unbound/testdata/val_entds.rpl

   1 ; config options
   2 ; The island of trust is at example.com
   3 server:
   4         trust-anchor: "example.com.    3600    IN      DS      2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
   5         val-override-date: "20070916134226"
   6         target-fetch-policy: "0 0 0 0 0"
   7
   8 stub-zone:
   9         name: "."
  10         stub-addr: 193.0.14.129         # K.ROOT-SERVERS.NET.
  11 CONFIG_END
  12
  13 SCENARIO_BEGIN Test validator with lots of ENTs in the chain of trust
  14 ; query is for a.1.2.b.3.4.c.5.6.example.com.
  15 ; labels 1-6 are empty nonterminals.
  16 ; there are DNSKEYs at labels b, c, example.com.
  17 ; and DSes at b and c.
  18
  19 ; K.ROOT-SERVERS.NET.
  20 RANGE_BEGIN 0 100
  21         ADDRESS 193.0.14.129
  22 ENTRY_BEGIN
  23 MATCH opcode qtype qname
  24 ADJUST copy_id
  25 REPLY QR NOERROR
  26 SECTION QUESTION
  27 . IN NS
  28 SECTION ANSWER
  29 . IN NS K.ROOT-SERVERS.NET.
  30 SECTION ADDITIONAL
  31 K.ROOT-SERVERS.NET.     IN      A       193.0.14.129
  32 ENTRY_END
  33
  34 ENTRY_BEGIN
  35 MATCH opcode qtype
  36 ADJUST copy_id copy_query
  37 REPLY QR NOERROR
  38 SECTION QUESTION
  39 www.sub.example.com. IN A
  40 SECTION AUTHORITY
  41 com.    IN NS   a.gtld-servers.net.
  42 SECTION ADDITIONAL
  43 a.gtld-servers.net.     IN      A       192.5.6.30
  44 ENTRY_END
  45 RANGE_END
  46
  47 ; a.gtld-servers.net.
  48 RANGE_BEGIN 0 100
  49         ADDRESS 192.5.6.30
  50 ENTRY_BEGIN
  51 MATCH opcode qtype qname
  52 ADJUST copy_id
  53 REPLY QR NOERROR
  54 SECTION QUESTION
  55 com. IN NS
  56 SECTION ANSWER
  57 com.    IN NS   a.gtld-servers.net.
  58 SECTION ADDITIONAL
  59 a.gtld-servers.net.     IN      A       192.5.6.30
  60 ENTRY_END
  61
  62 ENTRY_BEGIN
  63 MATCH opcode qtype
  64 ADJUST copy_id copy_query
  65 REPLY QR NOERROR
  66 SECTION QUESTION
  67 www.sub.example.com. IN A
  68 SECTION AUTHORITY
  69 example.com.    IN NS   ns.example.com.
  70 SECTION ADDITIONAL
  71 ns.example.com.         IN      A       1.2.3.4
  72 ENTRY_END
  73 RANGE_END
  74
  75 ; ns.example.com.
  76 RANGE_BEGIN 0 100
  77         ADDRESS 1.2.3.4
  78 ENTRY_BEGIN
  79 MATCH opcode qtype qname
  80 ADJUST copy_id
  81 REPLY QR NOERROR
  82 SECTION QUESTION
  83 example.com. IN NS
  84 SECTION ANSWER
  85 example.com.    IN NS   ns.example.com.
  86 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
  87 SECTION ADDITIONAL
  88 ns.example.com.         IN      A       1.2.3.4
  89 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
  90 ENTRY_END
  91
  92 ; response to DNSKEY priming query
  93 ENTRY_BEGIN
  94 MATCH opcode qtype qname
  95 ADJUST copy_id
  96 REPLY AA QR NOERROR
  97 SECTION QUESTION
  98 example.com. IN DNSKEY
  99 SECTION ANSWER
 100 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 101 example.com. 3600    IN      RRSIG   DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854}
 102 SECTION AUTHORITY
 103 example.com.    IN NS   ns.example.com.
 104 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
 105 SECTION ADDITIONAL
 106 ns.example.com.         IN      A       1.2.3.4
 107 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 108 ENTRY_END
 109
 110 ; response for ENT DS queries.
 111 ENTRY_BEGIN
 112 MATCH opcode qtype qname
 113 ADJUST copy_id
 114 REPLY AA QR NOERROR
 115 SECTION QUESTION
 116 6.example.com. IN DS
 117 SECTION AUTHORITY
 118 example.com. NSEC c.5.6.example.com. SOA DNSKEY NS RRSIG NSEC
 119 example.com.    3600    IN      RRSIG   NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCoocKDsR+Hius4e+5zJPlXeeWNowIUO+pa14FBcWH/dCNK5R0vRrlWY5s= ;{id = 2854}
 120 ENTRY_END
 121
 122 ENTRY_BEGIN
 123 MATCH opcode qtype qname
 124 ADJUST copy_id
 125 REPLY AA QR NOERROR
 126 SECTION QUESTION
 127 5.6.example.com. IN DS
 128 SECTION AUTHORITY
 129 example.com. NSEC c.5.6.example.com. SOA DNSKEY NS RRSIG NSEC
 130 example.com.    3600    IN      RRSIG   NSEC 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCoocKDsR+Hius4e+5zJPlXeeWNowIUO+pa14FBcWH/dCNK5R0vRrlWY5s= ;{id = 2854}
 131 ENTRY_END
 132
 133 ; response for query in question - delegation
 134 ; and all other queries, receive a delegation to c.5.6.example.com.
 135 ENTRY_BEGIN
 136 MATCH opcode
 137 ADJUST copy_id copy_query
 138 REPLY QR NOERROR
 139 SECTION QUESTION
 140 a.1.2.b.3.4.c.5.6.example.com. IN A
 141 SECTION ANSWER
 142 SECTION AUTHORITY
 143 c.5.6.example.com.      IN NS ns.c.5.6.example.com.
 144 c.5.6.example.com.      3600    IN      DS      2854 3 1 4449f16fa7d712283aa43cc8dcc8e07c05856e08
 145 c.5.6.example.com.      3600    IN      RRSIG   DS 3 5 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCgiF7eFL89mSqjUPEpQuL5QEa1OgIUWdfUmMkwVBwOgmxlxZIKfGs5od0= ;{id = 2854}
 146 SECTION ADDITIONAL
 147 ns.c.5.6.example.com.   IN      A 1.2.3.6
 148 ENTRY_END
 149 RANGE_END
 150
 151 ; ns.c.5.6.example.com.
 152 RANGE_BEGIN 0 100
 153         ADDRESS 1.2.3.6
 154 ENTRY_BEGIN
 155 MATCH opcode qtype qname
 156 ADJUST copy_id
 157 REPLY AA QR NOERROR
 158 SECTION QUESTION
 159 c.5.6.example.com. IN NS
 160 SECTION ANSWER
 161 ENTRY_END
 162
 163 ; response to DNSKEY priming query
 164 ENTRY_BEGIN
 165 MATCH opcode qtype qname
 166 ADJUST copy_id
 167 REPLY AA QR NOERROR
 168 SECTION QUESTION
 169 c.5.6.example.com. IN DNSKEY
 170 SECTION ANSWER
 171 c.5.6.example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 172 c.5.6.example.com.      3600    IN      RRSIG   DNSKEY 3 5 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MC0CFHsYd4tGO5BotXFzG9d8fzHkX576AhUAoZ2d1FNUBsrwxl6XSz/hoxme/4Q= ;{id = 2854}
 173 ENTRY_END
 174
 175 ; response to DS queries.
 176 ENTRY_BEGIN
 177 MATCH opcode qtype qname
 178 ADJUST copy_id
 179 REPLY AA QR NOERROR
 180 SECTION QUESTION
 181 4.c.5.6.example.com. IN DS
 182 SECTION AUTHORITY
 183 3.c.5.6.example.com.    IN NSEC b.3.4.c.5.6.example.com. NS DS RRSIG NSEC
 184 3.c.5.6.example.com.    3600    IN      RRSIG   NSEC 3 6 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MCwCFFFF5WwGibkPunDt0BW2W9lncACcAhQuFh7FbfCE1ulJqBFf1YxjvT/WHQ== ;{id = 2854}
 185
 186 ENTRY_END
 187
 188 ENTRY_BEGIN
 189 MATCH opcode qtype qname
 190 ADJUST copy_id
 191 REPLY AA QR NOERROR
 192 SECTION QUESTION
 193 3.4.c.5.6.example.com. IN DS
 194 SECTION AUTHORITY
 195 3.c.5.6.example.com.    IN NSEC b.3.4.c.5.6.example.com. NS DS RRSIG NSEC
 196 3.c.5.6.example.com.    3600    IN      RRSIG   NSEC 3 6 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MCwCFFFF5WwGibkPunDt0BW2W9lncACcAhQuFh7FbfCE1ulJqBFf1YxjvT/WHQ== ;{id = 2854}
 197 ENTRY_END
 198
 199 ; any other query gets a referral
 200 ENTRY_BEGIN
 201 MATCH opcode
 202 ADJUST copy_id copy_query
 203 REPLY AA QR NOERROR
 204 SECTION QUESTION
 205 4.c.5.6.example.com. IN DS
 206 SECTION AUTHORITY
 207 b.3.4.c.5.6.example.com. IN NS ns.b.3.4.c.5.6.example.com.
 208 b.3.4.c.5.6.example.com.        3600    IN      DS      30899 5 1 849ebbdefa338db3e6c3ddffd58851523ba701de
 209 b.3.4.c.5.6.example.com.        3600    IN      RRSIG   DS 3 8 3600 20070926134150 20070829134150 2854 c.5.6.example.com. MC0CFEuXbvClpAOx7E1SXeH0d+Q4jpySAhUAtbEbQ8qtRF5chUOWNtg31ESAjWg= ;{id = 2854}
 210 SECTION ADDITIONAL
 211 ns.b.3.4.c.5.6.example.com. IN A 1.2.3.7
 212 ENTRY_END
 213 RANGE_END
 214
 215 ; ns.b.3.4.c.5.6.example.com.
 216 RANGE_BEGIN 0 100
 217         ADDRESS 1.2.3.7
 218 ENTRY_BEGIN
 219 MATCH opcode qtype qname
 220 ADJUST copy_id
 221 REPLY QR AA NOERROR
 222 SECTION QUESTION
 223 b.3.4.c.5.6.example.com.        IN      NS
 224 SECTION ANSWER
 225 ENTRY_END
 226
 227 ; response to DNSKEY priming query
 228 ENTRY_BEGIN
 229 MATCH opcode qtype qname
 230 ADJUST copy_id
 231 REPLY QR AA NOERROR
 232 SECTION QUESTION
 233 b.3.4.c.5.6.example.com.        IN      DNSKEY
 234 SECTION ANSWER
 235 b.3.4.c.5.6.example.com.        3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 236 b.3.4.c.5.6.example.com.        3600    IN      RRSIG   DNSKEY 5 8 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. KNftlGVkrfvo3l3Wliq+i695MqJI9B8QnTVhCHKhFPZfEq0HCxV8gO3ZlaTUle1YEnr7+yXUritXlzjFOlf1hw== ;{id = 30899}
 237 ENTRY_END
 238
 239 ; response to query of interest
 240 ENTRY_BEGIN
 241 MATCH opcode qtype qname
 242 ADJUST copy_id
 243 REPLY QR AA NOERROR
 244 SECTION QUESTION
 245 a.1.2.b.3.4.c.5.6.example.com. IN A
 246 SECTION ANSWER
 247 a.1.2.b.3.4.c.5.6.example.com. IN A 11.11.11.11
 248 a.1.2.b.3.4.c.5.6.example.com.  3600    IN      RRSIG   A 5 11 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. GUZcUHhxAvc6FYwAzVJcTqsjz5L36bGA45dyeSupEGEhhUJj0wm/FaYCAlO8J+H2zcFEqbgK0KzHdrFmNHkgUQ== ;{id = 30899}
 249 SECTION AUTHORITY
 250 SECTION ADDITIONAL
 251 ENTRY_END
 252 RANGE_END
 253
 254 STEP 1 QUERY
 255 ENTRY_BEGIN
 256 REPLY RD DO
 257 SECTION QUESTION
 258 a.1.2.b.3.4.c.5.6.example.com. IN A
 259 ENTRY_END
 260
 261 ; recursion happens here.
 262 STEP 10 CHECK_ANSWER
 263 ENTRY_BEGIN
 264 MATCH all
 265 REPLY QR RD RA AD DO NOERROR
 266 SECTION QUESTION
 267 a.1.2.b.3.4.c.5.6.example.com. IN A
 268 SECTION ANSWER
 269 a.1.2.b.3.4.c.5.6.example.com. 3600     IN      A       11.11.11.11
 270 a.1.2.b.3.4.c.5.6.example.com.  3600    IN      RRSIG   A 5 11 3600 20070926134150 20070829134150 30899 b.3.4.c.5.6.example.com. GUZcUHhxAvc6FYwAzVJcTqsjz5L36bGA45dyeSupEGEhhUJj0wm/FaYCAlO8J+H2zcFEqbgK0KzHdrFmNHkgUQ== ;{id = 30899}
 271 SECTION AUTHORITY
 272 SECTION ADDITIONAL
 273 ENTRY_END
 274
 275 SCENARIO_END