]> git.saurik.com Git - apple/network_cmds.git/blame - unbound/testdata/val_dsnsec.rpl
projects / apple / network_cmds.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
network_cmds-596.100.2.tar.gz
[apple/network_cmds.git] / unbound / testdata / val_dsnsec.rpl
CommitLineData
89c4ed63
A		 1; config options
2; The island of trust is at example.com
3server:
4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
5 val-override-date: "20070916134226"
6 target-fetch-policy: "0 0 0 0 0"
7
8stub-zone:
9 name: "."
10 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
11CONFIG_END
12
13SCENARIO_BEGIN Test pickup of DS NSEC from the cache.
14; make sure unbound does not pick up the wrong nsec.
15
16; K.ROOT-SERVERS.NET.
17RANGE_BEGIN 0 100
18 ADDRESS 193.0.14.129
19ENTRY_BEGIN
20MATCH opcode qtype qname
21ADJUST copy_id
22REPLY QR NOERROR
23SECTION QUESTION
24. IN NS
25SECTION ANSWER
26. IN NS K.ROOT-SERVERS.NET.
27SECTION ADDITIONAL
28K.ROOT-SERVERS.NET. IN A 193.0.14.129
29ENTRY_END
30
31ENTRY_BEGIN
32MATCH opcode subdomain
33ADJUST copy_id copy_query
34REPLY QR NOERROR
35SECTION QUESTION
36com. IN A
37SECTION AUTHORITY
38com. IN NS a.gtld-servers.net.
39SECTION ADDITIONAL
40a.gtld-servers.net. IN A 192.5.6.30
41ENTRY_END
42RANGE_END
43
44; a.gtld-servers.net.
45RANGE_BEGIN 0 100
46 ADDRESS 192.5.6.30
47ENTRY_BEGIN
48MATCH opcode qtype qname
49ADJUST copy_id
50REPLY QR NOERROR
51SECTION QUESTION
52com. IN NS
53SECTION ANSWER
54com. IN NS a.gtld-servers.net.
55SECTION ADDITIONAL
56a.gtld-servers.net. IN A 192.5.6.30
57ENTRY_END
58
59ENTRY_BEGIN
60MATCH opcode subdomain
61ADJUST copy_id copy_query
62REPLY QR NOERROR
63SECTION QUESTION
64example.com. IN A
65SECTION AUTHORITY
66example.com. IN NS ns.example.com.
67SECTION ADDITIONAL
68ns.example.com. IN A 1.2.3.4
69ENTRY_END
70RANGE_END
71
72; ns.example.com.
73RANGE_BEGIN 0 100
74 ADDRESS 1.2.3.4
75ENTRY_BEGIN
76MATCH opcode qtype qname
77ADJUST copy_id
78REPLY QR NOERROR
79SECTION QUESTION
80example.com. IN NS
81SECTION ANSWER
82example.com. IN NS ns.example.com.
83example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
84SECTION ADDITIONAL
85ns.example.com. IN A 1.2.3.4
86ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
87ENTRY_END
88
89; barely valid nodata for AAAA
90ENTRY_BEGIN
91MATCH opcode qtype qname
92ADJUST copy_id
93REPLY QR NOERROR
94SECTION QUESTION
95ns.example.com. IN AAAA
96SECTION ANSWER
97SECTION AUTHORITY
98example.com. IN NS ns.example.com.
99example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
100ENTRY_END
101
102ENTRY_BEGIN
103MATCH opcode qtype qname
104ADJUST copy_id
105REPLY QR NOERROR
106SECTION QUESTION
107ns.example.com. IN A
108SECTION ANSWER
109ns.example.com. IN A 1.2.3.4
110ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
111SECTION AUTHORITY
112example.com. IN NS ns.example.com.
113example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
114ENTRY_END
115
116; response to DNSKEY priming query
117ENTRY_BEGIN
118MATCH opcode qtype qname
119ADJUST copy_id
120REPLY QR NOERROR
121SECTION QUESTION
122example.com. IN DNSKEY
123SECTION ANSWER
124example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
125example.com. 3600 IN RRSIG DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854}
126SECTION AUTHORITY
127example.com. IN NS ns.example.com.
128example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
129SECTION ADDITIONAL
130ns.example.com. IN A 1.2.3.4
131ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
132ENTRY_END
133
134; response for tub.example.com
135ENTRY_BEGIN
136MATCH opcode subdomain
137ADJUST copy_id copy_query
138REPLY QR NXDOMAIN
139SECTION QUESTION
140tub.example.com. IN DNSKEY
141SECTION ANSWER
142SECTION AUTHORITY
143; SOA record
144example.com IN SOA ns.iana.org. NSTLD.iana.org. 2009061200 1800 900 604800 86400
145example.com. 3600 IN RRSIG SOA 3 2 3600 20070926134150 20070829134150 2854 example.com. AAvpEruGS0UJzMoO6ou/+y8ZyHjjrFC6HKDWU8a61Ru9qtl4R66fC1c= ;{id = 2854}
146; qname denial
147sub.example.com. IN NSEC wub.example.com. NS DS RRSIG NSEC
148sub.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. AA4+SSCI8kQZ2/iGj+9rxpNZyaIJNNRZ4eM0fEw2D5fVR/+WLUZ9GdE= ;{id = 2854}
149; wildcard denial
150example.com. IN NSEC blub.example.com. NS SOA RRSIG NSEC DNSKEY
151example.com. 3600 IN RRSIG NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. AARheDFiRjrnKHzsPloUJ0FC+8aAM6H49Lnm2AJrgxE9RlBlH2E4sRo= ;{id = 2854}
152SECTION ADDITIONAL
153ENTRY_END
154
155; DS query for sub.example.com
156ENTRY_BEGIN
157MATCH opcode qtype qname
158ADJUST copy_id
159REPLY QR NOERROR
160SECTION QUESTION
161sub.example.com. IN DS
162SECTION ANSWER
163sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
164sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. MCwCFCW3ix0GD4BSvNLWIbROCJt5DAW9AhRt/kg9kBKJ20UBUdumrBUHqnskdA== ;{id = 2854}
165SECTION AUTHORITY
166SECTION ADDITIONAL
167ENTRY_END
168
169; response for delegation to sub.example.com.
170ENTRY_BEGIN
171MATCH opcode subdomain
172ADJUST copy_id copy_query
173REPLY QR NOERROR
174SECTION QUESTION
175sub.example.com. IN DNSKEY
176SECTION ANSWER
177SECTION AUTHORITY
178sub.example.com. IN NS ns.sub.example.com.
179;sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
180;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. MCwCFCW3ix0GD4BSvNLWIbROCJt5DAW9AhRt/kg9kBKJ20UBUdumrBUHqnskdA== ;{id = 2854}
181SECTION ADDITIONAL
182ns.sub.example.com. IN A 1.2.3.6
183ENTRY_END
184RANGE_END
185
186; ns.sub.example.com.
187RANGE_BEGIN 0 100
188 ADDRESS 1.2.3.6
189ENTRY_BEGIN
190MATCH opcode qtype qname
191ADJUST copy_id
192REPLY QR NOERROR
193SECTION QUESTION
194sub.example.com. IN NS
195SECTION ANSWER
196sub.example.com. IN NS ns.sub.example.com.
197sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. wcpHeBILHfo8C9uxMhcW03gcURZeUffiKdSTb50ZjzTHgMNhRyMfpcvSpXEd9548A9UTmWKeLZChfr5Z/glONw== ;{id = 30899}
198SECTION ADDITIONAL
199ns.sub.example.com. IN A 1.2.3.6
200ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. UF7shD/gt1FOp2UHgLTNbPzVykklSXFMEtJ1xD+Hholwf/PIzd7zoaIttIYibNa4fUXCqMg22H9P7MRhfmFe6g== ;{id = 30899}
201ENTRY_END
202
203; response to DNSKEY priming query
204; sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
205ENTRY_BEGIN
206MATCH opcode qtype qname
207ADJUST copy_id
208REPLY QR NOERROR
209SECTION QUESTION
210sub.example.com. IN DNSKEY
211SECTION ANSWER
212sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
213sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899}
214SECTION AUTHORITY
215sub.example.com. IN NS ns.sub.example.com.
216sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. wcpHeBILHfo8C9uxMhcW03gcURZeUffiKdSTb50ZjzTHgMNhRyMfpcvSpXEd9548A9UTmWKeLZChfr5Z/glONw== ;{id = 30899}
217SECTION ADDITIONAL
218ns.sub.example.com. IN A 1.2.3.6
219ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. UF7shD/gt1FOp2UHgLTNbPzVykklSXFMEtJ1xD+Hholwf/PIzd7zoaIttIYibNa4fUXCqMg22H9P7MRhfmFe6g== ;{id = 30899}
220ENTRY_END
221
222; response to query of interest
223ENTRY_BEGIN
224MATCH opcode qtype qname
225ADJUST copy_id
226REPLY QR NOERROR
227SECTION QUESTION
228www.sub.example.com. IN A
229SECTION ANSWER
230www.sub.example.com. IN A 11.11.11.11
231www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. 0DqqRfRtm7VSEQ4mmBbzrKRqQAay3JAE8DPDGmjtokrrjN9F1G/HxozDV7bjdIh2EChlQea8FPwf/GepJMUVxg== ;{id = 30899}
232SECTION AUTHORITY
233SECTION ADDITIONAL
234ENTRY_END
235RANGE_END
236
237; query for a domain next to it, so the wrong NSEC gets in the cache.
238STEP 1 QUERY
239ENTRY_BEGIN
240REPLY RD DO
241SECTION QUESTION
242www.tub.example.com. IN A
243ENTRY_END
244
245; recursion happens here.
246STEP 10 CHECK_ANSWER
247ENTRY_BEGIN
248MATCH all
249REPLY QR RD RA AD DO NXDOMAIN
250SECTION QUESTION
251www.tub.example.com. IN A
252SECTION ANSWER
253SECTION AUTHORITY
254example.com. 3600 IN SOA ns.iana.org. NSTLD.iana.org. 2009061200 1800 900 604800 86400
255example.com. 3600 IN RRSIG SOA 3 2 3600 20070926134150 20070829134150 2854 example.com. AAvpEruGS0UJzMoO6ou/+y8ZyHjjrFC6HKDWU8a61Ru9qtl4R66fC1c= ;{id = 2854}
256sub.example.com. 3600 IN NSEC wub.example.com. NS DS RRSIG NSEC
257sub.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. AA4+SSCI8kQZ2/iGj+9rxpNZyaIJNNRZ4eM0fEw2D5fVR/+WLUZ9GdE= ;{id = 2854}
258example.com. 3600 IN NSEC blub.example.com. NS SOA RRSIG NSEC DNSKEY
259example.com. 3600 IN RRSIG NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. AARheDFiRjrnKHzsPloUJ0FC+8aAM6H49Lnm2AJrgxE9RlBlH2E4sRo= ;{id = 2854}
260SECTION ADDITIONAL
261ENTRY_END
262
263; query of interest.
264STEP 30 QUERY
265ENTRY_BEGIN
266REPLY RD DO
267SECTION QUESTION
268www.sub.example.com. IN A
269ENTRY_END
270
271STEP 40 CHECK_ANSWER
272ENTRY_BEGIN
273MATCH all
274REPLY QR RD RA AD DO NOERROR
275SECTION QUESTION
276www.sub.example.com. IN A
277SECTION ANSWER
278www.sub.example.com. 3600 IN A 11.11.11.11
279www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. 0DqqRfRtm7VSEQ4mmBbzrKRqQAay3JAE8DPDGmjtokrrjN9F1G/HxozDV7bjdIh2EChlQea8FPwf/GepJMUVxg== ;{id = 30899}
280SECTION AUTHORITY
281SECTION ADDITIONAL
282ENTRY_END
283
284
285SCENARIO_END
mirror of network_cmds