Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • BIND BIND
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 569
    • Issues 569
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 99
    • Merge requests 99
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • ISC Open Source ProjectsISC Open Source Projects
  • BINDBIND
  • Merge requests
  • !5693

Check unsigned serial number in signed zone files

  • Review changes

  • Download
  • Email patches
  • Plain diff
Merged Ondřej Surý requested to merge 3071-signed-version-of-an-inline-signed-zone-may-be-dumped-without-unsigned-serial-number-fix-v9_16 into v9_16 Jan 05, 2022
  • Overview 1
  • Commits 5
  • Pipelines 2
  • Changes 7

All signed zone files present in bin/tests/system/inline/ns8 should contain the unsigned serial number in the raw-format header. Add a check to ensure that is the case. Extend the dnssec-signzone command line in ns8/sign.sh with the -L option to allow the zones initially signed there to pass the newly added check. Add another zone to the configuration for the ns8 named instance to ensure the check also passes when multiple zones are inline-signed by a single named instance.

(cherry picked from commit ab49205a)

Closes #3071 (closed)

Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: 3071-signed-version-of-an-inline-signed-zone-may-be-dumped-without-unsigned-serial-number-fix-v9_16