Skip to content

kasp: Add test case for migrating KSK/ZSK to CSK

Matthijs Mekking requested to merge 3769-migrate-zsk-ksk-split-tocsk into main

Add a test case to cover #3769 (closed) where a user migrates from a KSK/ZSK split using auto-dnssec maintain, to the default dnssec-policy (CSK).

The test actually does not use the default dnssec-policy, but it does use one that has the same keys clause. For testing convenience, we use the same propagation time values as other test cases that migrate to dnssec-policy with mismatching existing key set.

Edited by Mark Andrews

Merge request reports