dig_with_opts "@${SERVER}" "$ZONE" NSEC >"dig.out.nsec.test$n" || return 1
712   grep "${ZONE}\..*IN.*RRSIG" "dig.out.nsec.test$n" >/dev/null || return 1
718   echo_i "wait for ${ZONE} to be signed ($n)"
719   retry_quiet 10 _wait_for_nsec || _log_error "wait for ${ZONE} to be signed failed"
725   _numkeys=$(get_keyids "$DIR" "$ZONE" | wc -l)
741   _ids=$(get_keyids "$DIR" "$ZONE")
789   echo_i "check keys are created for zone ${ZONE} ($n)"
792   echo_i "check number of keys for zone ${ZONE} in dir ${DIR} ($n)"
795     _numkeys=$(get_keyids "$DIR" "$ZONE" | wc -l)
796     _log_error "bad number of key files ($_numkeys) for zone $ZONE (expected $NUM_KEYS)"
813     test "no" = "$(key_get KEY1 ID)" && _log_error "No KEY1 found for zone ${ZONE}"
817     test "no" = "$(key_get KEY2 ID)" && _log_error "No KEY2 found for zone ${ZONE}"
821     test "no" = "$(key_get KEY3 ID)" && _log_error "No KEY3 found for zone ${ZONE}"
825     test "no" = "$(key_get KEY4 ID)" && _log_error "No KEY4 found for zone ${ZONE}"
944   retry_quiet 3 _check_signatures $1 $2 $3 || _log_error "RRset $1 in zone $ZONE incorrectly signed"
948   awk -v zone="${ZONE%%.}." \
962   awk -v zone="${ZONE%%.}." \
977   echo_i "check CDS and CDNSKEY rrset are signed correctly for zone ${ZONE} ($n)"
982   _dig_with_opts "$ZONE" "@${SERVER}" "CDS" >"dig.out.$DIR.test$n.cds" || _log_error "dig ${ZONE} CDS failed"
985   _dig_with_opts "$ZONE" "@${SERVER}" "CDNSKEY" >"dig.out.$DIR.test$n.cdnskey" || _log_error "dig ${ZONE} CDNSKEY failed"
1053   _owner="${ZONE}."
1063   _dig_with_opts "$ZONE" "@${SERVER}" "DNSKEY" >"dig.out.$DIR.test$n" || return 1
1125   echo_i "check DNSKEY rrset is signed correctly for zone ${ZONE} ($n)"
1138   echo_i "check SOA rrset is signed correctly for zone ${ZONE} ($n)"
1140   _dig_with_opts "$ZONE" "@${SERVER}" "SOA" >"dig.out.$DIR.test$n" || _log_error "dig ${ZONE} SOA failed"
1142   grep "${ZONE}\..*${DEFAULT_TTL}.*IN.*SOA.*" "dig.out.$DIR.test$n" >/dev/null || _log_error "missing SOA record in response"
1155   echo_i "check ${_qtype} a.${ZONE} rrset is signed correctly for zone ${ZONE} ($n)"
1157   _dig_with_opts "a.$ZONE" "@${SERVER}" $_qtype >"dig.out.$DIR.test$n" || _log_error "dig a.${ZONE} ${_qtype} failed"
1159   grep "a.${ZONE}\..*${DEFAULT_TTL}.*IN.*${_qtype}.*10\.0\.0\.1" "dig.out.$DIR.test$n" >/dev/null || _log_error "missing a.${ZONE} ${_qtype} record in response"