GitLab

Cheap re-indentation using reindent.py from python-2.7.13.
This costs nothing and will avoid PEP8 complaints about tabs in CI.

Linux distributions are moving towards Python 3. As a consequence,
staying on Python 2 is causing problems. E.g. Deckard errored out
on missing 'dns' package but 'pip install' claimed that 'dns' is already
installed...

From now the Deckard is using default Python version so it should be
less surprising. If necessary, the default version can be overriden
using PYTHON variable in Makefile.

An important side-effect is that Deckard running under Python 3 is
easier to debug because Python 3 is able to report whole chains
of exceptions properly.

The main problem was that socket.type from Python standard library is
not an integer anymore. It is EnumInt object which is used instead of
bit field. To make the code compatible with both versions of Python we
had to replace all exact value comparisons with bitwise masking.

Deckard: use SOCKET_WRAPPER_PCAP_FILE facilities

See merge request !26

Custom implementation of packet logging was replaced by
SOCKET_WRAPPER_PCAP_FILE facilities. The main advantage is that it logs
all the traffic including malformed packets, ICMP messages and so on.

As side-effect, this commit removes depedency on Python package dpkt.

Support duplicate records in DNS entries

See merge request !23

dnspython library by default coalesces RRsets of same type into one and
automaticaly deduplicates equicalent RRs inside one RRset.
This prevented Deckard from testing DNS messages with duplicate RR.

To prevent this, all DNS messages are now parsed using option
one_rr_per_rrset=True. This setting may create multiple RRsets
of the same type but it seems okay for Deckard because the comparison
algorithms compare individual RRs and ignore how they are distributed
among RRsets.

Test ignoring answers with unexpected RRType

See merge request !24

Implement initial version of Continuous Integration

See merge request !13

This is necessary to avoid
Instance of 'Step' has no 'queries' member (no-member)
errors reported by Pylint.

Candidate (to-be-merged) version is compared against merge base
(git merge-base master..HEAD).

New PEP8 or Pylint defects are show stopper.
Tests results for non-modified rpl files must not change.

For easier debugging we will need proper logging with categogies and
levels. For now just cleanup redundant if VERBOSE: tests around
dprint() calls.

Failing early is especially important in scripts which run make multiple
times. It prevents the user from missing some failing tests in earlier
runs.

Test not using cached glue records

See merge request !21

Update tests for disabled GLUE caching in kresd normal mode

See merge request !20

Unbound support

See merge request !18

PowerDNS fixes

See merge request !17

Vim syntax: fix folding of entries and ranges

See merge request !19

kresd in 'normal' mode attempts to resolve AAAA records for name
servers. The old tests did not have NODATA answers for AAAA queries
and it was causing false positives when running tests in the 'normal' mode.

Vim Keyword has higher priority than Region. This broke folding.
Now the ENTRY_BEGIN (and company) is highlighted using matchgroup= trick
instead of Keyword so folding works.

It is very handy to use Unbound as cross-check that tests are correct.

The original name "recursor.j2" was confusing to bystanders.

We have to enable IPv6 in the recursor and handle it properly in hints
file (for tests using IPv6 addresses for root servers).

The optional TTL field caused problems with the original split() usage.
Also, the node name was previously ignored. Now it is respected.
DNSKEYs are still not supported, there is no addDNSKEY function in
PowerDNS.

The old default value did not make sense on other people's systems.

PowerDNS recursor terminates with non-zero exit code after receiving
SIGTERM so we need to ignore this condition.

Power DNS recursor terminates with non-zero exit code after receiving
SIGTERM so we need to ignore this condition.

Minmaxttl

See merge request !16

Test validator with CNAMEs chains between secure and insecure zones

See merge request !15

Test for api.turris.cz A/AAAA

See merge request !14