summaryrefslogtreecommitdiffstats
path: root/modules/ta_update/ta_update.unmanagedkey.test.integr/kresd_config.j2
blob: 7ba468fee9b38485d15ef4e8a0543fe6b5a76e4a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
-- SPDX-License-Identifier: GPL-3.0-or-later

{% for TAF in TRUST_ANCHOR_FILES %}
trust_anchors.add_file('{{TAF}}', true)
{% endfor %}

{% raw %}

local cb_counter = 0
function inc_cb()
	cb_counter = cb_counter + 1
end

function check_status(state, query)
	-- status was present for 10 days
	if cb_counter > 0 then
		return policy.DENY_MSG('check last answer')
	end
end
ta_update.refresh_time = 12 * hour
ta_update.cb_unmanagedkey_change = inc_cb
policy.add(check_status, true)

-- Disable RFC8145 signaling, scenario doesn't provide expected answers
if ta_signal_query then
        modules.unload('ta_signal_query')
end

-- Disable RFC8109 priming, scenario doesn't provide expected answers
if priming then
        modules.unload('priming')
end

-- Disable this module because it make one priming query
if detect_time_skew then
        modules.unload('detect_time_skew')
end

policy.add(policy.suffix(policy.PASS, {todname('test.')}))
cache.size = 2*MB
verbose(true)
{% endraw %}

modules.load('hints')
hints.root({['{{ROOT_NAME}}'] = '{{ROOT_ADDR}}'})

net = { '{{SELF_ADDR}}' }


{% if QMIN == "false" %}
option('NO_MINIMIZE', true)
{% else %}
option('NO_MINIMIZE', false)
{% endif %}


-- Self-checks on globals
assert(help() ~= nil)
assert(worker.id ~= nil)
-- Self-checks on facilities
assert(cache.count() == 0)
assert(cache.stats() ~= nil)
assert(cache.backends() ~= nil)
assert(worker.stats() ~= nil)
assert(net.interfaces() ~= nil)
-- Self-checks on loaded stuff
assert(net.list()[1].transport.ip == '{{SELF_ADDR}}')
assert(#modules.list() > 0)
-- Self-check timers
ev = event.recurrent(1 * sec, function (ev) return 1 end)
event.cancel(ev)
ev = event.after(0, function (ev) return 1 end)