]> git.saurik.com Git - apple/network_cmds.git/blob - unbound/testdata/val_nsec3_b2_nodata_nons.rpl
8311fffc07ba8ee46c2a14f980a04a3f70944a05
[apple/network_cmds.git] / unbound / testdata / val_nsec3_b2_nodata_nons.rpl
1 ; config options
2 server:
3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )"
4 val-override-date: "20120420235959"
5 target-fetch-policy: "0 0 0 0 0"
6
7 stub-zone:
8 name: "."
9 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
10 CONFIG_END
11
12 SCENARIO_BEGIN Test validator NSEC3 B.2 no data, without NSEC3.
13
14 ; K.ROOT-SERVERS.NET.
15 RANGE_BEGIN 0 100
16 ADDRESS 193.0.14.129
17 ENTRY_BEGIN
18 MATCH opcode qtype qname
19 ADJUST copy_id
20 REPLY QR NOERROR
21 SECTION QUESTION
22 . IN NS
23 SECTION ANSWER
24 . IN NS K.ROOT-SERVERS.NET.
25 SECTION ADDITIONAL
26 K.ROOT-SERVERS.NET. IN A 193.0.14.129
27 ENTRY_END
28
29 ENTRY_BEGIN
30 MATCH opcode subdomain
31 ADJUST copy_id copy_query
32 REPLY QR NOERROR
33 SECTION QUESTION
34 example. IN A
35 SECTION AUTHORITY
36 example. IN NS ns1.example.
37 ; leave out to make unbound take ns1
38 ;example. IN NS ns2.example.
39 SECTION ADDITIONAL
40 ns1.example. IN A 192.0.2.1
41 ; leave out to make unbound take ns1
42 ;ns2.example. IN A 192.0.2.2
43 ENTRY_END
44 RANGE_END
45
46 ; ns1.example.
47 RANGE_BEGIN 0 100
48 ADDRESS 192.0.2.1
49 ENTRY_BEGIN
50 MATCH opcode qtype qname
51 ADJUST copy_id copy_query
52 REPLY QR REFUSED
53 SECTION QUESTION
54 ns1.example. IN A
55 SECTION ANSWER
56 ENTRY_END
57
58 ENTRY_BEGIN
59 MATCH opcode qtype qname
60 ADJUST copy_id copy_query
61 REPLY QR REFUSED
62 SECTION QUESTION
63 ns1.example. IN AAAA
64 SECTION ANSWER
65 ENTRY_END
66
67 ENTRY_BEGIN
68 MATCH opcode qtype qname
69 ADJUST copy_id copy_query
70 REPLY QR REFUSED
71 SECTION QUESTION
72 example. IN NS
73 SECTION ANSWER
74 ENTRY_END
75
76 ; response to DNSKEY priming query
77
78 ENTRY_BEGIN
79 MATCH opcode qtype qname
80 ADJUST copy_id
81 REPLY QR NOERROR
82 SECTION QUESTION
83 example. IN DNSKEY
84 SECTION ANSWER
85 example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= )
86 example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )
87 example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== )
88 ENTRY_END
89
90 ; response to DS query
91 ENTRY_BEGIN
92 MATCH opcode qtype qname
93 ADJUST copy_id
94 REPLY QR AA DO NOERROR
95 SECTION QUESTION
96 ns1.example. IN DS
97 ENTRY_END
98
99 ENTRY_BEGIN
100 MATCH opcode qtype qname
101 ADJUST copy_id
102 REPLY QR AA DO NOERROR
103 SECTION QUESTION
104 ns1.example. IN MX
105 SECTION AUTHORITY
106 example. SOA ns1.example. bugs.x.w.example. 1 3600 300 ( 3600000 3600 )
107 example. RRSIG SOA 7 1 3600 20150420235959 20051021000000 ( 40430 example. Hu25UIyNPmvPIVBrldN+9Mlp9Zql39qaUd8i q4ZLlYWfUUbbAS41pG+68z81q1xhkYAcEyHd VI2LmKusbZsT0Q== )
108
109 ;; NSEC3 RR matches the QNAME and shows that the MX type bit is not set.
110 ;2t7b4g4vsa5smi47k61mv5bv1a22bojr.example. NSEC3 1 1 12 aabbccdd ( 2vptu5timamqttgl4luu9kg21e0aor3s A RRSIG )
111 ;2t7b4g4vsa5smi47k61mv5bv1a22bojr.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OmBvJ1Vgg1hCKMXHFiNeIYHK9XVW0iLDLwJN 4TFoNxZuP03gAXEI634YwOc4YBNITrj413iq NI6mRk/r1dOSUw== )
112
113 SECTION ADDITIONAL
114 ENTRY_END
115
116 RANGE_END
117
118 STEP 1 QUERY
119 ENTRY_BEGIN
120 REPLY RD DO
121 SECTION QUESTION
122 ns1.example. IN MX
123 ENTRY_END
124
125 ; recursion happens here.
126 STEP 10 CHECK_ANSWER
127 ENTRY_BEGIN
128 MATCH all
129 REPLY QR RD RA DO SERVFAIL
130 SECTION QUESTION
131 ns1.example. IN MX
132 SECTION ANSWER
133 SECTION AUTHORITY
134 SECTION ADDITIONAL
135 ENTRY_END
136
137 SCENARIO_END