]> git.saurik.com Git - apple/network_cmds.git/blob - unbound/testdata/val_nsec3_entnodata_optout.rpl
network_cmds-596.100.2.tar.gz
[apple/network_cmds.git] / unbound / testdata / val_nsec3_entnodata_optout.rpl
1 ; config options
2 ; The island of trust is at example.com
3 server:
4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
5 val-override-date: "20070916134226"
6 target-fetch-policy: "0 0 0 0 0"
7
8 stub-zone:
9 name: "."
10 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
11 CONFIG_END
12
13 SCENARIO_BEGIN Test validator with NSEC3 response for NODATA ENT with optout.
14
15 ; K.ROOT-SERVERS.NET.
16 RANGE_BEGIN 0 100
17 ADDRESS 193.0.14.129
18 ENTRY_BEGIN
19 MATCH opcode qtype qname
20 ADJUST copy_id
21 REPLY QR NOERROR
22 SECTION QUESTION
23 . IN NS
24 SECTION ANSWER
25 . IN NS K.ROOT-SERVERS.NET.
26 SECTION ADDITIONAL
27 K.ROOT-SERVERS.NET. IN A 193.0.14.129
28 ENTRY_END
29
30 ENTRY_BEGIN
31 MATCH opcode subdomain
32 ADJUST copy_id copy_query
33 REPLY QR NOERROR
34 SECTION QUESTION
35 com. IN A
36 SECTION AUTHORITY
37 com. IN NS a.gtld-servers.net.
38 SECTION ADDITIONAL
39 a.gtld-servers.net. IN A 192.5.6.30
40 ENTRY_END
41 RANGE_END
42
43 ; a.gtld-servers.net.
44 RANGE_BEGIN 0 100
45 ADDRESS 192.5.6.30
46 ENTRY_BEGIN
47 MATCH opcode qtype qname
48 ADJUST copy_id
49 REPLY QR NOERROR
50 SECTION QUESTION
51 com. IN NS
52 SECTION ANSWER
53 com. IN NS a.gtld-servers.net.
54 SECTION ADDITIONAL
55 a.gtld-servers.net. IN A 192.5.6.30
56 ENTRY_END
57
58 ENTRY_BEGIN
59 MATCH opcode subdomain
60 ADJUST copy_id copy_query
61 REPLY QR NOERROR
62 SECTION QUESTION
63 example.com. IN A
64 SECTION AUTHORITY
65 example.com. IN NS ns.example.com.
66 SECTION ADDITIONAL
67 ns.example.com. IN A 1.2.3.4
68 ENTRY_END
69 RANGE_END
70
71 ; ns.example.com.
72 RANGE_BEGIN 0 100
73 ADDRESS 1.2.3.4
74 ENTRY_BEGIN
75 MATCH opcode qtype qname
76 ADJUST copy_id
77 REPLY QR AA REFUSED
78 SECTION QUESTION
79 ns.example.com. IN A
80 ENTRY_END
81
82 ENTRY_BEGIN
83 MATCH opcode qtype qname
84 ADJUST copy_id
85 REPLY QR AA REFUSED
86 SECTION QUESTION
87 ns.example.com. IN AAAA
88 ENTRY_END
89
90 ENTRY_BEGIN
91 MATCH opcode qtype qname
92 ADJUST copy_id
93 REPLY QR NOERROR
94 SECTION QUESTION
95 example.com. IN NS
96 SECTION ANSWER
97 example.com. IN NS ns.example.com.
98 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
99 SECTION ADDITIONAL
100 ns.example.com. IN A 1.2.3.4
101 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
102 ENTRY_END
103
104 ; response to DNSKEY priming query
105 ENTRY_BEGIN
106 MATCH opcode qtype qname
107 ADJUST copy_id
108 REPLY QR NOERROR
109 SECTION QUESTION
110 example.com. IN DNSKEY
111 SECTION ANSWER
112 example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
113 example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
114 SECTION AUTHORITY
115 example.com. IN NS ns.example.com.
116 example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
117 SECTION ADDITIONAL
118 ns.example.com. IN A 1.2.3.4
119 ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
120 ENTRY_END
121
122 ENTRY_BEGIN
123 MATCH opcode qtype qname
124 ADJUST copy_id
125 REPLY QR NOERROR
126 SECTION QUESTION
127 www.example.com. IN A
128 SECTION AUTHORITY
129 example.com. IN SOA ns.example.com. hostmaster.example.com. 2007090400 28800 7200 604800 18000
130 example.com. 3600 IN RRSIG SOA 3 2 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCM6lsu9byZIQ1yYjJmyYfFWM2RWAIUcR5t84r2La824oWCkLjmHXRQlco= ;{id = 2854}
131
132 ; NODATA response. H(www.example.com.) = s1unhcti19bkdr98fegs0v46mbu3t4m3
133 s1unhcti19bkdr98fegs0v46mbu3t4m3.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd s1unhcti19bkdr98fegs0v46mbu3t4m4 MX RRSIG
134 s1unhcti19bkdr98fegs0v46mbu3t4m3.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. MCwCFE/a24nsY2luhQmZjY/ObAIgNSMkAhQWd4MUOUVK55bD6AbMHWrDA0yvEA== ;{id = 2854}
135
136 ENTRY_END
137
138 ENTRY_BEGIN
139 MATCH opcode qtype qname
140 ADJUST copy_id
141 REPLY QR NOERROR
142 SECTION QUESTION
143 ent.example.com. IN DS
144 SECTION AUTHORITY
145 ; example.com. -> b6fuorg741ufili49mg9j4328ig53sqg.
146 ; OPTOUT
147 b6fuorg741ufili49mg9j4328ig53sqg.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd b6fuorg741ufili49mg9j4328ig54sqg NS SOA DNSKEY RRSIG
148 b6fuorg741ufili49mg9j4328ig53sqg.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AHNLlpOM8cBFBBdzUO9nQC/O6mw3rDUrqcdiSwMKAIckd3k5WZvoP78=
149
150 ; ent.example.com. -> 2kekcu37chvrqjb272ptidu9jhk8oqag.
151 ; OPTOUT SPAN around it
152 2kekcu37chvrqjb272ptidu9jhk7oqag.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd 2kekcu37chvrqjb272ptidu9jhk9oqag
153 2kekcu37chvrqjb272ptidu9jhk7oqag.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AFgtC3UEm/Tu4HIjfDHIDmZkvgwHF0kWKcD3wP2hs+/wOfaILtXBr4c=
154 ENTRY_END
155
156 ; refer to server one down
157 ENTRY_BEGIN
158 MATCH opcode subdomain
159 ADJUST copy_id copy_query
160 REPLY QR NOERROR
161 SECTION QUESTION
162 ent.example.com. IN A
163 SECTION AUTHORITY
164 ; example.com. -> b6fuorg741ufili49mg9j4328ig53sqg.
165 ; OPTOUT
166 b6fuorg741ufili49mg9j4328ig53sqg.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd b6fuorg741ufili49mg9j4328ig54sqg NS SOA DNSKEY RRSIG
167 b6fuorg741ufili49mg9j4328ig53sqg.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AHNLlpOM8cBFBBdzUO9nQC/O6mw3rDUrqcdiSwMKAIckd3k5WZvoP78=
168
169 ; ent.example.com. -> 2kekcu37chvrqjb272ptidu9jhk8oqag.
170 ; OPTOUT SPAN around it
171 2kekcu37chvrqjb272ptidu9jhk7oqag.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd 2kekcu37chvrqjb272ptidu9jhk9oqag
172 2kekcu37chvrqjb272ptidu9jhk7oqag.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AFgtC3UEm/Tu4HIjfDHIDmZkvgwHF0kWKcD3wP2hs+/wOfaILtXBr4c=
173 ENTRY_END
174
175 RANGE_END
176
177 STEP 1 QUERY
178 ENTRY_BEGIN
179 REPLY RD DO
180 SECTION QUESTION
181 ent.example.com. IN A
182 ENTRY_END
183
184 ; recursion happens here.
185 STEP 10 CHECK_ANSWER
186 ENTRY_BEGIN
187 MATCH all
188 REPLY QR RD RA DO NOERROR
189 SECTION QUESTION
190 ent.example.com. IN A
191 SECTION ANSWER
192 SECTION AUTHORITY
193 b6fuorg741ufili49mg9j4328ig53sqg.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd b6fuorg741ufili49mg9j4328ig54sqg NS SOA DNSKEY RRSIG
194 b6fuorg741ufili49mg9j4328ig53sqg.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AHNLlpOM8cBFBBdzUO9nQC/O6mw3rDUrqcdiSwMKAIckd3k5WZvoP78=
195 2kekcu37chvrqjb272ptidu9jhk7oqag.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd 2kekcu37chvrqjb272ptidu9jhk9oqag
196 2kekcu37chvrqjb272ptidu9jhk7oqag.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AFgtC3UEm/Tu4HIjfDHIDmZkvgwHF0kWKcD3wP2hs+/wOfaILtXBr4c=
197 SECTION ADDITIONAL
198 ENTRY_END
199
200 SCENARIO_END