Files
freeipa/ipatests
Stanislav Levin 26ee44bcfd ipatests: dnssec: Add alternative approach for checking chain of trust
drill is currently broken on F34. Fortunately, there are another
tools for checking DNSSEC trust. One of them is `delv`:

> delv is a tool for sending DNS queries and validating the results,
using the same internal resolver and validator logic as named.

delv sends to a specified name server all queries needed to fetch and
validate the requested data; this includes the original requested query,
subsequent queries to follow CNAME or DNAME chains, queries for DNSKEY,
and DS records to establish a chain of trust for DNSSEC validation. It
does not perform iterative resolution, but simulates the behavior of a
name server configured for DNSSEC validating and forwarding.

Related: https://pagure.io/freeipa/issue/8793
Signed-off-by: Stanislav Levin <slev@altlinux.org>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2021-05-25 10:45:49 +03:00
..
2021-05-25 10:45:49 +03:00
2019-07-16 13:23:21 +03:00
2020-10-26 17:11:19 +11:00
2021-01-21 13:51:45 +01:00
2021-04-27 13:10:26 -04:00
2013-06-17 19:22:50 +02:00
2015-10-22 18:34:46 +02:00
2016-10-20 18:43:37 +02:00