unsign_zone routine fixed

Author: tomas-mazak

dnssec.py

@@ -792,14 +792,18 @@ def unsign_zone(zone):
     """
     Remove all DNSSEC records from the given zone 
     """
+    rdatasets = []
+    for item in zone.iterate_rdatasets():
+        rdatasets.append(item)
+
     # Remove signatures
-    for rrname, rdataset in zone.iterate_rdatasets():
+    for rrname, rdataset in rdatasets:
         if rdataset.rdtype != dns.rdatatype.RRSIG:
             zone.delete_rdataset(rrname, rdtype=dns.rdatatype.RRSIG, 
                                  covers=rdataset.rdtype)
 
     # Remove NSEC/NSEC3
-    for rrname, rdataset in zone.iterate_rdatasets():
+    for rrname, rdataset in rdatasets:
         if rdataset.rdtype in (dns.rdatatype.NSEC, dns.rdatatype.NSEC3):
             zone.delete_rdataset(rrname, rdtype=rdataset.rdtype)
 

tests.py

@@ -673,5 +673,13 @@ def testRSASHA512(self):
         self._diff(zone, signedzone)
         self.assertEqual(zone, signedzone)
 
+    def test_unsign_zone(self):
+        zone = dns.zone.from_text(zone_orig_txt, relativize=False)
+        signedzone = dns.zone.from_text(zone_rsasha512_txt,                     
+                                        relativize=False)
+        unsignedzone = dnssec.unsign_zone(signedzone)
+        self.assertEqual(zone, unsignedzone)
+
+
 if __name__ == '__main__':
     unittest.main()