URL: https://github.com/freeipa/freeipa/pull/5780 Author: stanislavlevin Title: #5780: ipatests: dnssec: Add alternative approach for checking chain of trust Action: opened

PR body: """ drill is currently broken on F34. Fortunately, there are another tools for checking DNSSEC trust. One of them is `delv`:

delv is a tool for sending DNS queries and validating the results, using the same internal resolver and validator logic as named.

delv sends to a specified name server all queries needed to fetch and validate the requested data; this includes the original requested query, subsequent queries to follow CNAME or DNAME chains, queries for DNSKEY, and DS records to establish a chain of trust for DNSSEC validation. It does not perform iterative resolution, but simulates the behavior of a name server configured for DNSSEC validating and forwarding.

- mark as XFAIL `test_chain_of_trust_drill` on F34 - conditionally skip `test_chain_of_trust_delv` (requires delv > 9.15.4 for `+yaml`)

Related: https://pagure.io/freeipa/issue/8793 """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5780/head:pr5780 git checkout pr5780