Skip to content
Snippets Groups Projects
Verified Commit ba558aef authored by Tomas Krizek's avatar Tomas Krizek
Browse files

distro/tests: update DNSSEC bogus test

dnssec-failed.org domain uses RSA/SHA1 algorithm, which is considered
insecure by Fedora 33+ policy.
parent 4d1f6f4f
No related branches found
No related tags found
1 merge request!1088distro/tests: update distributions
Pipeline #71361 passed with warnings
--- ---
# SPDX-License-Identifier: GPL-3.0-or-later # SPDX-License-Identifier: GPL-3.0-or-later
- name: dnssec_test dnssec-failed.org +cd returns NOERROR - name: dnssec_test bogussig.bad-dnssec.wb.sidnlabs.nl. +cd returns NOERROR
tags: tags:
- test - test
shell: kdig +cd @127.0.0.1 dnssec-failed.org shell: kdig +cd @127.0.0.1 bogussig.bad-dnssec.wb.sidnlabs.nl.
register: res register: res
failed_when: '"status: NOERROR" not in res.stdout' failed_when: '"status: NOERROR" not in res.stdout'
- name: dnssec_test dnssec-failed.org returns SERVFAIL - name: dnssec_test bogussig.bad-dnssec.wb.sidnlabs.nl. returns SERVFAIL
tags: tags:
- test - test
shell: kdig @127.0.0.1 dnssec-failed.org shell: kdig @127.0.0.1 bogussig.bad-dnssec.wb.sidnlabs.nl.
register: res register: res
failed_when: '"status: SERVFAIL" not in res.stdout' failed_when: '"status: SERVFAIL" not in res.stdout'
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment