15 ret=0
16 $CHECKCONF good.conf > /dev/null 2>&1 || ret=1
17 if [ $ret != 0 ]; then echo "I:failed"; fi
18 status=`expr $status + $ret`
22 ret=0
24 [ -s good.conf.in ] || ret=1
25 $CHECKCONF -p good.conf.in | grep -v '^good.conf.in:' > good.conf.out 2>&1 || ret=1
26 cmp good.conf.in good.conf.out || ret=1
27 if [ $ret != 0 ]; then echo "I:failed"; fi
28 status=`expr $status + $ret`
32 ret=0
34 grep 'secret "' good.conf.in > /dev/null || ret=1
35 grep 'secret "????????????????"' good.conf.in > /dev/null 2>&1 && ret=1
36 $CHECKCONF -p -x good.conf.in | grep -v '^good.conf.in:' > good.conf.out 2>&1 || ret=1
37 grep 'secret "????????????????"' good.conf.out > /dev/null 2>&1 || ret=1
38 if [ $ret != 0 ]; then echo "I:failed"; fi
39 status=`expr $status + $ret`
45     ret=0
47     if [ $? != 1 ]; then ret=1; fi
48     grep "^$bad:[0-9]*: " checkconf.out > /dev/null || ret=1
52 	grep "$pat" checkconf.out > /dev/null || ret=1
56 	grep "$pat" checkconf.out > /dev/null || ret=1
59     if [ $ret != 0 ]; then echo "I:failed"; fi
60     status=`expr $status + $ret`
67 	ret=0
69 	if [ $? != 0 ]; then echo "I:failed"; ret=1; fi
70 	status=`expr $status + $ret`
75 ret=0
76 $CHECKCONF -z hint-nofile.conf > hint-nofile.out 2>&1 && ret=1
77 grep "could not configure root hints from 'nonexistent.db': file not found" hint-nofile.out > /dev/null || ret=1
78 if [ $ret != 0 ]; then echo "I:failed"; fi
79 status=`expr $status + $ret`
83 ret=0
84 $CHECKCONF range.conf > /dev/null 2>&1 && ret=1
85 if [ $ret != 0 ]; then echo "I:failed"; fi
86 status=`expr $status + $ret`
90 ret=0
92 [ $warnings -eq 3 ] || ret=1
93 if [ $ret != 0 ]; then echo "I:failed"; fi
94 status=`expr $status + $ret`
98 ret=0
99 $CHECKCONF dnssec.1 2>&1 | grep 'validation yes.*enable no' > /dev/null || ret=1
100 $CHECKCONF dnssec.2 2>&1 | grep 'auto-dnssec may only be ' > /dev/null || ret=1
101 $CHECKCONF dnssec.2 2>&1 | grep 'validation auto.*enable no' > /dev/null || ret=1
102 $CHECKCONF dnssec.2 2>&1 | grep 'validation yes.*enable no' > /dev/null || ret=1
104 $CHECKCONF dnssec.3 2>&1 | grep '.*' && ret=1
105 if [ $ret != 0 ]; then echo "I:failed"; fi
106 status=`expr $status + $ret`
110 ret=0
118     [ $? -eq 1 ] || { echo "I: options $field failed" ; ret=1; }
125     [ $? -eq 1 ] || { echo "I: view $field failed" ; ret=1; }
134     [ $? -eq 1 ] || { echo "I: options + view $field failed" ; ret=1; }
143     [ $? -eq 1 ] || { echo "I: zone $field failed" ; ret=1; }
145 if [ $ret != 0 ]; then echo "I:failed"; fi
146 status=`expr $status + $ret`
150 ret=0
152 [ $l -eq 1 ] || ret=1
154 [ $l -eq 1 ] || ret=1
156 [ $l -eq 1 ] || ret=1
157 if [ $ret != 0 ]; then echo "I:failed"; fi
158 status=`expr $status + $ret`
163 [ $l -eq 0 ] || ret=1
165 [ $l -eq 0 ] || ret=1
167 [ $l -eq 1 ] || ret=1
168 if [ $ret != 0 ]; then echo "I:failed"; fi
169 status=`expr $status + $ret`
173 ret=0
174 $CHECKCONF dlz-bad.conf 2>&1 | grep "'dlz' and 'database'" > /dev/null || ret=1
175 if [ $ret != 0 ]; then echo "I:failed"; fi
176 status=`expr $status + $ret`
180 ret=0
183 [ $l -eq 1 ] || ret=1
186 [ $l -eq 1 ] || ret=1
190 [ $l -eq 0 ] || ret=1
192 if [ $ret != 0 ]; then echo "I:failed"; fi
196 ret=0
198 grep 'TTL 900 exceeds configured max-zone-ttl 600' check.out > /dev/null 2>&1 || ret=1
199 grep 'TTL 900 exceeds configured max-zone-ttl 600' check.out > /dev/null 2>&1 || ret=1
200 grep 'TTL 900 exceeds configured max-zone-ttl 600' check.out > /dev/null 2>&1 || ret=1
201 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
202 status=`expr $status + $ret`
206 ret=0
207 $CHECKCONF -z max-ttl-bad.conf > /dev/null 2>&1 && ret=1
208 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
209 status=`expr $status + $ret`
213 ret=0
214 $CHECKCONF -z altdb.conf > /dev/null 2>&1 || ret=1
215 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
216 status=`expr $status + $ret`
220 ret=0
221 $CHECKCONF -z altdlz.conf > /dev/null 2>&1 || ret=1
222 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
223 status=`expr $status + $ret`
227 ret=0
228 $CHECKCONF -z view-class-any1.conf > /dev/null 2>&1 && ret=1
229 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
230 status=`expr $status + $ret`
234 ret=0
235 $CHECKCONF -z view-class-any2.conf > /dev/null 2>&1 && ret=1
236 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
237 status=`expr $status + $ret`
241 ret=0
242 $CHECKCONF -z view-class-in1.conf > /dev/null 2>&1 || ret=1
243 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
244 status=`expr $status + $ret`
248 ret=0
249 $CHECKCONF -z view-class-in2.conf > /dev/null 2>&1 || ret=1
250 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
251 status=`expr $status + $ret`
255 ret=0
256 $CHECKCONF -z check-names-fail.conf > checkconf.out$n 2>&1 && ret=1
257 grep "near '_underscore': bad name (check-names)" checkconf.out$n > /dev/null || ret=1
258 grep "zone check-names/IN: loaded serial" < checkconf.out$n > /dev/null && ret=1
259 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
260 status=`expr $status + $ret`
264 ret=0
265 $CHECKCONF -z check-mx-fail.conf > checkconf.out$n 2>&1 && ret=1
266 grep "near '10.0.0.1': MX is an address" checkconf.out$n > /dev/null || ret=1
267 grep "zone check-mx/IN: loaded serial" < checkconf.out$n > /dev/null && ret=1
268 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
269 status=`expr $status + $ret`
273 ret=0
274 $CHECKCONF -z check-dup-records-fail.conf > checkconf.out$n 2>&1 && ret=1
275 grep "has semantically identical records" checkconf.out$n > /dev/null || ret=1
276 grep "zone check-dup-records/IN: loaded serial" < checkconf.out$n > /dev/null && ret=1
277 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
278 status=`expr $status + $ret`
282 ret=0
283 $CHECKCONF -z check-mx-fail.conf > checkconf.out$n 2>&1 && ret=1
284 grep "failed: MX is an address" checkconf.out$n > /dev/null || ret=1
285 grep "zone check-mx/IN: loaded serial" < checkconf.out$n > /dev/null && ret=1
286 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
287 status=`expr $status + $ret`
291 ret=0
292 $CHECKCONF -z check-mx-cname-fail.conf > checkconf.out$n 2>&1 && ret=1
293 grep "MX.* is a CNAME (illegal)" checkconf.out$n > /dev/null || ret=1
294 grep "zone check-mx-cname/IN: loaded serial" < checkconf.out$n > /dev/null && ret=1
295 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
296 status=`expr $status + $ret`
300 ret=0
301 $CHECKCONF -z check-srv-cname-fail.conf > checkconf.out$n 2>&1 && ret=1
302 grep "SRV.* is a CNAME (illegal)" checkconf.out$n > /dev/null || ret=1
303 grep "zone check-mx-cname/IN: loaded serial" < checkconf.out$n > /dev/null && ret=1
304 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
305 status=`expr $status + $ret`
309 ret=0
310 $CHECKCONF -p portrange-good.conf > checkconf.out$n 2>&1 || ret=1
311 grep "range 8610 8614;" checkconf.out$n > /dev/null || ret=1
312 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
313 status=`expr $status + $ret`
317 ret=0
318 $CHECKCONF -z in-view-good.conf > checkconf.out7 2>&1 || ret=1
319 grep "zone shared.example/IN: loaded serial" < checkconf.out7 > /dev/null || ret=1
320 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
321 status=`expr $status + $ret`
325 ret=0
326 $CHECKCONF -p max-cache-size-good.conf > checkconf.out8 2>&1 || ret=1
327 grep "max-cache-size 60%;" checkconf.out8 > /dev/null || ret=1
328 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
329 status=`expr $status + $ret`
333 ret=0
334 $CHECKCONF warn-dlv-auto.conf > checkconf.out$n 2>/dev/null || ret=1
335 grep "dnssec-lookaside 'auto' is no longer supported" checkconf.out$n > /dev/null || ret=1
336 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
337 status=`expr $status + $ret`
341 ret=0
342 $CHECKCONF warn-dlv-dlv.isc.org.conf > checkconf.out$n 2>/dev/null || ret=1
343 grep "dlv.isc.org has been shut down" checkconf.out$n > /dev/null || ret=1
344 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
345 status=`expr $status + $ret`
349 ret=0
350 $CHECKCONF good-dlv-dlv.example.com.conf > checkconf.out$n 2>/dev/null || ret=1
351 [ -s checkconf.out$n ] && ret=1
352 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
353 status=`expr $status + $ret`
357 ret=0
358 $CHECKCONF check-root-ksk-2010.conf > checkconf.out$n 2>/dev/null || ret=1
359 [ -s checkconf.out$n ] || ret=1
360 grep "trusted-key for root from 2010 without updated" checkconf.out$n > /dev/null || ret=1
361 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
362 status=`expr $status + $ret`
365 ret=0
366 $CHECKCONF check-root-ksk-both.conf > checkconf.out$n 2>/dev/null || ret=1
367 [ -s checkconf.out$n ] && ret=1
368 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
369 status=`expr $status + $ret`
372 ret=0
373 $CHECKCONF check-root-ksk-2017.conf > checkconf.out$n 2>/dev/null || ret=1
374 [ -s checkconf.out$n ] && ret=1
375 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
376 status=`expr $status + $ret`
379 ret=0
380 $CHECKCONF check-dlv-ksk-key.conf > checkconf.out$n 2>/dev/null || ret=1
381 [ -s checkconf.out$n ] || ret=1
382 grep "trusted-key for dlv.isc.org still present" checkconf.out$n > /dev/null || ret=1
383 if [ $ret != 0 ]; then echo "I:failed"; ret=1; fi
384 status=`expr $status + $ret`

Indexes created Tue Jul 24 14:28:13 CEST 2018