Home | History | Annotate | Download | only in dnssec

Lines Matching refs:insecure

118 # authoritative zone is unsigned (insecure delegation), glue is returned
122 $DIG +tcp +dnssec -p "$PORT" a.insecure.example. @10.53.0.4 a >dig.out.ns4.test$n || ret=1
124 grep "ns\\.insecure\\.example\\..*A.10\\.53\\.0\\.3" dig.out.ns4.test$n >/dev/null || ret=1
609 # Check the insecure.example domain
613 dig_with_opts +noauth a.insecure.example. @10.53.0.3 a >dig.out.ns3.test$n || ret=1
614 dig_with_opts +noauth a.insecure.example. @10.53.0.4 a >dig.out.ns4.test$n || ret=1
626   delv_with_opts @10.53.0.4 a a.insecure.example >delv.out$n || ret=1
627   grep "a.insecure.example..*10.0.0.1" delv.out$n >/dev/null || ret=1
635 dig_with_opts +noauth a.insecure.nsec3.example. @10.53.0.3 a >dig.out.ns3.test$n || ret=1
636 dig_with_opts +noauth a.insecure.nsec3.example. @10.53.0.4 a >dig.out.ns4.test$n || ret=1
648   delv_with_opts @10.53.0.4 a a.insecure.nsec3.example >delv.out$n || ret=1
649   grep "a.insecure.nsec3.example..*10.0.0.1" delv.out$n >/dev/null || ret=1
657 dig_with_opts +noauth a.insecure.optout.example. @10.53.0.3 a >dig.out.ns3.test$n || ret=1
658 dig_with_opts +noauth a.insecure.optout.example. @10.53.0.4 a >dig.out.ns4.test$n || ret=1
670   delv_with_opts @10.53.0.4 a a.insecure.optout.example >delv.out$n || ret=1
671   grep "a.insecure.optout.example..*10.0.0.1" delv.out$n >/dev/null || ret=1
679 dig_with_opts q.insecure.example. a @10.53.0.3 \
681 dig_with_opts q.insecure.example. a @10.53.0.4 \
694   delv_with_opts @10.53.0.4 a q.insecure.example >delv.out$n 2>&1 || ret=1
703 dig_with_opts q.insecure.nsec3.example. a @10.53.0.3 \
705 dig_with_opts q.insecure.nsec3.example. a @10.53.0.4 \
718   delv_with_opts @10.53.0.4 a q.insecure.nsec3.example >delv.out$n 2>&1 || ret=1
727 dig_with_opts q.insecure.optout.example. a @10.53.0.3 \
729 dig_with_opts q.insecure.optout.example. a @10.53.0.4 \
742   delv_with_opts @10.53.0.4 a q.insecure.optout.example >delv.out$n 2>&1 || ret=1
751 dig_with_opts r.insecure.example. soa @10.53.0.3 \
753 dig_with_opts r.insecure.example. soa @10.53.0.4 \
766 dig_with_opts r.insecure.nsec3.example. soa @10.53.0.3 \
768 dig_with_opts r.insecure.nsec3.example. soa @10.53.0.4 \
781 dig_with_opts r.insecure.optout.example. soa @10.53.0.3 \
783 dig_with_opts r.insecure.optout.example. soa @10.53.0.4 \
982 dig_with_opts a.insecure.example. a @10.53.0.5 >dig.out.ns5.test$n || ret=1
1060 # Check the insecure.secure.example domain (insecurity proof)
1064 dig_with_opts +noauth a.insecure.secure.example. @10.53.0.2 a \
1066 dig_with_opts +noauth a.insecure.secure.example. @10.53.0.4 a \
1076 # Check a negative response in insecure.secure.example
1080 dig_with_opts q.insecure.secure.example. @10.53.0.2 a >dig.out.ns2.test$n \
1082 dig_with_opts q.insecure.secure.example. @10.53.0.4 a >dig.out.ns4.test$n \
1094 dig_with_opts r.insecure.secure.example. @10.53.0.2 soa >dig.out.ns2.test$n \
1096 dig_with_opts r.insecure.secure.example. @10.53.0.4 soa >dig.out.ns4.test$n \
1148 dig_with_opts +cd @10.53.0.4 insecure.example. ds >dig.out.ns4.test$n.1 || ret=1
1150   dig_with_opts @10.53.0.4 nonexistent.insecure.example. >dig.out.ns4.test$n.2 || ret=1
1237 dig_with_opts +noauth a.insecure.example. soa @10.53.0.4 \
1239 dig_with_opts +noauth +cdflag a.insecure.example. soa @10.53.0.5 \
1252 dig_with_opts q.insecure.example. a @10.53.0.4 \
1254 dig_with_opts +cdflag q.insecure.example. a @10.53.0.5 \
2246 echo_i "checking optout NSEC3 referral with only insecure delegations ($n)"
2255 echo_i "checking optout NSEC3 NXDOMAIN with only insecure delegations ($n)"
2264 echo_i "checking optout NSEC3 nodata with only insecure delegations ($n)"
2282 echo_i "checking validate-except in an insecure local domain ($n)"
2999 echo_i "checking that a insecure zone beneath a cname resolves ($n)"
3001 dig_with_opts soa insecure.below-cname.example. @10.53.0.4 >dig.out.ns4.test$n || ret=1
3024 firstVal=$(my_dig insecure
3026 secondVal=$(my_dig insecure.example. dnskey | awk '$1 != ";;" { print $2 }')
3029   thirdVal=$(my_dig insecure.example. dnskey | awk '$1 != ";;" { print $2 }')
3434 echo_i "check insecure delegation between static-stub zones ($n)"
3436 dig_with_opts ns insecure.secure.example \
3793 echo_i "checking that unknown DNSKEY algorithm validates as insecure ($n)"
3804 echo_i "checking that unsupported DNSKEY algorithm validates as insecure ($n)"
3835 echo_i "check that zone contents are treated as insecure when disable-algorithms name is above zone name ($n)"
3922 echo_i "checking that unknown DNSKEY algorithm + unknown NSEC3 has algorithm validates as insecure ($n)"
4121 echo_i "checking DNSSEC records are occluded from ANY in an insecure zone ($n)"
4123 dig_with_opts any x.insecure.example. @10.53.0.3 >dig.out.ns3.1.test$n || ret=1
4186 # algorithm will yield insecure positive responses.  These trust anchors in ns8 are
4187 # ignored and so this domain is treated as insecure.  The AD bit should not be set
4189 echo_i "checking that a trusted key using an unsupported algorithm validates as insecure ($n)"
4201 echo_i "checking that a managed key using an unsupported algorithm validates as insecure ($n)"
4214 # has a disabled algorithm match for will yield insecure positive responses.
4215 # These trust anchors in ns8 are ignored and so this domain is treated as insecure.
4217 echo_i "checking that a trusted key using a disabled algorithm validates as insecure ($n)"
4228 echo_i "checking that a managed key using a disabled algorithm validates as insecure ($n)"
4268 # should result in insecure responses, since no trust points for the
4270 echo_i "checking that a trusted key that is revoked validates as insecure ($n)"
4281 echo_i "checking that a managed key that is revoked validates as insecure ($n)"
4624 # Check that the validating resolver will fallback to insecure if the answer
4626 echo_i "checking fallback to insecure when NSEC3 iterations is too high (nxdomain) ($n)"
4638 echo_i "checking fallback to insecure when NSEC3 iterations is too high (nodata) ($n)"
4650 echo_i "checking fallback to insecure when NSEC3 iterations is too high (wildcard) ($n)"
4663 echo_i "checking fallback to insecure when NSEC3 iterations is too high (wildcard nodata) ($n)"
4808 echo_i "checking that a insecure negative response where there is a NSEC without a RRSIG succeeds ($n)"