Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Newer
Older
100644 154 lines (133 sloc) 4.407 kB
17eb5d7 wildcard nsec3 tests.
wouter authored
1 ; config options
2 server:
d4c4377 test fix for NSEC3 new algorithms.
wouter authored
3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )"
17eb5d7 wildcard nsec3 tests.
wouter authored
4 val-override-date: "20120420235959"
57670d2 Fixup for problems with do-ip6: no and only ipv6 addresses.
wouter authored
5 target-fetch-policy: "0 0 0 0 0"
17eb5d7 wildcard nsec3 tests.
wouter authored
6
7 stub-zone:
8 name: "."
9 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
10 CONFIG_END
11
12 SCENARIO_BEGIN Test validator NSEC3 B.5 wildcard nodata, without nc.
13
14 ; K.ROOT-SERVERS.NET.
15 RANGE_BEGIN 0 100
16 ADDRESS 193.0.14.129
17 ENTRY_BEGIN
18 MATCH opcode qtype qname
19 ADJUST copy_id
20 REPLY QR NOERROR
21 SECTION QUESTION
22 . IN NS
23 SECTION ANSWER
24 . IN NS K.ROOT-SERVERS.NET.
25 SECTION ADDITIONAL
26 K.ROOT-SERVERS.NET. IN A 193.0.14.129
27 ENTRY_END
28
29 ENTRY_BEGIN
f6990f3 Data retry on validation failure.
wouter authored
30 MATCH opcode subdomain
17eb5d7 wildcard nsec3 tests.
wouter authored
31 ADJUST copy_id copy_query
32 REPLY QR NOERROR
33 SECTION QUESTION
f6990f3 Data retry on validation failure.
wouter authored
34 example. IN A
17eb5d7 wildcard nsec3 tests.
wouter authored
35 SECTION AUTHORITY
36 example. IN NS ns1.example.
37 ; leave out to make unbound take ns1
38 ;example. IN NS ns2.example.
39 SECTION ADDITIONAL
40 ns1.example. IN A 192.0.2.1
41 ; leave out to make unbound take ns1
42 ;ns2.example. IN A 192.0.2.2
43 ENTRY_END
44 RANGE_END
45
46 ; ns1.example.
47 RANGE_BEGIN 0 100
48 ADDRESS 192.0.2.1
6bd4afb - Fixup rrset security updates overwriting 2181 trust status.
wouter authored
49 ENTRY_BEGIN
50 MATCH opcode qtype qname
51 ADJUST copy_id copy_query
52 REPLY QR REFUSED
53 SECTION QUESTION
f6990f3 Data retry on validation failure.
wouter authored
54 ns1.example. IN AAAA
55 SECTION ANSWER
56 ENTRY_END
57
58 ENTRY_BEGIN
59 MATCH opcode qtype qname
60 ADJUST copy_id copy_query
61 REPLY QR REFUSED
62 SECTION QUESTION
6bd4afb - Fixup rrset security updates overwriting 2181 trust status.
wouter authored
63 example. IN NS
64 SECTION ANSWER
65 ENTRY_END
17eb5d7 wildcard nsec3 tests.
wouter authored
66
67 ; response to DNSKEY priming query
68
69 ENTRY_BEGIN
70 MATCH opcode qtype qname
71 ADJUST copy_id
72 REPLY QR NOERROR
73 SECTION QUESTION
74 example. IN DNSKEY
75 SECTION ANSWER
d4c4377 test fix for NSEC3 new algorithms.
wouter authored
76 example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= )
77 example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )
78 example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== )
17eb5d7 wildcard nsec3 tests.
wouter authored
79 ENTRY_END
80
81 ENTRY_BEGIN
82 MATCH opcode qtype qname
83 ADJUST copy_id
84 REPLY QR AA DO NOERROR
85 SECTION QUESTION
86 a.z.w.example. IN AAAA
87 SECTION ANSWER
88 SECTION AUTHORITY
89 example. SOA ns1.example. bugs.x.w.example. 1 3600 300 ( 3600000 3600 )
d4c4377 test fix for NSEC3 new algorithms.
wouter authored
90 example. RRSIG SOA 7 1 3600 20150420235959 20051021000000 ( 40430 example. Hu25UIyNPmvPIVBrldN+9Mlp9Zql39qaUd8i q4ZLlYWfUUbbAS41pG+68z81q1xhkYAcEyHd VI2LmKusbZsT0Q== )
17eb5d7 wildcard nsec3 tests.
wouter authored
91
92 ;; NSEC3 RR that matches the closest encloser (w.example)
93 ;; H(w.example) = k8udemvp1j2f7eg6jebps17vp3n8i58h
94 k8udemvp1j2f7eg6jebps17vp3n8i58h.example. NSEC3 1 1 12 aabbccdd ( kohar7mbb8dc2ce8a9qvl8hon4k53uhi )
d4c4377 test fix for NSEC3 new algorithms.
wouter authored
95 k8udemvp1j2f7eg6jebps17vp3n8i58h.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. FtXGbvF0+wf8iWkyo73enAuVx03klN+pILBK S6qCcftVtfH4yVzsEZquJ27NHR7ruxJWDNMt Otx7w9WfcIg62A== )
17eb5d7 wildcard nsec3 tests.
wouter authored
96
97 ;; NSEC3 RR that covers the "next closer" name (z.w.example)
98 ;; H(z.w.example) = qlu7gtfaeh0ek0c05ksfhdpbcgglbe03
99 ;q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd ( r53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG )
d4c4377 test fix for NSEC3 new algorithms.
wouter authored
100 ;q04jkcevqvmu85r014c7dkba38o0ji5r.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. hV5I89b+4FHJDATp09g4bbN0R1F845CaXpL3 ZxlMKimoPAyqletMlEWwLfFia7sdpSzn+ZlN NlkxWcLsIlMmUg== )
17eb5d7 wildcard nsec3 tests.
wouter authored
101
102 ;; NSEC3 RR that matches a wildcard at the closest encloser.
103 ;; H(*.w.example) = r53bq7cc2uvmubfu5ocmm6pers9tk9en
104 r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. NSEC3 1 1 12 aabbccdd ( t644ebqk9bibcna874givr6joj62mlhv MX RRSIG )
d4c4377 test fix for NSEC3 new algorithms.
wouter authored
105 r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. aupviViruXs4bDg9rCbezzBMf9h1ZlDvbW/C ZFKulIGXXLj8B/fsDJarXVDA9bnUoRhEbKp+ HF1FWKW7RIJdtQ== )
17eb5d7 wildcard nsec3 tests.
wouter authored
106
107 SECTION ADDITIONAL
108 ENTRY_END
109
110 ; catch glue queries
111 ENTRY_BEGIN
112 MATCH opcode qtype qname
113 ADJUST copy_id
114 REPLY QR AA DO NOERROR
115 SECTION QUESTION
116 ns2.example. IN A
117 SECTION ANSWER
118 ; nothing to make sure the ns1 server is used for queries.
119 ENTRY_END
120
121 ENTRY_BEGIN
122 MATCH opcode qtype qname
123 ADJUST copy_id
124 REPLY QR AA DO NOERROR
125 SECTION QUESTION
126 ns2.example. IN AAAA
127 SECTION ANSWER
128 ; nothing to make sure the ns1 server is used for queries.
129 ENTRY_END
130
131
132 RANGE_END
133
134 STEP 1 QUERY
135 ENTRY_BEGIN
136 REPLY RD
137 SECTION QUESTION
138 a.z.w.example. IN AAAA
139 ENTRY_END
140
141 ; recursion happens here.
142 STEP 10 CHECK_ANSWER
143 ENTRY_BEGIN
144 MATCH all
145 REPLY QR RD RA SERVFAIL
146 SECTION QUESTION
147 a.z.w.example. IN AAAA
148 SECTION ANSWER
149 SECTION AUTHORITY
150 SECTION ADDITIONAL
151 ENTRY_END
152
153 SCENARIO_END
Something went wrong with that request. Please try again.