1 files changed, 104 insertions, 0 deletions
diff --git a/bin/python/isc/tests/policy_test.py.in b/bin/python/isc/tests/policy_test.py.in
new file mode 100644
index 0000000..c115a31
--- /dev/null
+++ b/bin/python/isc/tests/policy_test.py.in
@@ -0,0 +1,104 @@
+# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+#
+# SPDX-License-Identifier: MPL-2.0
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0.  If a copy of the MPL was not distributed with this
+# file, you can obtain one at https://mozilla.org/MPL/2.0/.
+#
+# See the COPYRIGHT file distributed with this work for additional
+# information regarding copyright ownership.
+
+import sys
+import unittest
+
+sys.path.append("../..")
+from isc import *
+
+
+class PolicyTest(unittest.TestCase):
+    def test_keysize(self):
+        pol = policy.dnssec_policy()
+        pol.load("test-policies/01-keysize.pol")
+
+        p = pol.policy("good_rsa.test", novalidate=True)
+        self.assertEqual(p.get_name(), "good_rsa.test")
+        self.assertEqual(p.constructed(), False)
+        self.assertEqual(p.validate(), (True, ""))
+
+    def test_prepublish(self):
+        pol = policy.dnssec_policy()
+        pol.load("test-policies/02-prepublish.pol")
+        p = pol.policy("good_prepublish.test", novalidate=True)
+        self.assertEqual(p.validate(), (True, ""))
+
+        p = pol.policy("bad_prepublish.test", novalidate=True)
+        self.assertEqual(
+            p.validate(),
+            (
+                False,
+                "KSK pre/post-publish periods "
+                "(10368000/5184000) combined exceed "
+                "rollover period 10368000",
+            ),
+        )
+
+    def test_postpublish(self):
+        pol = policy.dnssec_policy()
+        pol.load("test-policies/03-postpublish.pol")
+
+        p = pol.policy("good_postpublish.test", novalidate=True)
+        self.assertEqual(p.validate(), (True, ""))
+
+        p = pol.policy("bad_postpublish.test", novalidate=True)
+        self.assertEqual(
+            p.validate(),
+            (
+                False,
+                "KSK pre/post-publish periods "
+                "(10368000/5184000) combined exceed "
+                "rollover period 10368000",
+            ),
+        )
+
+    def test_combined_pre_post(self):
+        pol = policy.dnssec_policy()
+        pol.load("test-policies/04-combined-pre-post.pol")
+
+        p = pol.policy("good_combined_pre_post_ksk.test", novalidate=True)
+        self.assertEqual(p.validate(), (True, ""))
+
+        p = pol.policy("bad_combined_pre_post_ksk.test", novalidate=True)
+        self.assertEqual(
+            p.validate(),
+            (
+                False,
+                "KSK pre/post-publish periods "
+                "(5184000/5184000) combined exceed "
+                "rollover period 10368000",
+            ),
+        )
+
+        p = pol.policy("good_combined_pre_post_zsk.test", novalidate=True)
+        self.assertEqual(p.validate(), (True, ""))
+        p = pol.policy("bad_combined_pre_post_zsk.test", novalidate=True)
+        self.assertEqual(
+            p.validate(),
+            (
+                False,
+                "ZSK pre/post-publish periods "
+                "(5184000/5184000) combined exceed "
+                "rollover period 7776000",
+            ),
+        )
+
+    def test_numeric_zone(self):
+        pol = policy.dnssec_policy()
+        pol.load("test-policies/05-numeric-zone.pol")
+
+        p = pol.policy("99example.test", novalidate=True)
+        self.assertEqual(p.validate(), (True, ""))
+
+
+if __name__ == "__main__":
+    unittest.main()