Lines Matching refs:Zone
17 from isctest.template import Nameserver, TrustAnchor, Zone
22 def configure_tld(zonename: str, delegations: List[Zone]) -> Zone:
28 isctest.log.info(f"create {zonename} zone with delegations and sign")
30 for zone in delegations:
32 shutil.copy(f"{zone.ns.name}/dsset-{zone.name}.", "ns2/")
53 return Zone(zonename, f"{outfile}.signed", Nameserver("ns2", "10.53.0.2"))
56 def configure_root(delegations: List[Zone]) -> TrustAnchor:
63 isctest.log.info("create root zone with delegations and sign")
65 for zone in delegations:
66 shutil.copy(f"{zone.ns.name}/dsset-{zone.name}.", "ns1/")
138 def configure_algo_csk(tld: str, policy: str, reconfig: bool = False) -> List[Zone]:
142 zone = f"csk-algorithm-roll.{tld}"
148 zonename = f"step1.{zone}"
149 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
166 zonename = f"step2.{zone}"
167 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
188 # The zone signatures are also OMNIPRESENT.
189 zonename = f"step3.{zone}"
190 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
213 zonename = f"step4.{zone}"
214 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
237 zonename = f"step5.{zone}"
238 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
261 zonename = f"step6.{zone}"
262 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
286 def configure_algo_ksk_zsk(tld: str, reconfig: bool = False) -> List[Zone]:
290 zone = f"algorithm-roll.{tld}"
296 zonename = f"step1.{zone}"
297 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
321 zonename = f"step2.{zone}"
322 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
365 # The zone signatures are also OMNIPRESENT.
366 zonename = f"step3.{zone}"
367 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
410 zonename = f"step4.{zone}"
411 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
454 zonename = f"step5.{zone}"
455 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
498 zonename = f"step6.{zone}"
499 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
542 def configure_cskroll1(tld: str, policy: str) -> List[Zone]:
546 zone = f"csk-roll1.{tld}"
553 zonename = f"step1.{zone}"
554 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
569 zonename = f"step2.{zone}"
570 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
601 zonename = f"step3.{zone}"
602 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
665 # In other words, the DS is swapped before all zone signatures are replaced.
666 zonename = f"step4.{zone}"
667 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
717 zonename = f"step5.{zone}"
718 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
720 # Subtract DNSKEY TTL plus zone propagation delay from all the times (2h).
751 # removed from the zone.
752 zonename = f"step6.{zone}"
753 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
802 zonename = f"step7.{zone}"
803 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
805 # Subtract DNSKEY TTL plus zone propagation delay from all the times (2h).
836 zonename = f"step8.{zone}"
837 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
871 def configure_cskroll2(tld: str, policy: str) -> List[Zone]:
874 # This scenario differs from the csk-roll1 one because the zone signatures (ZRRSIG)
877 zone = f"csk-roll2.{tld}"
884 zonename = f"step1.{zone}"
885 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
900 zonename = f"step2.{zone}"
901 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
932 zonename = f"step3.{zone}"
933 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
995 # The DS is swapped after Dreg + Iret (1w3h). In other words, the zone
997 zonename = f"step4.{zone}"
998 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1049 # the zone.
1050 zonename = f"step5.{zone}"
1051 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1093 zonename = f"step6.{zone}"
1094 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1096 # Subtract DNSKEY TTL plus zone propagation delay (2h).
1136 zonename = f"step7.{zone}"
1137 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1180 zonename = f"step8.{zone}"
1181 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1215 def configure_enable_dnssec(tld: str, policy: str) -> List[Zone]:
1217 # initial signing of a zone.
1219 zone = f"enable-dnssec.{tld}"
1224 # This is an unsigned zone and named should perform the initial steps of
1226 zonename = f"step1.{zone}"
1227 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1233 zonename = f"step2.{zone}"
1234 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1237 # zone-propagation-delay: 5 minutes (300 seconds)
1252 # The zone signatures have been published long enough to become OMNIPRESENT.
1253 zonename = f"step3.{zone}"
1254 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1257 # max-zone-ttl: 12 hours (43200 seconds)
1258 # zone-propagation-delay: 5 minutes (300 seconds)
1273 zonename = f"step4.{zone}"
1274 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1295 def configure_going_insecure(tld: str, reconfig: bool = False) -> List[Zone]:
1301 # steps of unsigning a zone.
1302 for zone in [f"going-insecure.{tld}", f"going-insecure-dynamic.{tld}"]:
1303 # Set up a zone with dnssec-policy that is going insecure.
1306 zonename = f"step1.{zone}"
1307 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1332 zonename = f"step2.{zone}"
1334 Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3"))
1337 # The DS was withdrawn from the parent zone 26 hours ago.
1363 def configure_straight2none(tld: str) -> List[Zone]:
1374 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1387 Zone(zonename, f"{zonename}.db.signed", Nameserver("ns3", "10.53.0.3"))
1402 def configure_ksk_doubleksk(tld: str) -> List[Zone]:
1406 zone = f"ksk-doubleksk.{tld}"
1413 zonename = f"step1.{zone}"
1414 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1435 zonename = f"step2.{zone}"
1436 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1471 zonename = f"step3.{zone}"
1472 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1525 zonename = f"step4.{zone}"
1526 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1576 zonename = f"step5.{zone}"
1577 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1579 # Subtract DNSKEY TTL + zone-propagation-delay from all the times (3h).
1626 zonename = f"step6.{zone}"
1627 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1669 def configure_ksk_3crowd(tld: str) -> List[Zone]:
1677 # The expected behavior is that all three keys remain in the zone, and not
1685 # Set up a zone that has a KSK (KEY1) and have the successor key (KEY2)
1688 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1730 def configure_zsk_prepub(tld: str) -> List[Zone]:
1734 zone = f"zsk-prepub.{tld}"
1740 zonename = f"step1.{zone}"
1741 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1762 zonename = f"step2.{zone}"
1763 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1786 # is OMNIPRESENT and the zone can thus be signed with the successor ZSK.
1787 zonename = f"step3.{zone}"
1788 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1828 # removed from the zone.
1829 zonename = f"step4.{zone}"
1830 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1880 zonename = f"step5.{zone}"
1881 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
1883 # Subtract DNSKEY TTL + zone-propagation-delay from all the times (2h).
1918 zonename = f"step6.{zone}"
1919 zones.append(Zone(zonename, f"{zonename}.db", Nameserver("ns3", "10.53.0.3")))
Indexes created Sun Mar 01 05:31:48 UTC 2026