Lines Matching refs:CDS
2011 $SIGNER -G "cdnskey,cds:sha384" -O full -S -f signer.out.$n -o example example2.db >/dev/null
2014 test $(awk '$4 == "CDS" && $7 == "2" { print }' signer/signer.out.$n | wc -l) -eq 0 || ret=1
2015 test $(awk '$4 == "CDS" && $7 == "4" { print }' signer/signer.out.$n | wc -l) -eq 1 || ret=1
2027 test $(awk '$4 == "CDS" && $7 == "2" { print }' signer/signer.out.$n | wc -l) -eq 1 || ret=1
2028 test $(awk '$4 == "CDS" && $7 == "4" { print }' signer/signer.out.$n | wc -l) -eq 0 || ret=1
2040 test $(awk '$4 == "CDS" && $7 == "2" { print }' signer/signer.out.$n | wc -l) -eq 0 || ret=1
2041 test $(awk '$4 == "CDS" && $7 == "4" { print }' signer/signer.out.$n | wc -l) -eq 0 || ret=1
2050 $SIGNER -G "cds:sha-256,cds:sha384" -O full -S -f signer.out.$n -o example example2.db >/dev/null
2053 test $(awk '$4 == "CDS" && $7 == "2" { print }' signer/signer.out.$n | wc -l) -eq 1 || ret=1
2054 test $(awk '$4 == "CDS" && $7 == "4" { print }' signer/signer.out.$n | wc -l) -eq 1 || ret=1
2059 echo_i "checking dnssec-signzone -G (no CDS) ($n)"
2066 test $(awk '$4 == "CDS" && $7 == "2" { print }' signer/signer.out.$n | wc -l) -eq 0 || ret=1
2067 test $(awk '$4 == "CDS" && $7 == "4" { print }' signer/signer.out.$n | wc -l) -eq 0 || ret=1
2076 $SIGNER -G "cdnskey,cds:sha256,cds:sha256,cdnskey" -O full -S -f signer.out.$n -o example example2.db >/dev/null
2079 test $(awk '$4 == "CDS" && $7 == "2" { print }' signer/signer.out.$n | wc -l) -eq 1 || ret=1
2080 test $(awk '$4 == "CDS" && $7 == "4" { print }' signer/signer.out.$n | wc -l) -eq 0 || ret=1
2090 grep "digest must specify cds:algorithm ('foobar')" signer.err.$n >/dev/null || ret=1
2100 $SIGNER -G "cdnskey,cds:foobar" -O full -S -f signer.out.$n -o example example2.db 2>signer.err.$n && ret=1
2101 grep "bad digest 'cds:foobar'" signer.err.$n >/dev/null || ret=1
2111 $SIGNER -G "cdnskey,cds:256" -O full -S -f signer.out.$n -o example example2.db 2>signer.err.$n && ret=1
2112 grep "bad digest 'cds:256': out of range" signer.err.$n >/dev/null || ret=1
2122 $SIGNER -G "cdnskey,cds:gost" -O full -S -f signer.out.$n -o example example2.db 2>signer.err.$n && ret=1
2123 grep "unsupported digest 'cds:gost'" signer.err.$n >/dev/null || ret=1
2133 $SIGNER -G "cdnskey,cds:200" -O full -S -f signer.out.$n -o example example2.db 2>signer.err.$n && ret=1
2134 grep "unsupported digest 'cds:200'" signer.err.$n >/dev/null || ret=1
3603 echo_i "check that CDS records are signed using KSK by dnssec-signzone ($n)"
3605 dig_with_opts +noall +answer @10.53.0.2 cds cds.secure >dig.out.test$n
3606 lines=$(awk '$4 == "RRSIG" && $5 == "CDS" {print}' dig.out.test$n | wc -l)
3612 echo_i "check that CDS records are not signed using ZSK by dnssec-signzone -x ($n)"
3614 dig_with_opts +noall +answer @10.53.0.2 cds cds-x.secure >dig.out.test$n
3615 lines=$(awk '$4 == "RRSIG" && $5 == "CDS" {print}' dig.out.test$n | wc -l)
3633 echo_i "check that CDS records are signed using KSK by with dnssec-policy ($n)"
3635 dig_with_opts +noall +answer @10.53.0.2 cds cds-auto.secure >dig.out.test$n
3636 lines=$(awk '$4 == "RRSIG" && $5 == "CDS" {print}' dig.out.test$n | wc -l)
3642 echo_i "check that a CDS deletion record is accepted ($n)"
3645 echo zone cds-update.secure
3647 echo update delete cds-update.secure CDS
3648 echo update add cds-update.secure 0 CDS 0 0 0 00
3651 dig_with_opts +noall +answer @10.53.0.2 cds cds-update.secure >dig.out.test$n
3652 lines=$(awk '$4 == "CDS" {print}' dig.out.test$n | wc -l)
3654 lines=$(awk '$4 == "CDS" && $5 == "0" && $6 == "0" && $7 == "0" && $8 == "00" {print}' dig.out.test$n | wc -l)
3660 echo_i "check that CDS records are signed only using KSK when added by nsupdate ($n)"
3662 keyid=$(cat ns2/cds-update.secure.id)
3664 echo zone cds-update.secure
3666 echo update delete cds-update.secure CDS
3668 dig_with_opts +noall +answer @10.53.0.2 dnskey cds-update.secure \
3670 | $DSFROMKEY -12 -C -f - -T 1 cds-update.secure \
3674 dig_with_opts +noall +answer @10.53.0.2 cds cds-update.secure >dig.out.test$n
3675 lines=$(awk '$4 == "RRSIG" && $5 == "CDS" {print}' dig.out.test$n | wc -l)
3677 lines=$(awk -v id="${keyid}" '$4 == "RRSIG" && $5 == "CDS" && $11 == id {print}' dig.out.test$n | wc -l)
3679 lines=$(awk '$4 == "CDS" {print}' dig.out.test$n | wc -l)
3685 echo_i "check that CDS deletion records are signed only using KSK when added by nsupdate ($n)"
3687 keyid=$(cat ns2/cds-update.secure.id)
3689 echo zone cds-update.secure
3691 echo update delete cds-update.secure CDS
3692 echo update add cds-update.secure 0 CDS 0 0 0 00
3695 dig_with_opts +noall +answer @10.53.0.2 cds cds-update.secure >dig.out.test$n
3696 lines=$(awk '$4 == "RRSIG" && $5 == "CDS" {print}' dig.out.test$n | wc -l)
3698 lines=$(awk -v id="${keyid}" '$4 == "RRSIG" && $5 == "CDS" && $11 == id {print}' dig.out.test$n | wc -l)
3700 lines=$(awk '$4 == "CDS" {print}' dig.out.test$n | wc -l)
3702 lines=$(awk '$4 == "CDS" && $5 == "0" && $6 == "0" && $7 == "0" && $8 == "00" {print}' dig.out.test$n | wc -l)
3720 echo_i "check that a non matching CDS record is accepted with a matching CDS record ($n)"
3723 echo zone cds-update.secure
3725 echo update delete cds-update.secure CDS
3727 dig_with_opts +noall +answer @10.53.0.2 dnskey cds-update.secure \
3729 | $DSFROMKEY -12 -C -f - -T 1 cds-update.secure \
3731 dig_with_opts +noall +answer @10.53.0.2 dnskey cds-update.secure \
3733 | $DSFROMKEY -12 -C -A -f - -T 1 cds-update.secure \
3737 dig_with_opts +noall +answer @10.53.0.2 cds cds-update.secure >dig.out.test$n
3738 lines=$(awk '$4 == "RRSIG" && $5 == "CDS" {print}' dig.out.test$n | wc -l)
3740 lines=$(awk '$4 == "CDS" {print}' dig.out.test$n | wc -l)
4319 for qtype in "DNSKEY" "CDNSKEY" "CDS"; do
4406 for qtype in "DNSKEY" "CDNSKEY" "CDS"; do
4480 for qtype in "DNSKEY" "CDNSKEY" "CDS"; do
4556 for qtype in "DNSKEY" "CDNSKEY" "CDS"; do
4783 cdscount=$(grep -c "RRSIG.CDS ${DEFAULT_ALGORITHM_NUMBER} " signer/revoke.example.db.signed)
Indexes created Wed Aug 05 00:25:39 UTC 2026