Home | History | Annotate | Download | only in isctest

Lines Matching refs:DNSKEY

66         config["dnskey-ttl"]
73 ttl1 = config["dnskey-ttl"] + config["publish-safety"]
79 # dnskey-ttl, and no publish-safety (because we are looking at
450 def dnskey(self) -> dns.rrset.RRset:
461 dnskey_rr.rdtype == dns.rdatatype.DNSKEY
462 ), f"DNSKEY not found in {self.keyfile}"
466 dnskey = self.dnskey
468 ds = dns.dnssec.make_ds(dnskey.name, dnskey[0], dsdigest)
472 parts = str(dnskey).split()
476 return TrustAnchor(str(dnskey.name), ta_type, contents)
490 dnskey = value.split()
494 assert dnskey[3] == "CDNSKEY"
495 dnskey[3] = "DNSKEY"
498 rdata = " ".join(dnskey[:7])
506 pubkey_fromwire = "".join(dnskey[7:])
598 dnskey = f"{zone}. {ttl} IN DNSKEY {flags} 3 {alg}"
599 if not isctest.util.file_contents_contain(self.keyfile, dnskey):
600 isctest.log.debug(f"{self.name} DNSKEY MISMATCH: expected '{dnskey}'")
897 if covers in [dns.rdatatype.DNSKEY, dns.rdatatype.CDNSKEY, dns.rdatatype.CDS]:
1009 for dnskey in dnskeys:
1010 assert not key.dnskey_equals(dnskey, cdnskey=cdnskey)
1014 for dnskey in dnskeys:
1015 if key.dnskey_equals(dnskey, cdnskey=cdnskey):
1030 # Check if the correct DNSKEY records are published. If the current time
1032 # a DNSKEY record published. If 'cdnskey' is True, check against CDNSKEY
1041 dnskey = f"{rr.name} {rr.ttl} {rdclass} {rdtype} {rdata}"
1042 dnskeys.append(dnskey)
1157 # Test the apex of a zone. This checks that the SOA and DNSKEY RRsets
1164 # test dnskey query
1165 dnskeys, rrsigs = _query_rrset(server, fqdn, dns.rdatatype.DNSKEY, tsig=tsig)
1168 rrsigs, dns.rdatatype.DNSKEY, fqdn, ksks, zsks, offline_ksk=offline_ksk
1276 ttl = int(config["dnskey-ttl"].total_seconds())
1565 - "goal", "dnskey", "krrsig", "zrrsig", "ds", followed by a value,
1607 elif line[i].startswith("dnskey:"):