mirror of
https://github.com/NLnetLabs/unbound.git
synced 2024-09-21 22:57:08 +00:00
52 lines
1.5 KiB
Plaintext
52 lines
1.5 KiB
Plaintext
# source the master var file when it's there
|
|
[ -f ../.tpkg.var.master ] && source ../.tpkg.var.master
|
|
# use .tpkg.var.test for in test variable passing
|
|
[ -f .tpkg.var.test ] && source .tpkg.var.test
|
|
|
|
PRE="../.."
|
|
|
|
# only do this test if the network is up.
|
|
echo "is the net up?"
|
|
if dig @k.root-servers.net . SOA 2>&1 | grep NOERROR ; then
|
|
echo yes
|
|
else
|
|
echo no
|
|
exit 0
|
|
fi
|
|
|
|
# test that unbound-anchor, its builtin DNSKEY, works.
|
|
# so the https is disabled (go to 127.0.0.1@10099).
|
|
$PRE/unbound-anchor -u "127.0.0.1" -P 10099 -a test.ds -v
|
|
# check that the test.ds file is OK.
|
|
if $PRE/unbound-host -f test.ds -t SOA -v . 2>&1 | grep "(secure)"; then
|
|
echo "The builtin DS root anchors work"
|
|
else
|
|
echo "The builtin DS root anchors do not work"
|
|
exit 1
|
|
fi
|
|
|
|
echo ""
|
|
# test that unbound-anchor, the builtin certificate, works
|
|
# so, force https with -F and the -c is a nonexistant file
|
|
$PRE/unbound-anchor -a test.cert -c test.pem -v -F
|
|
# check that the test.cert file is OK.
|
|
if $PRE/unbound-host -f test.cert -t SOA -v . 2>&1 | grep "(secure)"; then
|
|
echo "The builtin root update certificate works"
|
|
else
|
|
echo "The builtin root update certificate does not work"
|
|
exit 1
|
|
fi
|
|
|
|
# use curl to see if the PGP certificate has been updated.
|
|
curl --time-cond "20170203 10:00:00" https://data.iana.org/root-anchors/icannbundle.pem > newcert
|
|
if test -n "`cat newcert`"; then
|
|
echo "icannbundle.pem has been updated"
|
|
cat newcert
|
|
echo "icannbundle.pem has been updated"
|
|
exit 1
|
|
else
|
|
echo "icannbundle.pem has not been updated"
|
|
fi
|
|
|
|
exit 0
|