Commit c6d0ae7ffc for bind
commit c6d0ae7ffc93ac5c2cdda69efcda282e474df7ac
Author: Matthijs Mekking <matthijs@isc.org>
Date: Tue Sep 22 15:50:38 2026 +0200
Add checkconf test for too high nsec3 salt len
This test was still missing.
diff --git a/bin/tests/system/checkconf/bad-kasp-nsec3-saltlen.conf b/bin/tests/system/checkconf/bad-kasp-nsec3-saltlen.conf
new file mode 100644
index 0000000000..bc11e013fd
--- /dev/null
+++ b/bin/tests/system/checkconf/bad-kasp-nsec3-saltlen.conf
@@ -0,0 +1,12 @@
+dnssec-policy "badnsec3salt" {
+ keys {
+ csk lifetime unlimited algorithm 13;
+ };
+ nsec3param iterations 0 optout 0 salt-length 256;
+};
+
+zone "example.net" {
+ type primary;
+ file "example.db";
+ dnssec-policy "badnsec3salt";
+};