3ada2d9 ipatests: dnssec: Add alternative approach for checking chain of trust

1 file Authored by slev 2 years ago, Committed by abbra 2 years ago,
    ipatests: dnssec: Add alternative approach for checking chain of trust
    
    drill is currently broken on F34. Fortunately, there are another
    tools for checking DNSSEC trust. One of them is `delv`:
    
    > delv is a tool for sending DNS queries and validating the results,
    using the same internal resolver and validator logic as named.
    
    delv sends to a specified name server all queries needed to fetch and
    validate the requested data; this includes the original requested query,
    subsequent queries to follow CNAME or DNAME chains, queries for DNSKEY,
    and DS records to establish a chain of trust for DNSSEC validation. It
    does not perform iterative resolution, but simulates the behavior of a
    name server configured for DNSSEC validating and forwarding.
    
    Related: https://pagure.io/freeipa/issue/8793
    Signed-off-by: Stanislav Levin <slev@altlinux.org>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>