]> git.saurik.com Git - apple/network_cmds.git/blame - unbound/testdata/val_entds.rpl
network_cmds-596.100.2.tar.gz
[apple/network_cmds.git] / unbound / testdata / val_entds.rpl
CommitLineData
89c4ed63
A
1; config options
2; The island of trust is at example.com
3server:
4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
5 val-override-date: "20070916134226"
6 target-fetch-policy: "0 0 0 0 0"
7
8stub-zone:
9 name: "."
10 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
11CONFIG_END
12
13SCENARIO_BEGIN Test validator with lots of ENTs in the chain of trust
14; query is for a.1.2.b.3.4.c.5.6.example.com.
15; labels 1-6 are empty nonterminals.
16; there are DNSKEYs at labels b, c, example.com.
17; and DSes at b and c.
18
19; K.ROOT-SERVERS.NET.
20RANGE_BEGIN 0 100
21 ADDRESS 193.0.14.129
22ENTRY_BEGIN
23MATCH opcode qtype qname
24ADJUST copy_id
25REPLY QR NOERROR
26SECTION QUESTION
27. IN NS
28SECTION ANSWER
29. IN NS K.ROOT-SERVERS.NET.
30SECTION ADDITIONAL
31K.ROOT-SERVERS.NET. IN A 193.0.14.129
32ENTRY_END
33
34ENTRY_BEGIN
35MATCH opcode qtype
36ADJUST copy_id copy_query
37REPLY QR NOERROR
38SECTION QUESTION
39www.sub.example.com. IN A
40SECTION AUTHORITY
41com. IN NS a.gtld-servers.net.
42SECTION ADDITIONAL
43a.gtld-servers.net. IN A 192.5.6.30
44ENTRY_END
45RANGE_END
46
47; a.gtld-servers.net.
48RANGE_BEGIN 0 100
49 ADDRESS 192.5.6.30
50ENTRY_BEGIN
51MATCH opcode qtype qname
52ADJUST copy_id
53REPLY QR NOERROR
54SECTION QUESTION
55com. IN NS
56SECTION ANSWER
57com. IN NS a.gtld-servers.net.
58SECTION ADDITIONAL
59a.gtld-servers.net. IN A 192.5.6.30
60ENTRY_END
61
62ENTRY_BEGIN
63MATCH opcode qtype
64ADJUST copy_id copy_query
65REPLY QR NOERROR
66SECTION QUESTION
67www.sub.example.com. IN A
68SECTION AUTHORITY
69example.com. IN NS ns.example.com.
70SECTION ADDITIONAL
71ns.example.com. IN A 1.2.3.4
72ENTRY_END
73RANGE_END
74
75; ns.example.com.
76RANGE_BEGIN 0 100
77 ADDRESS 1.2.3.4
78ENTRY_BEGIN
79MATCH opcode qtype qname
80ADJUST copy_id
81REPLY QR NOERROR
82SECTION QUESTION
83example.com. IN NS
84SECTION ANSWER
85example.com. IN NS ns.example.com.
86example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
87SECTION ADDITIONAL
88ns.example.com. IN A 1.2.3.4
89ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
90ENTRY_END
91
92; response to DNSKEY priming query
93ENTRY_BEGIN
94MATCH opcode qtype qname
95ADJUST copy_id
96REPLY AA QR NOERROR
97SECTION QUESTION
98example.com. IN DNSKEY
99SECTION ANSWER
100example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
101example.com. 3600 IN RRSIG DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854}
102SECTION AUTHORITY
103example.com. IN NS ns.example.com.
104example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
105SECTION ADDITIONAL
106ns.example.com. IN A 1.2.3.4
107ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
108ENTRY_END
109
110; response for ENT DS queries.
111ENTRY_BEGIN
112MATCH opcode qtype qname
113ADJUST copy_id
114REPLY AA QR NOERROR
115SECTION QUESTION
1166.example.com. IN DS
117SECTION AUTHORITY
118example.com. NSEC c.5.6.example.com. SOA DNSKEY NS RRSIG NSEC
119example.com. 3600 IN RRSIG NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCoocKDsR+Hius4e+5zJPlXeeWNowIUO+pa14FBcWH/dCNK5R0vRrlWY5s= ;{id = 2854}
120ENTRY_END
121
122ENTRY_BEGIN
123MATCH opcode qtype qname
124ADJUST copy_id
125REPLY AA QR NOERROR
126SECTION QUESTION
1275.6.example.com. IN DS
128SECTION AUTHORITY
129example.com. NSEC c.5.6.example.com. SOA DNSKEY NS RRSIG NSEC
130example.com. 3600 IN RRSIG NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCoocKDsR+Hius4e+5zJPlXeeWNowIUO+pa14FBcWH/dCNK5R0vRrlWY5s= ;{id = 2854}
131ENTRY_END
132
133; response for query in question - delegation
134; and all other queries, receive a delegation to c.5.6.example.com.
135ENTRY_BEGIN
136MATCH opcode
137ADJUST copy_id copy_query
138REPLY QR NOERROR
139SECTION QUESTION
140a.1.2.b.3.4.c.5.6.example.com. IN A
141SECTION ANSWER
142SECTION AUTHORITY
143c.5.6.example.com. IN NS ns.c.5.6.example.com.
144c.5.6.example.com. 3600 IN DS 2854 3 1 4449f16fa7d712283aa43cc8dcc8e07c05856e08
145c.5.6.example.com. 3600 IN RRSIG DS 3 5 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCgiF7eFL89mSqjUPEpQuL5QEa1OgIUWdfUmMkwVBwOgmxlxZIKfGs5od0= ;{id = 2854}
146SECTION ADDITIONAL
147ns.c.5.6.example.com. IN A 1.2.3.6
148ENTRY_END
149RANGE_END
150
151; ns.c.5.6.example.com.
152RANGE_BEGIN 0 100
153 ADDRESS 1.2.3.6
154ENTRY_BEGIN
155MATCH opcode qtype qname
156ADJUST copy_id
157REPLY AA QR NOERROR
158SECTION QUESTION
159c.5.6.example.com. IN NS
160SECTION ANSWER
161ENTRY_END
162
163; response to DNSKEY priming query
164ENTRY_BEGIN
165MATCH opcode qtype qname
166ADJUST copy_id
167REPLY AA QR NOERROR
168SECTION QUESTION
169c.5.6.example.com. IN DNSKEY
170SECTION ANSWER
171c.5.6.example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
172c.5.6.example.com. 3600 IN RRSIG DNSKEY 3 5 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MC0CFHsYd4tGO5BotXFzG9d8fzHkX576AhUAoZ2d1FNUBsrwxl6XSz/hoxme/4Q= ;{id = 2854}
173ENTRY_END
174
175; response to DS queries.
176ENTRY_BEGIN
177MATCH opcode qtype qname
178ADJUST copy_id
179REPLY AA QR NOERROR
180SECTION QUESTION
1814.c.5.6.example.com. IN DS
182SECTION AUTHORITY
1833.c.5.6.example.com. IN NSEC b.3.4.c.5.6.example.com. NS DS RRSIG NSEC
1843.c.5.6.example.com. 3600 IN RRSIG NSEC 3 6 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MCwCFFFF5WwGibkPunDt0BW2W9lncACcAhQuFh7FbfCE1ulJqBFf1YxjvT/WHQ== ;{id = 2854}
185
186ENTRY_END
187
188ENTRY_BEGIN
189MATCH opcode qtype qname
190ADJUST copy_id
191REPLY AA QR NOERROR
192SECTION QUESTION
1933.4.c.5.6.example.com. IN DS
194SECTION AUTHORITY
1953.c.5.6.example.com. IN NSEC b.3.4.c.5.6.example.com. NS DS RRSIG NSEC
1963.c.5.6.example.com. 3600 IN RRSIG NSEC 3 6 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MCwCFFFF5WwGibkPunDt0BW2W9lncACcAhQuFh7FbfCE1ulJqBFf1YxjvT/WHQ== ;{id = 2854}
197ENTRY_END
198
199; any other query gets a referral
200ENTRY_BEGIN
201MATCH opcode
202ADJUST copy_id copy_query
203REPLY AA QR NOERROR
204SECTION QUESTION
2054.c.5.6.example.com. IN DS
206SECTION AUTHORITY
207b.3.4.c.5.6.example.com. IN NS ns.b.3.4.c.5.6.example.com.
208b.3.4.c.5.6.example.com. 3600 IN DS 30899 5 1 849ebbdefa338db3e6c3ddffd58851523ba701de
209b.3.4.c.5.6.example.com. 3600 IN RRSIG DS 3 8 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MC0CFEuXbvClpAOx7E1SXeH0d+Q4jpySAhUAtbEbQ8qtRF5chUOWNtg31ESAjWg= ;{id = 2854}
210SECTION ADDITIONAL
211ns.b.3.4.c.5.6.example.com. IN A 1.2.3.7
212ENTRY_END
213RANGE_END
214
215; ns.b.3.4.c.5.6.example.com.
216RANGE_BEGIN 0 100
217 ADDRESS 1.2.3.7
218ENTRY_BEGIN
219MATCH opcode qtype qname
220ADJUST copy_id
221REPLY QR AA NOERROR
222SECTION QUESTION
223b.3.4.c.5.6.example.com. IN NS
224SECTION ANSWER
225ENTRY_END
226
227; response to DNSKEY priming query
228ENTRY_BEGIN
229MATCH opcode qtype qname
230ADJUST copy_id
231REPLY QR AA NOERROR
232SECTION QUESTION
233b.3.4.c.5.6.example.com. IN DNSKEY
234SECTION ANSWER
235b.3.4.c.5.6.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
236b.3.4.c.5.6.example.com. 3600 IN RRSIG DNSKEY 5 8 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. KNftlGVkrfvo3l3Wliq+i695MqJI9B8QnTVhCHKhFPZfEq0HCxV8gO3ZlaTUle1YEnr7+yXUritXlzjFOlf1hw== ;{id = 30899}
237ENTRY_END
238
239; response to query of interest
240ENTRY_BEGIN
241MATCH opcode qtype qname
242ADJUST copy_id
243REPLY QR AA NOERROR
244SECTION QUESTION
245a.1.2.b.3.4.c.5.6.example.com. IN A
246SECTION ANSWER
247a.1.2.b.3.4.c.5.6.example.com. IN A 11.11.11.11
248a.1.2.b.3.4.c.5.6.example.com. 3600 IN RRSIG A 5 11 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. GUZcUHhxAvc6FYwAzVJcTqsjz5L36bGA45dyeSupEGEhhUJj0wm/FaYCAlO8J+H2zcFEqbgK0KzHdrFmNHkgUQ== ;{id = 30899}
249SECTION AUTHORITY
250SECTION ADDITIONAL
251ENTRY_END
252RANGE_END
253
254STEP 1 QUERY
255ENTRY_BEGIN
256REPLY RD DO
257SECTION QUESTION
258a.1.2.b.3.4.c.5.6.example.com. IN A
259ENTRY_END
260
261; recursion happens here.
262STEP 10 CHECK_ANSWER
263ENTRY_BEGIN
264MATCH all
265REPLY QR RD RA AD DO NOERROR
266SECTION QUESTION
267a.1.2.b.3.4.c.5.6.example.com. IN A
268SECTION ANSWER
269a.1.2.b.3.4.c.5.6.example.com. 3600 IN A 11.11.11.11
270a.1.2.b.3.4.c.5.6.example.com. 3600 IN RRSIG A 5 11 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. GUZcUHhxAvc6FYwAzVJcTqsjz5L36bGA45dyeSupEGEhhUJj0wm/FaYCAlO8J+H2zcFEqbgK0KzHdrFmNHkgUQ== ;{id = 30899}
271SECTION AUTHORITY
272SECTION ADDITIONAL
273ENTRY_END
274
275SCENARIO_END