unbound/testdata/iter_scrub_dname_sec.rpl

   1 ; config options
   2 server:
   3         trust-anchor: "example.com.    3600    IN      DS      2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
   4         trust-anchor: "example.net.    3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}"
   5         val-override-date: "20070916134226"
   6         target-fetch-policy: "0 0 0 0 0"
   7
   8 stub-zone:
   9         name: "."
  10         stub-addr: 193.0.14.129         # K.ROOT-SERVERS.NET.
  11 CONFIG_END
  12
  13 SCENARIO_BEGIN Test scrub of secure DNAME in answer section
  14
  15 RANGE_BEGIN 0 100
  16 ; all adresses
  17 ENTRY_BEGIN
  18 MATCH opcode qtype qname
  19 ADJUST copy_id
  20 REPLY QR AA NOERROR
  21 SECTION QUESTION
  22 . IN NS
  23 SECTION ANSWER
  24 . IN NS K.ROOT-SERVERS.NET.
  25 SECTION ADDITIONAL
  26 K.ROOT-SERVERS.NET. IN A 193.0.14.129
  27 ENTRY_END
  28
  29 ; ENTRY_BEGIN
  30 ; MATCH opcode qtype qname
  31 ; ADJUST copy_id
  32 ; REPLY QR NOERROR
  33 ; SECTION QUESTION
  34 ; x.y.example.com. IN A
  35 ; SECTION AUTHORITY
  36 ; com. IN NS a.gtld-servers.net.
  37 ; SECTION ADDITIONAL
  38 ; a.gtld-servers.net. IN A 192.5.6.30
  39 ; ENTRY_END
  40
  41 ENTRY_BEGIN
  42 MATCH opcode qtype qname
  43 ADJUST copy_id
  44 REPLY QR NOERROR
  45 SECTION QUESTION
  46 com. IN NS
  47 SECTION ANSWER
  48 com. IN NS a.gtld-servers.net.
  49 SECTION ADDITIONAL
  50 a.gtld-servers.net. IN A 192.5.6.30
  51 ENTRY_END
  52
  53 ; ENTRY_BEGIN
  54 ; MATCH opcode qtype qname
  55 ; ADJUST copy_id
  56 ; REPLY QR NOERROR
  57 ; SECTION QUESTION
  58 ; x.y.example.com. IN A
  59 ; SECTION AUTHORITY
  60 ; example.com. IN NS ns1.example.com.
  61 ; SECTION ADDITIONAL
  62 ; ns1.example.com. IN A 168.192.2.2
  63 ; ENTRY_END
  64
  65 ENTRY_BEGIN
  66 MATCH opcode qtype qname
  67 ADJUST copy_id
  68 REPLY QR AA NOERROR
  69 SECTION QUESTION
  70 x.y.example.com. IN A
  71 SECTION ANSWER
  72 y.example.com. DNAME z.example.com.
  73 y.example.com.  3600    IN      RRSIG   DNAME 3 3 3600 20070926134150 20070829134150 2854 example.com. ALCQdkXflwgQVKCFeYgCAx3ipuoPsGJVZjNeUriXE4nd94h50zJWDJ4= ;{id = 2854}
  74 x.y.example.com. IN CNAME x.z.example.com.
  75 x.z.example.com. IN A 10.20.30.0
  76 SECTION AUTHORITY
  77 example.com. IN NS ns1.example.com.
  78 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AA3IkI13XbKFU5NSqBVA9oM1WiyEKCy4DYFOAdihDf6uHps9lce3kEc= ;{id = 2854}
  79 SECTION ADDITIONAL
  80 ns1.example.com. IN A 168.192.2.2
  81 ns1.example.com.        3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. AKcUlwrSz2xYKnQ7b7oMblRa0rKjfUNT900bIkGjLKLWDUGc8mKZE2M= ;{id = 2854}
  82 ENTRY_END
  83
  84 ENTRY_BEGIN
  85 MATCH opcode qtype qname
  86 ADJUST copy_id
  87 REPLY QR AA NOERROR
  88 SECTION QUESTION
  89 x.z.example.com. IN A
  90 SECTION ANSWER
  91 x.z.example.com. IN A 10.20.30.40
  92 x.z.example.com.        3600    IN      RRSIG   A 3 4 3600 20070926134150 20070829134150 2854 example.com. ADZ12PiZGEjVUyLLYkct/SBE2WT4D5IkMOKdcl0dzQ0XRAC5y/0bS7A= ;{id = 2854}
  93 SECTION AUTHORITY
  94 example.com. IN NS ns1.example.com.
  95 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. ADesKDqTIOswg5QC6eTIQvGu3DHsPMz1htpHLcDJwE8IpURTnMuD0Mw= ;{id = 2854}
  96 SECTION ADDITIONAL
  97 ns1.example.com. IN A 168.192.2.2
  98 ns1.example.com.        3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. ACYkeSRNcLVXeL+R9AM9e1GbxTwXNXpy1M5hcyuVkhkY2d5jGrkye7I= ;{id = 2854}
  99 ENTRY_END
 100
 101 ENTRY_BEGIN
 102 MATCH opcode qtype qname
 103 ADJUST copy_id
 104 REPLY QR NOERROR
 105 SECTION QUESTION
 106 example.com. IN NS
 107 SECTION ANSWER
 108 example.com. IN NS ns1.example.com.
 109 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. ACHcJehLt4Hz+rAdxMPE96o7HJAEFohFXbxrKYlG+0WLfYAvH2nxU8k= ;{id = 2854}
 110 SECTION ADDITIONAL
 111 ns1.example.com. IN A 168.192.2.2
 112 ns1.example.com.        3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. AInP69g8uR1n/aRg4gmGu8UoM+zZYgjOqbNN2IvOxw3bk/q+g05jKg0= ;{id = 2854}
 113 ENTRY_END
 114
 115 ENTRY_BEGIN
 116 MATCH opcode qtype qname
 117 ADJUST copy_id
 118 REPLY QR AA NOERROR
 119 SECTION QUESTION
 120 example.com. IN DNSKEY
 121 SECTION ANSWER
 122 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 123 example.com. 3600    IN      RRSIG   DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854}
 124 SECTION AUTHORITY
 125 SECTION ADDITIONAL
 126 ENTRY_END
 127
 128
 129 RANGE_END
 130
 131 STEP 10 QUERY
 132 ENTRY_BEGIN
 133 REPLY RD DO
 134 SECTION QUESTION
 135 x.y.example.com. IN A
 136 ENTRY_END
 137
 138 ; answer to first query (simply puts DNAME in cache)
 139 STEP 90 CHECK_ANSWER
 140 ENTRY_BEGIN
 141 MATCH all
 142 REPLY QR RD RA AD DO
 143 SECTION QUESTION
 144 x.y.example.com. IN A
 145 SECTION ANSWER
 146 y.example.com. DNAME z.example.com.
 147 y.example.com.  3600    IN      RRSIG   DNAME 3 3 3600 20070926134150 20070829134150 2854 example.com. ALCQdkXflwgQVKCFeYgCAx3ipuoPsGJVZjNeUriXE4nd94h50zJWDJ4= ;{id = 2854}
 148 x.y.example.com. IN CNAME x.z.example.com.
 149 x.z.example.com. IN A 10.20.30.40
 150 x.z.example.com.        3600    IN      RRSIG   A 3 4 3600 20070926134150 20070829134150 2854 example.com. ADZ12PiZGEjVUyLLYkct/SBE2WT4D5IkMOKdcl0dzQ0XRAC5y/0bS7A= ;{id = 2854}
 151 SECTION AUTHORITY
 152 example.com. IN NS ns1.example.com.
 153 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. ADesKDqTIOswg5QC6eTIQvGu3DHsPMz1htpHLcDJwE8IpURTnMuD0Mw= ;{id = 2854}
 154 SECTION ADDITIONAL
 155 ns1.example.com. IN A 168.192.2.2
 156 ns1.example.com.        3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. ACYkeSRNcLVXeL+R9AM9e1GbxTwXNXpy1M5hcyuVkhkY2d5jGrkye7I= ;{id = 2854}
 157 ENTRY_END
 158
 159 ; now, DNAME is secure and can be used from cache.
 160 ; new query
 161 STEP 200 QUERY
 162 ENTRY_BEGIN
 163 REPLY RD DO
 164 SECTION QUESTION
 165 other.y.example.com. IN A
 166 ENTRY_END
 167
 168 STEP 230 CHECK_OUT_QUERY
 169 ENTRY_BEGIN
 170 MATCH qname qtype opcode
 171 SECTION QUESTION
 172 other.z.example.com. IN A
 173 ENTRY_END
 174 STEP 240 REPLY
 175 ENTRY_BEGIN
 176 MATCH opcode qtype qname
 177 ADJUST copy_id
 178 REPLY QR AA NOERROR
 179 SECTION QUESTION
 180 other.z.example.com. IN A
 181 SECTION ANSWER
 182 other.z.example.com. IN A 50.60.70.80
 183 other.z.example.com.    3600    IN      RRSIG   A 3 4 3600 20070926134150 20070829134150 2854 example.com. AAp6G89oAvkyAaeF2d35AJNlzMhedGo0Bcppl0IOyF3HRzoc51vjJoU= ;{id = 2854}
 184 SECTION AUTHORITY
 185 example.com. IN NS ns1.example.com.
 186 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. ADesKDqTIOswg5QC6eTIQvGu3DHsPMz1htpHLcDJwE8IpURTnMuD0Mw= ;{id = 2854}
 187 SECTION ADDITIONAL
 188 ns1.example.com. IN A 168.192.2.2
 189 ns1.example.com.        3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. ACYkeSRNcLVXeL+R9AM9e1GbxTwXNXpy1M5hcyuVkhkY2d5jGrkye7I= ;{id = 2854}
 190 ENTRY_END
 191
 192 STEP 250 CHECK_ANSWER
 193 ENTRY_BEGIN
 194 MATCH all
 195 REPLY QR RD RA AD DO
 196 SECTION QUESTION
 197 other.y.example.com. IN A
 198 SECTION ANSWER
 199 y.example.com. DNAME z.example.com.
 200 y.example.com.  3600    IN      RRSIG   DNAME 3 3 3600 20070926134150 20070829134150 2854 example.com. ALCQdkXflwgQVKCFeYgCAx3ipuoPsGJVZjNeUriXE4nd94h50zJWDJ4= ;{id = 2854}
 201 other.y.example.com. IN CNAME other.z.example.com.
 202 other.z.example.com. IN A 50.60.70.80
 203 other.z.example.com.    3600    IN      RRSIG   A 3 4 3600 20070926134150 20070829134150 2854 example.com. AAp6G89oAvkyAaeF2d35AJNlzMhedGo0Bcppl0IOyF3HRzoc51vjJoU= ;{id = 2854}
 204 SECTION AUTHORITY
 205 example.com. IN NS ns1.example.com.
 206 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. ADesKDqTIOswg5QC6eTIQvGu3DHsPMz1htpHLcDJwE8IpURTnMuD0Mw= ;{id = 2854}
 207 SECTION ADDITIONAL
 208 ns1.example.com. IN A 168.192.2.2
 209 ns1.example.com.        3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. ACYkeSRNcLVXeL+R9AM9e1GbxTwXNXpy1M5hcyuVkhkY2d5jGrkye7I= ;{id = 2854}
 210 ENTRY_END
 211
 212 SCENARIO_END