unbound/testdata/val_nsec3_b3_optout_negcache.rpl

   1 ; config options
   2 server:
   3         trust-anchor: "example. DNSKEY  257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )"
   4         val-override-date: "20120420235959"
   5         target-fetch-policy: "0 0 0 0 0"
   6
   7 stub-zone:
   8         name: "."
   9         stub-addr: 193.0.14.129         # K.ROOT-SERVERS.NET.
  10 CONFIG_END
  11
  12 SCENARIO_BEGIN Test validator NSEC3 B.3 referral optout with negative cache.
  13
  14 ; K.ROOT-SERVERS.NET.
  15 RANGE_BEGIN 0 100
  16         ADDRESS 193.0.14.129
  17 ENTRY_BEGIN
  18 MATCH opcode qtype qname
  19 ADJUST copy_id
  20 REPLY QR NOERROR
  21 SECTION QUESTION
  22 . IN NS
  23 SECTION ANSWER
  24 . IN NS K.ROOT-SERVERS.NET.
  25 SECTION ADDITIONAL
  26 K.ROOT-SERVERS.NET.     IN      A       193.0.14.129
  27 ENTRY_END
  28
  29 ENTRY_BEGIN
  30 MATCH opcode
  31 ADJUST copy_id copy_query
  32 REPLY QR NOERROR
  33 SECTION QUESTION
  34 . IN A
  35 SECTION AUTHORITY
  36 example.        IN NS   ns1.example.
  37 ; leave out to make unbound take ns1
  38 ;example.       IN NS   ns2.example.
  39 SECTION ADDITIONAL
  40 ns1.example.    IN A 192.0.2.1
  41 ; leave out to make unbound take ns1
  42 ;ns2.example.   IN A 192.0.2.2
  43 ENTRY_END
  44 RANGE_END
  45
  46 ; ns1.example.
  47 RANGE_BEGIN 0 100
  48         ADDRESS 192.0.2.1
  49 ENTRY_BEGIN
  50 MATCH opcode qtype qname
  51 ADJUST copy_id copy_query
  52 REPLY QR REFUSED
  53 SECTION QUESTION
  54 example. IN NS
  55 SECTION ANSWER
  56 ENTRY_END
  57
  58 ; response to DNSKEY priming query
  59
  60 ENTRY_BEGIN
  61 MATCH opcode qtype qname
  62 ADJUST copy_id
  63 REPLY QR NOERROR
  64 SECTION QUESTION
  65 example. IN DNSKEY
  66 SECTION ANSWER
  67 example. DNSKEY  256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= )
  68 example. DNSKEY  257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )
  69 example. RRSIG   DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example.  AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== )
  70 ENTRY_END
  71
  72 ENTRY_BEGIN
  73 MATCH opcode qtype qname
  74 ADJUST copy_id
  75 REPLY QR AA DO NOERROR
  76 SECTION QUESTION
  77 mc.c.example.       IN MX
  78 SECTION AUTHORITY
  79 c.example.      NS      ns1.c.example.
  80 c.example.      NS      ns2.c.example.
  81
  82 ;; NSEC3 RR that covers the "next closer" name (c.example)
  83 ;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck
  84 35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )
  85 35mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG   NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example.  g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== )
  86
  87 ;; NSEC3 RR that matches the closest encloser (example)
  88 ;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom
  89 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG )
  90 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG   NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example.  OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== )
  91
  92 SECTION ADDITIONAL
  93 ns1.c.example. A       192.0.2.7
  94 ns2.c.example. A       192.0.2.8
  95
  96 ENTRY_END
  97
  98
  99 ; DS must be gotten from neg cache
 100 ; ENTRY_BEGIN
 101 ; MATCH opcode qtype qname
 102 ; ADJUST copy_id
 103 ; REPLY QR AA DO NOERROR
 104 ; SECTION QUESTION
 105 ; c.example.       IN DS
 106 ; SECTION AUTHORITY
 107 ; ;; NSEC3 RR that covers the "next closer" name (c.example)
 108 ; ;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck
 109 ; 35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )
 110 ; 35mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG   NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example.  g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== )
 111 ;
 112 ; ;; NSEC3 RR that matches the closest encloser (example)
 113 ; ;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom
 114 ; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG )
 115 ; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG   NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example.  OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== )
 116 ; ENTRY_END
 117
 118 RANGE_END
 119
 120 ; ns1.c.example.
 121 RANGE_BEGIN 0 100
 122         ADDRESS 192.0.2.7
 123 ENTRY_BEGIN
 124 MATCH opcode qtype qname
 125 ADJUST copy_id
 126 REPLY QR AA NOERROR
 127 SECTION QUESTION
 128 c.example.       IN NS
 129 SECTION ANSWER
 130 c.example.      NS      ns1.c.example.
 131 c.example.      NS      ns2.c.example.
 132 SECTION ADDITIONAL
 133 ns1.c.example. A       192.0.2.7
 134 ns2.c.example. A       192.0.2.8
 135 ENTRY_END
 136
 137 ENTRY_BEGIN
 138 MATCH opcode qtype qname
 139 ADJUST copy_id
 140 REPLY QR AA NOERROR
 141 SECTION QUESTION
 142 mc.c.example.       IN MX
 143 SECTION ANSWER
 144 mc.c.example.       IN MX 50 mx.c.example.
 145 SECTION AUTHORITY
 146 c.example.      NS      ns1.c.example.
 147 c.example.      NS      ns2.c.example.
 148 SECTION ADDITIONAL
 149 ns1.c.example. A       192.0.2.7
 150 ns2.c.example. A       192.0.2.8
 151 ENTRY_END
 152 RANGE_END
 153
 154 ; ns2.c.example.
 155 RANGE_BEGIN 0 100
 156         ADDRESS 192.0.2.8
 157 ENTRY_BEGIN
 158 MATCH opcode qtype qname
 159 ADJUST copy_id
 160 REPLY QR AA NOERROR
 161 SECTION QUESTION
 162 c.example.       IN NS
 163 SECTION ANSWER
 164 c.example.      NS      ns1.c.example.
 165 c.example.      NS      ns2.c.example.
 166 SECTION ADDITIONAL
 167 ns1.c.example. A       192.0.2.7
 168 ns2.c.example. A       192.0.2.8
 169 ENTRY_END
 170
 171 ENTRY_BEGIN
 172 MATCH opcode qtype qname
 173 ADJUST copy_id
 174 REPLY QR AA NOERROR
 175 SECTION QUESTION
 176 mc.c.example.       IN MX
 177 SECTION ANSWER
 178 mc.c.example.       IN MX 50 mx.c.example.
 179 SECTION AUTHORITY
 180 c.example.      NS      ns1.c.example.
 181 c.example.      NS      ns2.c.example.
 182 SECTION ADDITIONAL
 183 ns1.c.example. A       192.0.2.7
 184 ns2.c.example. A       192.0.2.8
 185 ENTRY_END
 186 RANGE_END
 187
 188
 189 STEP 1 QUERY
 190 ENTRY_BEGIN
 191 REPLY RD DO
 192 SECTION QUESTION
 193 mc.c.example.       IN MX
 194 ENTRY_END
 195
 196 ; recursion happens here.
 197 STEP 10 CHECK_ANSWER
 198 ENTRY_BEGIN
 199 MATCH all
 200 REPLY QR RD RA DO NOERROR
 201 SECTION QUESTION
 202 mc.c.example.       IN MX
 203 SECTION ANSWER
 204 mc.c.example.       IN MX 50 mx.c.example.
 205 SECTION AUTHORITY
 206 c.example.      NS      ns1.c.example.
 207 c.example.      NS      ns2.c.example.
 208 SECTION ADDITIONAL
 209 ns1.c.example. A       192.0.2.7
 210 ns2.c.example. A       192.0.2.8
 211 ENTRY_END
 212
 213 SCENARIO_END