Skip to content
Snippets Groups Projects
Verified Commit ba558aef authored by Tomas Krizek's avatar Tomas Krizek
Browse files

distro/tests: update DNSSEC bogus test

dnssec-failed.org domain uses RSA/SHA1 algorithm, which is considered
insecure by Fedora 33+ policy.
parent 4d1f6f4f
Branches
Tags
1 merge request!1088distro/tests: update distributions
Pipeline #71361 passed with warnings with stages
in 3 hours, 10 minutes, and 59 seconds
---
# SPDX-License-Identifier: GPL-3.0-or-later
- name: dnssec_test dnssec-failed.org +cd returns NOERROR
- name: dnssec_test bogussig.bad-dnssec.wb.sidnlabs.nl. +cd returns NOERROR
tags:
- test
shell: kdig +cd @127.0.0.1 dnssec-failed.org
shell: kdig +cd @127.0.0.1 bogussig.bad-dnssec.wb.sidnlabs.nl.
register: res
failed_when: '"status: NOERROR" not in res.stdout'
- name: dnssec_test dnssec-failed.org returns SERVFAIL
- name: dnssec_test bogussig.bad-dnssec.wb.sidnlabs.nl. returns SERVFAIL
tags:
- test
shell: kdig @127.0.0.1 dnssec-failed.org
shell: kdig @127.0.0.1 bogussig.bad-dnssec.wb.sidnlabs.nl.
register: res
failed_when: '"status: SERVFAIL" not in res.stdout'
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment