unbound/testdata/dlv_ds_lookup.rpl

   1 ; config options
   2 ; The island of trust is at example.com (the DLV repository)
   3 server:
   4         dlv-anchor: "example.com.    3600    IN      DS      2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
   5         val-override-date: "20070916134226"
   6         target-fetch-policy: "0 0 0 0 0"
   7
   8 stub-zone:
   9         name: "."
  10         stub-addr: 193.0.14.129         # K.ROOT-SERVERS.NET.
  11 CONFIG_END
  12
  13 SCENARIO_BEGIN Test validator with DLV anchor for a DS lookup.
  14 ; positive response for DLV.
  15
  16 ; K.ROOT-SERVERS.NET.
  17 RANGE_BEGIN 0 100
  18         ADDRESS 193.0.14.129
  19 ENTRY_BEGIN
  20 MATCH opcode qtype qname
  21 ADJUST copy_id
  22 REPLY QR NOERROR
  23 SECTION QUESTION
  24 . IN NS
  25 SECTION ANSWER
  26 . IN NS K.ROOT-SERVERS.NET.
  27 SECTION ADDITIONAL
  28 K.ROOT-SERVERS.NET.     IN      A       193.0.14.129
  29 ENTRY_END
  30
  31 ENTRY_BEGIN
  32 MATCH opcode subdomain
  33 ADJUST copy_id copy_query
  34 REPLY QR NOERROR
  35 SECTION QUESTION
  36 com. IN A
  37 SECTION AUTHORITY
  38 com.    IN NS   a.gtld-servers.net.
  39 SECTION ADDITIONAL
  40 a.gtld-servers.net.     IN      A       192.5.6.30
  41 ENTRY_END
  42
  43 ENTRY_BEGIN
  44 MATCH opcode subdomain
  45 ADJUST copy_id copy_query
  46 REPLY QR NOERROR
  47 SECTION QUESTION
  48 net. IN A
  49 SECTION AUTHORITY
  50 net.    IN NS   a.gtld-servers.net.
  51 SECTION ADDITIONAL
  52 a.gtld-servers.net.     IN      A       192.5.6.30
  53 ENTRY_END
  54 RANGE_END
  55
  56 ; a.gtld-servers.net.
  57 RANGE_BEGIN 0 100
  58         ADDRESS 192.5.6.30
  59 ENTRY_BEGIN
  60 MATCH opcode qtype qname
  61 ADJUST copy_id
  62 REPLY QR NOERROR
  63 SECTION QUESTION
  64 com. IN NS
  65 SECTION ANSWER
  66 com.    IN NS   a.gtld-servers.net.
  67 SECTION ADDITIONAL
  68 a.gtld-servers.net.     IN      A       192.5.6.30
  69 ENTRY_END
  70
  71 ENTRY_BEGIN
  72 MATCH opcode qtype qname
  73 ADJUST copy_id
  74 REPLY QR NOERROR
  75 SECTION QUESTION
  76 net. IN NS
  77 SECTION ANSWER
  78 net.    IN NS   a.gtld-servers.net.
  79 SECTION ADDITIONAL
  80 a.gtld-servers.net.     IN      A       192.5.6.30
  81 ENTRY_END
  82
  83 ENTRY_BEGIN
  84 MATCH opcode subdomain
  85 ADJUST copy_id copy_query
  86 REPLY QR NOERROR
  87 SECTION QUESTION
  88 example.com. IN A
  89 SECTION AUTHORITY
  90 example.com.    IN NS   ns.example.com.
  91 SECTION ADDITIONAL
  92 ns.example.com.         IN      A       1.2.3.4
  93 ENTRY_END
  94
  95 ENTRY_BEGIN
  96 MATCH opcode qtype qname
  97 ADJUST copy_id
  98 REPLY QR NOERROR
  99 SECTION QUESTION
 100 example.net. IN DS
 101 SECTION AUTHORITY
 102 net.                    900     IN      SOA     a.gtld-servers.net. nstld.verisign-grs.com. 1251367385 1800 900 604800 86400
 103 ENTRY_END
 104
 105 ENTRY_BEGIN
 106 MATCH opcode subdomain
 107 ADJUST copy_id copy_query
 108 REPLY QR NOERROR
 109 SECTION QUESTION
 110 example.net. IN A
 111 SECTION AUTHORITY
 112 example.net.    IN NS   ns.example.net.
 113 SECTION ADDITIONAL
 114 ns.example.net.         IN      A       1.2.3.5
 115 ENTRY_END
 116 RANGE_END
 117
 118 ; ns.example.com.
 119 RANGE_BEGIN 0 100
 120         ADDRESS 1.2.3.4
 121 ENTRY_BEGIN
 122 MATCH opcode qtype qname
 123 ADJUST copy_id
 124 REPLY QR NOERROR
 125 SECTION QUESTION
 126 example.com. IN NS
 127 SECTION ANSWER
 128 example.com.    IN NS   ns.example.com.
 129 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
 130 SECTION ADDITIONAL
 131 ns.example.com.         IN      A       1.2.3.4
 132 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 133 ENTRY_END
 134
 135 ; response to DNSKEY priming query
 136 ENTRY_BEGIN
 137 MATCH opcode qtype qname
 138 ADJUST copy_id
 139 REPLY QR NOERROR
 140 SECTION QUESTION
 141 example.com. IN DNSKEY
 142 SECTION ANSWER
 143 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 144 example.com.    3600    IN      RRSIG   DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
 145 SECTION AUTHORITY
 146 example.com.    IN NS   ns.example.com.
 147 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
 148 SECTION ADDITIONAL
 149 ns.example.com.         IN      A       1.2.3.4
 150 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 151 ENTRY_END
 152
 153 ; DLV query
 154 ENTRY_BEGIN
 155 MATCH opcode qtype qname
 156 ADJUST copy_id
 157 REPLY QR NOERROR
 158 SECTION QUESTION
 159 example.net.example.com. IN DLV
 160 SECTION ANSWER
 161 example.net.example.com.        3600    IN      DLV     30899 5 1 14188c885f20623ad1d3bec42798f3f951793e4c ; xehac-mofum-malyd-bomaf-pegit-fuzes-ganin-misiz-nigel-nozog-soxix
 162 example.net.example.com.        3600    IN      RRSIG   DLV 3 4 3600 20070926134150 20070829134150 2854 example.com. ACK48Q/oKwh/SM9yRiKjZYuc+AtEZ2yCPNJ15kKCN8nsVcv7xigmNTY= ;{id = 2854}
 163 SECTION AUTHORITY
 164 example.com.    IN NS   ns.example.com.
 165 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
 166 SECTION ADDITIONAL
 167 ns.example.com.         IN      A       1.2.3.4
 168 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 169 ENTRY_END
 170
 171 ENTRY_BEGIN
 172 MATCH opcode qtype qname
 173 ADJUST copy_id
 174 REPLY QR NOERROR
 175 SECTION QUESTION
 176 net.example.com. IN DLV
 177 SECTION ANSWER
 178 SECTION AUTHORITY
 179 example.com. IN SOA open.nlnetlabs.nl. hostmaster.nlnetlabs.nl. 2008081300 28800 7200 604800 3600
 180 example.com.    3600    IN      RRSIG   SOA 3 2 3600 20070926134150 20070829134150 2854 example.com. AKPJnPBqfJKxE4P2iVYkSRJno9HmiXJZtjdqE8oBeq9Lk9FytcMdcig= ;{id = 2854}
 181 example.com IN NSEC example.net.example.com. SOA NS RRSIG NSEC
 182 example.com.    3600    IN      RRSIG   NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. AIoUkJ04/7/kJFDLocoqksqt9UL2RHHwlRfXAMxGdBHcNO+GSpG47Uk= ;{id = 2854}
 183 ENTRY_END
 184
 185 ENTRY_BEGIN
 186 MATCH opcode qtype qname
 187 ADJUST copy_id
 188 REPLY QR NXDOMAIN
 189 SECTION QUESTION
 190 com.example.com. IN DLV
 191 SECTION ANSWER
 192 SECTION AUTHORITY
 193 example.com. IN SOA open.nlnetlabs.nl. hostmaster.nlnetlabs.nl. 2008081300 28800 7200 604800 3600
 194 example.com.    3600    IN      RRSIG   SOA 3 2 3600 20070926134150 20070829134150 2854 example.com. AKPJnPBqfJKxE4P2iVYkSRJno9HmiXJZtjdqE8oBeq9Lk9FytcMdcig= ;{id = 2854}
 195 example.com IN NSEC example.net.example.com. SOA NS RRSIG NSEC
 196 example.com.    3600    IN      RRSIG   NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. AIoUkJ04/7/kJFDLocoqksqt9UL2RHHwlRfXAMxGdBHcNO+GSpG47Uk= ;{id = 2854}
 197 ENTRY_END
 198
 199 RANGE_END
 200
 201 ; ns.example.net.
 202 RANGE_BEGIN 0 100
 203         ADDRESS 1.2.3.5
 204 ; DS RR is
 205 ; example.net.  3600    IN      DS      30899 5 1 14188c885f20623ad1d3bec42798f3f951793e4c ; xehac-mofum-malyd-bomaf-pegit-fuzes-ganin-misiz-nigel-nozog-soxix
 206 ; DNSKEY prime query
 207 ENTRY_BEGIN
 208 MATCH opcode qtype qname
 209 ADJUST copy_id
 210 REPLY QR NOERROR
 211 SECTION QUESTION
 212 example.net. IN DNSKEY
 213 SECTION ANSWER
 214 example.net.    3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 215 example.net.    3600    IN      RRSIG   DNSKEY RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. hiFzlQ8VoYgCuvIsfVuxC3mfJDqsTh0yc6abs5xMx5uEcIjb0dndFQx7INOM+imlzveEN73Hqp4OLFpFhsWLlw== ;{id = 30899}
 216 SECTION AUTHORITY
 217 example.net.    IN NS   ns.example.net.
 218 example.net.    3600    IN      RRSIG   NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899}
 219 SECTION ADDITIONAL
 220 ns.example.net.         IN      A       1.2.3.5
 221 ns.example.net. 3600    IN      RRSIG   A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899}
 222 ENTRY_END
 223
 224 ; NS query
 225 ENTRY_BEGIN
 226 MATCH opcode qtype qname
 227 ADJUST copy_id
 228 REPLY QR NOERROR
 229 SECTION QUESTION
 230 example.net. IN NS
 231 SECTION ANSWER
 232 example.net.    IN NS   ns.example.net.
 233 example.net.    3600    IN      RRSIG   NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899}
 234 SECTION ADDITIONAL
 235 ns.example.net.         IN      A       1.2.3.5
 236 ns.example.net. 3600    IN      RRSIG   A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899}
 237 ENTRY_END
 238
 239 ; www.example.net query
 240 ENTRY_BEGIN
 241 MATCH opcode qtype qname
 242 ADJUST copy_id
 243 REPLY QR NOERROR
 244 SECTION QUESTION
 245 www.example.net. IN A
 246 SECTION ANSWER
 247 www.example.net.        3600    IN      A       10.20.30.40
 248 www.example.net.        3600    IN      RRSIG   A 5 3 3600 20070926135752 20070829135752 30899 example.net. ACvv4RQVC7TbI57ewqFImRaVoymktJ5Cxn/FaCodIENt82LVM92nivbP2WtwWCsQHWp7FkrMxTlQTJwyAeXFyg== ;{id = 30899}
 249 SECTION AUTHORITY
 250 example.net.    IN NS   ns.example.net.
 251 example.net.    3600    IN      RRSIG   NS RSASHA1 2 3600 20070926134150 20070829134150 30899 example.net. E8JX0l4B+cSR5bkHQwOJy1pBmlLMTYCJ8EwfNMU/eCv0YhKwo26rHhn52FGisgv+Nwp7/NbhHqQ+kJgoZC94XA== ;{id = 30899}
 252 SECTION ADDITIONAL
 253 ns.example.net.         IN      A       1.2.3.5
 254 ns.example.net. 3600    IN      RRSIG   A RSASHA1 3 3600 20070926134150 20070829134150 30899 example.net. x+tQMC9FhzT7Fcy1pM5NrOC7E8nLd7THPI3C6ie4EwL8PrxllqlR3q/DKB0d/m0qCOPcgN6HFOYURV1s4uAcsw== ;{id = 30899}
 255 ENTRY_END
 256
 257
 258 RANGE_END
 259
 260 STEP 1 QUERY
 261 ENTRY_BEGIN
 262 REPLY RD DO
 263 SECTION QUESTION
 264 example.net. IN DS
 265 ENTRY_END
 266
 267 ; recursion happens here.
 268 STEP 10 CHECK_ANSWER
 269 ENTRY_BEGIN
 270 MATCH all
 271 REPLY QR RD RA DO NOERROR
 272 SECTION QUESTION
 273 example.net. IN DS
 274 SECTION AUTHORITY
 275 net.                    900     IN      SOA     a.gtld-servers.net. nstld.verisign-grs.com. 1251367385 1800 900 604800 86400
 276 ENTRY_END
 277
 278 SCENARIO_END