]>
Commit | Line | Data |
---|---|---|
1 | ; config options | |
2 | server: | |
3 | trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )" | |
4 | val-override-date: "20120420235959" | |
5 | target-fetch-policy: "0 0 0 0 0" | |
6 | ||
7 | stub-zone: | |
8 | name: "." | |
9 | stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. | |
10 | CONFIG_END | |
11 | ||
12 | SCENARIO_BEGIN Test validator NSEC3 B.5 wildcard nodata. | |
13 | ||
14 | ; K.ROOT-SERVERS.NET. | |
15 | RANGE_BEGIN 0 100 | |
16 | ADDRESS 193.0.14.129 | |
17 | ENTRY_BEGIN | |
18 | MATCH opcode qtype qname | |
19 | ADJUST copy_id | |
20 | REPLY QR NOERROR | |
21 | SECTION QUESTION | |
22 | . IN NS | |
23 | SECTION ANSWER | |
24 | . IN NS K.ROOT-SERVERS.NET. | |
25 | SECTION ADDITIONAL | |
26 | K.ROOT-SERVERS.NET. IN A 193.0.14.129 | |
27 | ENTRY_END | |
28 | ||
29 | ENTRY_BEGIN | |
30 | MATCH opcode | |
31 | ADJUST copy_id copy_query | |
32 | REPLY QR NOERROR | |
33 | SECTION QUESTION | |
34 | . IN A | |
35 | SECTION AUTHORITY | |
36 | example. IN NS ns1.example. | |
37 | ; leave out to make unbound take ns1 | |
38 | ;example. IN NS ns2.example. | |
39 | SECTION ADDITIONAL | |
40 | ns1.example. IN A 192.0.2.1 | |
41 | ; leave out to make unbound take ns1 | |
42 | ;ns2.example. IN A 192.0.2.2 | |
43 | ENTRY_END | |
44 | RANGE_END | |
45 | ||
46 | ; ns1.example. | |
47 | RANGE_BEGIN 0 100 | |
48 | ADDRESS 192.0.2.1 | |
49 | ENTRY_BEGIN | |
50 | MATCH opcode qtype qname | |
51 | ADJUST copy_id copy_query | |
52 | REPLY QR REFUSED | |
53 | SECTION QUESTION | |
54 | example. IN NS | |
55 | SECTION ANSWER | |
56 | ENTRY_END | |
57 | ||
58 | ; response to DNSKEY priming query | |
59 | ||
60 | ENTRY_BEGIN | |
61 | MATCH opcode qtype qname | |
62 | ADJUST copy_id | |
63 | REPLY QR NOERROR | |
64 | SECTION QUESTION | |
65 | example. IN DNSKEY | |
66 | SECTION ANSWER | |
67 | example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= ) | |
68 | example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= ) | |
69 | example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== ) | |
70 | ENTRY_END | |
71 | ||
72 | ENTRY_BEGIN | |
73 | MATCH opcode qtype qname | |
74 | ADJUST copy_id | |
75 | REPLY QR AA DO NOERROR | |
76 | SECTION QUESTION | |
77 | a.z.w.example. IN AAAA | |
78 | SECTION ANSWER | |
79 | SECTION AUTHORITY | |
80 | example. SOA ns1.example. bugs.x.w.example. 1 3600 300 ( 3600000 3600 ) | |
81 | example. RRSIG SOA 7 1 3600 20150420235959 20051021000000 ( 40430 example. Hu25UIyNPmvPIVBrldN+9Mlp9Zql39qaUd8i q4ZLlYWfUUbbAS41pG+68z81q1xhkYAcEyHd VI2LmKusbZsT0Q== ) | |
82 | ||
83 | ;; NSEC3 RR that matches the closest encloser (w.example) | |
84 | ;; H(w.example) = k8udemvp1j2f7eg6jebps17vp3n8i58h | |
85 | k8udemvp1j2f7eg6jebps17vp3n8i58h.example. NSEC3 1 1 12 aabbccdd ( kohar7mbb8dc2ce8a9qvl8hon4k53uhi ) | |
86 | k8udemvp1j2f7eg6jebps17vp3n8i58h.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. FtXGbvF0+wf8iWkyo73enAuVx03klN+pILBK S6qCcftVtfH4yVzsEZquJ27NHR7ruxJWDNMt Otx7w9WfcIg62A== ) | |
87 | ||
88 | ;; NSEC3 RR that covers the "next closer" name (z.w.example) | |
89 | ;; H(z.w.example) = qlu7gtfaeh0ek0c05ksfhdpbcgglbe03 | |
90 | q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd ( r53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG ) | |
91 | q04jkcevqvmu85r014c7dkba38o0ji5r.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. hV5I89b+4FHJDATp09g4bbN0R1F845CaXpL3 ZxlMKimoPAyqletMlEWwLfFia7sdpSzn+ZlN NlkxWcLsIlMmUg== ) | |
92 | ||
93 | ;; NSEC3 RR that matches a wildcard at the closest encloser. | |
94 | ;; H(*.w.example) = r53bq7cc2uvmubfu5ocmm6pers9tk9en | |
95 | r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. NSEC3 1 1 12 aabbccdd ( t644ebqk9bibcna874givr6joj62mlhv MX RRSIG ) | |
96 | r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. aupviViruXs4bDg9rCbezzBMf9h1ZlDvbW/C ZFKulIGXXLj8B/fsDJarXVDA9bnUoRhEbKp+ HF1FWKW7RIJdtQ== ) | |
97 | ||
98 | SECTION ADDITIONAL | |
99 | ENTRY_END | |
100 | ||
101 | ; catch glue queries | |
102 | ENTRY_BEGIN | |
103 | MATCH opcode qtype qname | |
104 | ADJUST copy_id | |
105 | REPLY QR AA DO NOERROR | |
106 | SECTION QUESTION | |
107 | ns2.example. IN A | |
108 | SECTION ANSWER | |
109 | ; nothing to make sure the ns1 server is used for queries. | |
110 | ENTRY_END | |
111 | ||
112 | ENTRY_BEGIN | |
113 | MATCH opcode qtype qname | |
114 | ADJUST copy_id | |
115 | REPLY QR AA DO NOERROR | |
116 | SECTION QUESTION | |
117 | ns2.example. IN AAAA | |
118 | SECTION ANSWER | |
119 | ; nothing to make sure the ns1 server is used for queries. | |
120 | ENTRY_END | |
121 | ||
122 | ||
123 | RANGE_END | |
124 | ||
125 | STEP 1 QUERY | |
126 | ENTRY_BEGIN | |
127 | REPLY RD DO | |
128 | SECTION QUESTION | |
129 | a.z.w.example. IN AAAA | |
130 | ENTRY_END | |
131 | ||
132 | ; recursion happens here. | |
133 | STEP 10 CHECK_ANSWER | |
134 | ENTRY_BEGIN | |
135 | MATCH all | |
136 | REPLY QR RD RA DO NOERROR | |
137 | SECTION QUESTION | |
138 | a.z.w.example. IN AAAA | |
139 | SECTION ANSWER | |
140 | SECTION AUTHORITY | |
141 | example. SOA ns1.example. bugs.x.w.example. 1 3600 300 ( 3600000 3600 ) | |
142 | example. RRSIG SOA 7 1 3600 20150420235959 20051021000000 ( 40430 example. Hu25UIyNPmvPIVBrldN+9Mlp9Zql39qaUd8i q4ZLlYWfUUbbAS41pG+68z81q1xhkYAcEyHd VI2LmKusbZsT0Q== ) | |
143 | k8udemvp1j2f7eg6jebps17vp3n8i58h.example. NSEC3 1 1 12 aabbccdd ( kohar7mbb8dc2ce8a9qvl8hon4k53uhi ) | |
144 | k8udemvp1j2f7eg6jebps17vp3n8i58h.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. FtXGbvF0+wf8iWkyo73enAuVx03klN+pILBK S6qCcftVtfH4yVzsEZquJ27NHR7ruxJWDNMt Otx7w9WfcIg62A== ) | |
145 | q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd ( r53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG ) | |
146 | q04jkcevqvmu85r014c7dkba38o0ji5r.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. hV5I89b+4FHJDATp09g4bbN0R1F845CaXpL3 ZxlMKimoPAyqletMlEWwLfFia7sdpSzn+ZlN NlkxWcLsIlMmUg== ) | |
147 | r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. NSEC3 1 1 12 aabbccdd ( t644ebqk9bibcna874givr6joj62mlhv MX RRSIG ) | |
148 | r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. aupviViruXs4bDg9rCbezzBMf9h1ZlDvbW/C ZFKulIGXXLj8B/fsDJarXVDA9bnUoRhEbKp+ HF1FWKW7RIJdtQ== ) | |
149 | ||
150 | SECTION ADDITIONAL | |
151 | ENTRY_END | |
152 | ||
153 | SCENARIO_END |