]>
Commit | Line | Data |
---|---|---|
1 | ; config options | |
2 | ; The island of trust is at example.com | |
3 | server: | |
4 | trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" | |
5 | val-override-date: "20070916134226" | |
6 | target-fetch-policy: "0 0 0 0 0" | |
7 | ||
8 | stub-zone: | |
9 | name: "." | |
10 | stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. | |
11 | CONFIG_END | |
12 | ||
13 | SCENARIO_BEGIN Test validator with lots of ENTs in the chain of trust | |
14 | ; query is for a.1.2.b.3.4.c.5.6.example.com. | |
15 | ; labels 1-6 are empty nonterminals. | |
16 | ; there are DNSKEYs at labels b, c, example.com. | |
17 | ; and DSes at b and c. | |
18 | ||
19 | ; K.ROOT-SERVERS.NET. | |
20 | RANGE_BEGIN 0 100 | |
21 | ADDRESS 193.0.14.129 | |
22 | ENTRY_BEGIN | |
23 | MATCH opcode qtype qname | |
24 | ADJUST copy_id | |
25 | REPLY QR NOERROR | |
26 | SECTION QUESTION | |
27 | . IN NS | |
28 | SECTION ANSWER | |
29 | . IN NS K.ROOT-SERVERS.NET. | |
30 | SECTION ADDITIONAL | |
31 | K.ROOT-SERVERS.NET. IN A 193.0.14.129 | |
32 | ENTRY_END | |
33 | ||
34 | ENTRY_BEGIN | |
35 | MATCH opcode qtype | |
36 | ADJUST copy_id copy_query | |
37 | REPLY QR NOERROR | |
38 | SECTION QUESTION | |
39 | www.sub.example.com. IN A | |
40 | SECTION AUTHORITY | |
41 | com. IN NS a.gtld-servers.net. | |
42 | SECTION ADDITIONAL | |
43 | a.gtld-servers.net. IN A 192.5.6.30 | |
44 | ENTRY_END | |
45 | RANGE_END | |
46 | ||
47 | ; a.gtld-servers.net. | |
48 | RANGE_BEGIN 0 100 | |
49 | ADDRESS 192.5.6.30 | |
50 | ENTRY_BEGIN | |
51 | MATCH opcode qtype qname | |
52 | ADJUST copy_id | |
53 | REPLY QR NOERROR | |
54 | SECTION QUESTION | |
55 | com. IN NS | |
56 | SECTION ANSWER | |
57 | com. IN NS a.gtld-servers.net. | |
58 | SECTION ADDITIONAL | |
59 | a.gtld-servers.net. IN A 192.5.6.30 | |
60 | ENTRY_END | |
61 | ||
62 | ENTRY_BEGIN | |
63 | MATCH opcode qtype | |
64 | ADJUST copy_id copy_query | |
65 | REPLY QR NOERROR | |
66 | SECTION QUESTION | |
67 | www.sub.example.com. IN A | |
68 | SECTION AUTHORITY | |
69 | example.com. IN NS ns.example.com. | |
70 | SECTION ADDITIONAL | |
71 | ns.example.com. IN A 1.2.3.4 | |
72 | ENTRY_END | |
73 | RANGE_END | |
74 | ||
75 | ; ns.example.com. | |
76 | RANGE_BEGIN 0 100 | |
77 | ADDRESS 1.2.3.4 | |
78 | ENTRY_BEGIN | |
79 | MATCH opcode qtype qname | |
80 | ADJUST copy_id | |
81 | REPLY QR NOERROR | |
82 | SECTION QUESTION | |
83 | example.com. IN NS | |
84 | SECTION ANSWER | |
85 | example.com. IN NS ns.example.com. | |
86 | example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} | |
87 | SECTION ADDITIONAL | |
88 | ns.example.com. IN A 1.2.3.4 | |
89 | ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} | |
90 | ENTRY_END | |
91 | ||
92 | ; response to DNSKEY priming query | |
93 | ENTRY_BEGIN | |
94 | MATCH opcode qtype qname | |
95 | ADJUST copy_id | |
96 | REPLY AA QR NOERROR | |
97 | SECTION QUESTION | |
98 | example.com. IN DNSKEY | |
99 | SECTION ANSWER | |
100 | example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} | |
101 | example.com. 3600 IN RRSIG DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854} | |
102 | SECTION AUTHORITY | |
103 | example.com. IN NS ns.example.com. | |
104 | example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854} | |
105 | SECTION ADDITIONAL | |
106 | ns.example.com. IN A 1.2.3.4 | |
107 | ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} | |
108 | ENTRY_END | |
109 | ||
110 | ; response for ENT DS queries. | |
111 | ENTRY_BEGIN | |
112 | MATCH opcode qtype qname | |
113 | ADJUST copy_id | |
114 | REPLY AA QR NOERROR | |
115 | SECTION QUESTION | |
116 | 6.example.com. IN DS | |
117 | SECTION AUTHORITY | |
118 | example.com. NSEC c.5.6.example.com. SOA DNSKEY NS RRSIG NSEC | |
119 | example.com. 3600 IN RRSIG NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCoocKDsR+Hius4e+5zJPlXeeWNowIUO+pa14FBcWH/dCNK5R0vRrlWY5s= ;{id = 2854} | |
120 | ENTRY_END | |
121 | ||
122 | ENTRY_BEGIN | |
123 | MATCH opcode qtype qname | |
124 | ADJUST copy_id | |
125 | REPLY AA QR NOERROR | |
126 | SECTION QUESTION | |
127 | 5.6.example.com. IN DS | |
128 | SECTION AUTHORITY | |
129 | example.com. NSEC c.5.6.example.com. SOA DNSKEY NS RRSIG NSEC | |
130 | example.com. 3600 IN RRSIG NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCoocKDsR+Hius4e+5zJPlXeeWNowIUO+pa14FBcWH/dCNK5R0vRrlWY5s= ;{id = 2854} | |
131 | ENTRY_END | |
132 | ||
133 | ; response for query in question - delegation | |
134 | ; and all other queries, receive a delegation to c.5.6.example.com. | |
135 | ENTRY_BEGIN | |
136 | MATCH opcode | |
137 | ADJUST copy_id copy_query | |
138 | REPLY QR NOERROR | |
139 | SECTION QUESTION | |
140 | a.1.2.b.3.4.c.5.6.example.com. IN A | |
141 | SECTION ANSWER | |
142 | SECTION AUTHORITY | |
143 | c.5.6.example.com. IN NS ns.c.5.6.example.com. | |
144 | c.5.6.example.com. 3600 IN DS 2854 3 1 4449f16fa7d712283aa43cc8dcc8e07c05856e08 | |
145 | c.5.6.example.com. 3600 IN RRSIG DS 3 5 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCgiF7eFL89mSqjUPEpQuL5QEa1OgIUWdfUmMkwVBwOgmxlxZIKfGs5od0= ;{id = 2854} | |
146 | SECTION ADDITIONAL | |
147 | ns.c.5.6.example.com. IN A 1.2.3.6 | |
148 | ENTRY_END | |
149 | RANGE_END | |
150 | ||
151 | ; ns.c.5.6.example.com. | |
152 | RANGE_BEGIN 0 100 | |
153 | ADDRESS 1.2.3.6 | |
154 | ENTRY_BEGIN | |
155 | MATCH opcode qtype qname | |
156 | ADJUST copy_id | |
157 | REPLY AA QR NOERROR | |
158 | SECTION QUESTION | |
159 | c.5.6.example.com. IN NS | |
160 | SECTION ANSWER | |
161 | ENTRY_END | |
162 | ||
163 | ; response to DNSKEY priming query | |
164 | ENTRY_BEGIN | |
165 | MATCH opcode qtype qname | |
166 | ADJUST copy_id | |
167 | REPLY AA QR NOERROR | |
168 | SECTION QUESTION | |
169 | c.5.6.example.com. IN DNSKEY | |
170 | SECTION ANSWER | |
171 | c.5.6.example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} | |
172 | c.5.6.example.com. 3600 IN RRSIG DNSKEY 3 5 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MC0CFHsYd4tGO5BotXFzG9d8fzHkX576AhUAoZ2d1FNUBsrwxl6XSz/hoxme/4Q= ;{id = 2854} | |
173 | ENTRY_END | |
174 | ||
175 | ; response to DS queries. | |
176 | ENTRY_BEGIN | |
177 | MATCH opcode qtype qname | |
178 | ADJUST copy_id | |
179 | REPLY AA QR NOERROR | |
180 | SECTION QUESTION | |
181 | 4.c.5.6.example.com. IN DS | |
182 | SECTION AUTHORITY | |
183 | 3.c.5.6.example.com. IN NSEC b.3.4.c.5.6.example.com. NS DS RRSIG NSEC | |
184 | 3.c.5.6.example.com. 3600 IN RRSIG NSEC 3 6 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MCwCFFFF5WwGibkPunDt0BW2W9lncACcAhQuFh7FbfCE1ulJqBFf1YxjvT/WHQ== ;{id = 2854} | |
185 | ||
186 | ENTRY_END | |
187 | ||
188 | ENTRY_BEGIN | |
189 | MATCH opcode qtype qname | |
190 | ADJUST copy_id | |
191 | REPLY AA QR NOERROR | |
192 | SECTION QUESTION | |
193 | 3.4.c.5.6.example.com. IN DS | |
194 | SECTION AUTHORITY | |
195 | 3.c.5.6.example.com. IN NSEC b.3.4.c.5.6.example.com. NS DS RRSIG NSEC | |
196 | 3.c.5.6.example.com. 3600 IN RRSIG NSEC 3 6 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MCwCFFFF5WwGibkPunDt0BW2W9lncACcAhQuFh7FbfCE1ulJqBFf1YxjvT/WHQ== ;{id = 2854} | |
197 | ENTRY_END | |
198 | ||
199 | ; any other query gets a referral | |
200 | ENTRY_BEGIN | |
201 | MATCH opcode | |
202 | ADJUST copy_id copy_query | |
203 | REPLY AA QR NOERROR | |
204 | SECTION QUESTION | |
205 | 4.c.5.6.example.com. IN DS | |
206 | SECTION AUTHORITY | |
207 | b.3.4.c.5.6.example.com. IN NS ns.b.3.4.c.5.6.example.com. | |
208 | b.3.4.c.5.6.example.com. 3600 IN DS 30899 5 1 849ebbdefa338db3e6c3ddffd58851523ba701de | |
209 | b.3.4.c.5.6.example.com. 3600 IN RRSIG DS 3 8 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MC0CFEuXbvClpAOx7E1SXeH0d+Q4jpySAhUAtbEbQ8qtRF5chUOWNtg31ESAjWg= ;{id = 2854} | |
210 | SECTION ADDITIONAL | |
211 | ns.b.3.4.c.5.6.example.com. IN A 1.2.3.7 | |
212 | ENTRY_END | |
213 | RANGE_END | |
214 | ||
215 | ; ns.b.3.4.c.5.6.example.com. | |
216 | RANGE_BEGIN 0 100 | |
217 | ADDRESS 1.2.3.7 | |
218 | ENTRY_BEGIN | |
219 | MATCH opcode qtype qname | |
220 | ADJUST copy_id | |
221 | REPLY QR AA NOERROR | |
222 | SECTION QUESTION | |
223 | b.3.4.c.5.6.example.com. IN NS | |
224 | SECTION ANSWER | |
225 | ENTRY_END | |
226 | ||
227 | ; response to DNSKEY priming query | |
228 | ENTRY_BEGIN | |
229 | MATCH opcode qtype qname | |
230 | ADJUST copy_id | |
231 | REPLY QR AA NOERROR | |
232 | SECTION QUESTION | |
233 | b.3.4.c.5.6.example.com. IN DNSKEY | |
234 | SECTION ANSWER | |
235 | b.3.4.c.5.6.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} | |
236 | b.3.4.c.5.6.example.com. 3600 IN RRSIG DNSKEY 5 8 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. KNftlGVkrfvo3l3Wliq+i695MqJI9B8QnTVhCHKhFPZfEq0HCxV8gO3ZlaTUle1YEnr7+yXUritXlzjFOlf1hw== ;{id = 30899} | |
237 | ENTRY_END | |
238 | ||
239 | ; response to query of interest | |
240 | ENTRY_BEGIN | |
241 | MATCH opcode qtype qname | |
242 | ADJUST copy_id | |
243 | REPLY QR AA NOERROR | |
244 | SECTION QUESTION | |
245 | a.1.2.b.3.4.c.5.6.example.com. IN A | |
246 | SECTION ANSWER | |
247 | a.1.2.b.3.4.c.5.6.example.com. IN A 11.11.11.11 | |
248 | a.1.2.b.3.4.c.5.6.example.com. 3600 IN RRSIG A 5 11 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. GUZcUHhxAvc6FYwAzVJcTqsjz5L36bGA45dyeSupEGEhhUJj0wm/FaYCAlO8J+H2zcFEqbgK0KzHdrFmNHkgUQ== ;{id = 30899} | |
249 | SECTION AUTHORITY | |
250 | SECTION ADDITIONAL | |
251 | ENTRY_END | |
252 | RANGE_END | |
253 | ||
254 | STEP 1 QUERY | |
255 | ENTRY_BEGIN | |
256 | REPLY RD DO | |
257 | SECTION QUESTION | |
258 | a.1.2.b.3.4.c.5.6.example.com. IN A | |
259 | ENTRY_END | |
260 | ||
261 | ; recursion happens here. | |
262 | STEP 10 CHECK_ANSWER | |
263 | ENTRY_BEGIN | |
264 | MATCH all | |
265 | REPLY QR RD RA AD DO NOERROR | |
266 | SECTION QUESTION | |
267 | a.1.2.b.3.4.c.5.6.example.com. IN A | |
268 | SECTION ANSWER | |
269 | a.1.2.b.3.4.c.5.6.example.com. 3600 IN A 11.11.11.11 | |
270 | a.1.2.b.3.4.c.5.6.example.com. 3600 IN RRSIG A 5 11 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. GUZcUHhxAvc6FYwAzVJcTqsjz5L36bGA45dyeSupEGEhhUJj0wm/FaYCAlO8J+H2zcFEqbgK0KzHdrFmNHkgUQ== ;{id = 30899} | |
271 | SECTION AUTHORITY | |
272 | SECTION ADDITIONAL | |
273 | ENTRY_END | |
274 | ||
275 | SCENARIO_END |