1 ; config options 2 ; The island of trust is at test. 3 server: 4 trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 5 val-override-date: "20201020135527" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: no 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 minimal-responses: no 11 iter-scrub-promiscuous: no 12 local-zone: test. nodefault 13 log-servfail: yes 14 module-config: "dns64 validator iterator" 15 dns64-prefix: 64:ff9b::0/96 16 17 stub-zone: 18 name: "." 19 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 20 CONFIG_END 21 22 SCENARIO_BEGIN Test DNS64 with DNSSEC validation. 23 ; valid.example.test. both AAAA and A are DNSSEC valid 24 ; invaaaa.example.test. AAAA is invalid, A is DNSSEC valid 25 ; inva.example.test. AAAA is valid, A is DNSSEC invalid 26 ; invboth.example.test. AAAA is invalid, A is DNSSEC invalid 27 ; hasaaaa.example.test. has an AAAA record. 28 ; queries with and without CD flag. 29 30 ; K.ROOT-SERVERS.NET. 31 RANGE_BEGIN 0 300 32 ADDRESS 193.0.14.129 33 ENTRY_BEGIN 34 MATCH opcode qtype qname 35 ADJUST copy_id 36 REPLY QR NOERROR 37 SECTION QUESTION 38 . IN NS 39 SECTION ANSWER 40 . IN NS K.ROOT-SERVERS.NET. 41 SECTION ADDITIONAL 42 K.ROOT-SERVERS.NET. IN A 193.0.14.129 43 ENTRY_END 44 45 ENTRY_BEGIN 46 MATCH opcode subdomain 47 ADJUST copy_id copy_query 48 REPLY QR NOERROR 49 SECTION QUESTION 50 test. IN NS 51 SECTION AUTHORITY 52 test. IN NS ns.test. 53 SECTION ADDITIONAL 54 ns.test. IN A 1.2.3.5 55 ENTRY_END 56 RANGE_END 57 58 ; ns.test 59 RANGE_BEGIN 0 300 60 ADDRESS 1.2.3.5 61 ENTRY_BEGIN 62 MATCH opcode qtype qname 63 ADJUST copy_id 64 REPLY QR AA NOERROR 65 SECTION QUESTION 66 test. IN NS 67 SECTION ANSWER 68 test. IN NS ns.test 69 test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 70 SECTION ADDITIONAL 71 ns.test. IN A 1.2.3.5 72 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 73 ENTRY_END 74 75 ENTRY_BEGIN 76 MATCH opcode qtype qname 77 ADJUST copy_id 78 REPLY QR AA NOERROR 79 SECTION QUESTION 80 ns.test. IN A 81 SECTION ANSWER 82 ns.test. IN A 1.2.3.5 83 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 84 ENTRY_END 85 86 ENTRY_BEGIN 87 MATCH opcode qtype qname 88 ADJUST copy_id 89 REPLY QR AA NOERROR 90 SECTION QUESTION 91 ns.test. IN AAAA 92 SECTION AUTHORITY 93 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 94 test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 95 ns.test. 3600 IN NSEC nz.test. A RRSIG 96 ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 97 ENTRY_END 98 99 ENTRY_BEGIN 100 MATCH opcode qtype qname 101 ADJUST copy_id 102 REPLY QR AA NOERROR 103 SECTION QUESTION 104 test. IN DNSKEY 105 SECTION ANSWER 106 test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 107 test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 108 SECTION ADDITIONAL 109 ENTRY_END 110 111 ENTRY_BEGIN 112 MATCH opcode qname qtype 113 ADJUST copy_id 114 REPLY QR AA NOERROR 115 SECTION QUESTION 116 example.test. IN DS 117 SECTION ANSWER 118 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 119 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 120 ENTRY_END 121 122 ENTRY_BEGIN 123 MATCH opcode subdomain 124 ADJUST copy_id copy_query 125 REPLY QR NOERROR 126 SECTION QUESTION 127 example.test. IN NS 128 SECTION AUTHORITY 129 example.test. IN NS ns.example.test. 130 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 131 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 132 SECTION ADDITIONAL 133 ns.example.test. IN A 1.2.3.4 134 ENTRY_END 135 RANGE_END 136 137 ; ns.example.test. 138 RANGE_BEGIN 0 300 139 ADDRESS 1.2.3.4 140 ENTRY_BEGIN 141 MATCH opcode qtype qname 142 ADJUST copy_id 143 REPLY QR NOERROR 144 SECTION QUESTION 145 example.test. IN NS 146 SECTION ANSWER 147 example.test. IN NS ns.example.test. 148 example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 149 SECTION ADDITIONAL 150 ns.example.test. IN A 1.2.3.4 151 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 152 ENTRY_END 153 154 ENTRY_BEGIN 155 MATCH opcode qtype qname 156 ADJUST copy_id 157 REPLY QR AA NOERROR 158 SECTION QUESTION 159 ns.example.test. IN A 160 SECTION ANSWER 161 ns.example.test. IN A 1.2.3.4 162 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 163 ENTRY_END 164 165 ENTRY_BEGIN 166 MATCH opcode qtype qname 167 ADJUST copy_id 168 REPLY QR AA NOERROR 169 SECTION QUESTION 170 ns.example.test. IN AAAA 171 SECTION AUTHORITY 172 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 173 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 174 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 175 ns.example.test. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. v/5aO/n8Ow21y7LE7JKZsFkUJU5MjIfadVRm2Tdb8f3RLwYDdBTs3aWeeEQdCRSUF61TmfJM1jIxlWQPuHbqzGnjSk7adw9gFpP7wFwoqG3/xdCFHoxo/3/1F/4Ankey3sDgKgOFsgnu40TlL36mGPYszeK+/2o3SAx2GM+3BdU= 176 ENTRY_END 177 178 ; response to DNSKEY priming query 179 ENTRY_BEGIN 180 MATCH opcode qtype qname 181 ADJUST copy_id 182 REPLY QR NOERROR 183 SECTION QUESTION 184 example.test. IN DNSKEY 185 SECTION ANSWER 186 example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 187 example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 188 ENTRY_END 189 190 ; response to query of interest 191 ENTRY_BEGIN 192 MATCH opcode qtype qname 193 ADJUST copy_id 194 REPLY QR AA NOERROR 195 SECTION QUESTION 196 valid.example.test. AAAA 197 SECTION ANSWER 198 SECTION AUTHORITY 199 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 200 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 201 valid.example.test. 3600 IN NSEC valid2.example.test. A RRSIG NSEC 202 valid.example.test. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. GgwpBUFe6s1OLhunIQt5IXPMc51bScvWApWC7j0GbqL3FvtDyHDW4+vBxSh4lxX+262wGkw4OksRXIq0jNm313s8RUKmfszKeNfOr7KwubNeTZnU8dhl7RwIbBAYzqv2KPT7fPX7Vi3sKYDbJrU+KJUBohueJdGf4Y6Ixcb6sqY= 203 ENTRY_END 204 205 ENTRY_BEGIN 206 MATCH opcode qtype qname 207 ADJUST copy_id 208 REPLY QR AA NOERROR 209 SECTION QUESTION 210 valid.example.test. A 211 SECTION ANSWER 212 valid.example.test. 3600 IN A 192.0.2.1 213 valid.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. hZx175Bx+TmOZjv021Y5Os4254guBqMWLk9A1ixCM0B7v9s9WxMBidDvjiWO6dwjkvC4v8dfcoCWvoFfgwBNUFQQV9xDrqB06Oo4qyMftpyQrV/FsHrHQ7OlxaX/P5vhuPtQvLMj/J67P7WWIewqZV9SKP4I1vFX+c5L/uO/8Ts= 214 ENTRY_END 215 216 ENTRY_BEGIN 217 MATCH opcode qtype qname 218 ADJUST copy_id 219 REPLY QR AA NOERROR 220 SECTION QUESTION 221 invaaaa.example.test. AAAA 222 SECTION ANSWER 223 SECTION AUTHORITY 224 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 225 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 226 invaaaa.example.test. 3600 IN NSEC invaaaa2.example.test. A RRSIG NSEC 227 ; signature on the NSEC is invalidated: (wrong keytag) 228 ; correct is: 229 ; invaaaa.example.test. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. Xsc0PJbV3dYo6EweR5e/o4ROVNpJkWNdrDXNrU9vwwCOFrfdvkoOLCnmejpHM5V+v8yNt43l4gcurut8GU4hzBD2gdx1SdMV6k3Uv8UYRrQhidIwEynQRqaDhdAt7lCqTvKAn2iTHbHU9Fss0ezL01aYaCVTyPTeGZP6CgSzGU0= 230 invaaaa.example.test. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 11567 example.test. Xsc0PJbV3dYo6EweR5e/o4ROVNpJkWNdrDXNrU9vwwCOFrfdvkoOLCnmejpHM5V+v8yNt43l4gcurut8GU4hzBD2gdx1SdMV6k3Uv8UYRrQhidIwEynQRqaDhdAt7lCqTvKAn2iTHbHU9Fss0ezL01aYaCVTyPTeGZP6CgSzGU0= 231 ENTRY_END 232 233 ENTRY_BEGIN 234 MATCH opcode qtype qname 235 ADJUST copy_id 236 REPLY QR AA NOERROR 237 SECTION QUESTION 238 invaaaa.example.test. A 239 SECTION ANSWER 240 invaaaa.example.test. 3600 IN A 192.0.2.2 241 invaaaa.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. vNWrVbz9L8eaBXIulg+zswK02cjy+stKxHhedDclVqduavv7+6ZV7idFY+zlHZU6KxrfjGB8/UFMkdpOlcgrAy0D9YQAVjm2zCKzx6f3GSenlNWMlhwgeAJb+ozP/cmrZ+ctqF7id9q4E5P08yTPHEqEcdXDMG0iTEuSvel/p7I= 242 ENTRY_END 243 244 ENTRY_BEGIN 245 MATCH opcode qtype qname 246 ADJUST copy_id 247 REPLY QR AA NOERROR 248 SECTION QUESTION 249 inva.example.test. AAAA 250 SECTION ANSWER 251 SECTION AUTHORITY 252 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 253 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 254 inva.example.test. 3600 IN NSEC inva2.example.test. A RRSIG NSEC 255 inva.example.test. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. 1Rltlowol5kpdPYUuOt4GQJJjUr7UvJQGuhJ58Tuwxsd1rt/M+HAM61lzE2z6xcT2ezw5ja60lzNQsMiFYP0JCwcT6874X4er4+544O6fwFVcZPEh9jTOEH5TsjiYT1OltIsPf8LSUchRAo8LMSbHBpfFHe6JPZiyvBs4N60/hM= 256 ENTRY_END 257 258 ENTRY_BEGIN 259 MATCH opcode qtype qname 260 ADJUST copy_id 261 REPLY QR AA NOERROR 262 SECTION QUESTION 263 inva.example.test. A 264 SECTION ANSWER 265 inva.example.test. 3600 IN A 192.0.2.3 266 ; signature is invalidated: (wrong keytag) 267 ; correct is: 268 ;inva.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. CrBrpUkdpdDv/rg6u5I/Ja5FOHUvTl8g0wxymHfrm+qQMCJ86CHdsON6g8JyCE4HsZ6ZXEc9/s5Qxnse/awlEKGjvM6SYRbXhhbjJDDY2MoitwYXLAocq2gM0tqZeKMnYZzMRiRdhaL4XvwubHAtD/gU/RiF2/uequViwlaFo8w= 269 inva.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 11567 example.test. CrBrpUkdpdDv/rg6u5I/Ja5FOHUvTl8g0wxymHfrm+qQMCJ86CHdsON6g8JyCE4HsZ6ZXEc9/s5Qxnse/awlEKGjvM6SYRbXhhbjJDDY2MoitwYXLAocq2gM0tqZeKMnYZzMRiRdhaL4XvwubHAtD/gU/RiF2/uequViwlaFo8w= 270 ENTRY_END 271 272 ENTRY_BEGIN 273 MATCH opcode qtype qname 274 ADJUST copy_id 275 REPLY QR AA NOERROR 276 SECTION QUESTION 277 invboth.example.test. AAAA 278 SECTION ANSWER 279 SECTION AUTHORITY 280 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 281 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 282 invboth.example.test. 3600 IN NSEC invboth2.example.test. A RRSIG NSEC 283 ; signature on the NSEC is invalidated: (wrong keytag) 284 ; correct is: 285 ;invboth.example.test. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. w7oGj0Tb3o30iIknVEVToQ39DCQVUx9yV2mm1SkR4MBc4zj3eZRRoL40lHPrIndFRsrBxm7+pxdy29Nw+diWdQj5NnsEsPDSPRvkb04xaah22/zd7lmjLLx3qtFCZpEVbsLUGQAy546NmVlv65/TghlTFA3e6dOFtiwQhdWskyg= 286 invboth.example.test. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 11567 example.test. w7oGj0Tb3o30iIknVEVToQ39DCQVUx9yV2mm1SkR4MBc4zj3eZRRoL40lHPrIndFRsrBxm7+pxdy29Nw+diWdQj5NnsEsPDSPRvkb04xaah22/zd7lmjLLx3qtFCZpEVbsLUGQAy546NmVlv65/TghlTFA3e6dOFtiwQhdWskyg= 287 ENTRY_END 288 289 ENTRY_BEGIN 290 MATCH opcode qtype qname 291 ADJUST copy_id 292 REPLY QR AA NOERROR 293 SECTION QUESTION 294 invboth.example.test. A 295 SECTION ANSWER 296 invboth.example.test. 3600 IN A 192.0.2.4 297 ; signature is invalidated: (wrong keytag) 298 ; correct is: 299 ;invboth.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. Dt7oT9T55C83sIo8P21SzpB9WWBvEllrj0QXzCkO5Jb7XFtt7YwNnBmRMwbLbRol3YUVCkGaY/mSrATuP5xiq0sPulr8togzKWD0QOAJrxOnuk40ffkp1zrwiqkH7tRy5S9wQUx+vUt7RT1PcEqWufI4XRPmbhFuPXIMM1i8Te8= 300 invboth.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 11567 example.test. Dt7oT9T55C83sIo8P21SzpB9WWBvEllrj0QXzCkO5Jb7XFtt7YwNnBmRMwbLbRol3YUVCkGaY/mSrATuP5xiq0sPulr8togzKWD0QOAJrxOnuk40ffkp1zrwiqkH7tRy5S9wQUx+vUt7RT1PcEqWufI4XRPmbhFuPXIMM1i8Te8= 301 ENTRY_END 302 303 ENTRY_BEGIN 304 MATCH opcode qtype qname 305 ADJUST copy_id 306 REPLY QR AA NOERROR 307 SECTION QUESTION 308 hasaaaa.example.test. AAAA 309 SECTION ANSWER 310 hasaaaa.example.test. 3600 IN AAAA 2001::db8:5 311 hasaaaa.example.test. 3600 IN RRSIG AAAA 8 3 3600 20201116135527 20201019135527 55567 example.test. eat6Eh6Sqy9OE+BUIdUzzKuToqFn7K62oLbNUcj+JG/mlv85xeM3fKGbbwyR1mDbt/mghLfcchxWDoXtWJtYbItFVpRn4UyIuqK2w4igUb/Ic7iKoBJ4ZWlfYadE5MnAhVSQ094yAj3iUWydqQXVmTJ4UAJ3ouyzCJS8LojzZS8= 312 ENTRY_END 313 314 ENTRY_BEGIN 315 MATCH opcode qtype qname 316 ADJUST copy_id 317 REPLY QR AA NOERROR 318 SECTION QUESTION 319 hasaaaa.example.test. A 320 SECTION ANSWER 321 hasaaaa.example.test. 3600 IN A 192.0.2.5 322 hasaaaa.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. Lh0DMv541AunEERFv3Zck1JE4fCC48V247y5+4O/ciblzc67VDjlCnp2BAXtjoYgWmvRqtxgPMzttALbHN2YxweX0Tq6/Ji0iyvLepC6a0+LjT45KPAmXYEigX/oxyUX7bxKXJ0k+Tm9FdnesDMGuoDuk7gVYi9Bdrst8DWULJc= 323 ENTRY_END 324 RANGE_END 325 326 STEP 1 QUERY 327 ENTRY_BEGIN 328 REPLY RD DO 329 SECTION QUESTION 330 valid.example.test. IN AAAA 331 ENTRY_END 332 333 STEP 2 CHECK_ANSWER 334 ENTRY_BEGIN 335 MATCH all 336 REPLY QR RD RA AD DO NOERROR 337 SECTION QUESTION 338 valid.example.test. IN AAAA 339 SECTION ANSWER 340 valid.example.test. 0 IN AAAA 64:ff9b::c000:201 341 ENTRY_END 342 343 ; from cache 344 STEP 10 QUERY 345 ENTRY_BEGIN 346 REPLY RD DO 347 SECTION QUESTION 348 valid.example.test. IN AAAA 349 ENTRY_END 350 351 STEP 11 CHECK_ANSWER 352 ENTRY_BEGIN 353 MATCH all 354 REPLY QR RD RA AD DO NOERROR 355 SECTION QUESTION 356 valid.example.test. IN AAAA 357 SECTION ANSWER 358 valid.example.test. 0 IN AAAA 64:ff9b::c000:201 359 ENTRY_END 360 361 ; with cd flag 362 STEP 20 QUERY 363 ENTRY_BEGIN 364 REPLY RD CD DO 365 SECTION QUESTION 366 valid.example.test. IN AAAA 367 ENTRY_END 368 369 STEP 21 CHECK_ANSWER 370 ENTRY_BEGIN 371 MATCH all 372 REPLY QR RD RA AD CD DO NOERROR 373 SECTION QUESTION 374 valid.example.test. IN AAAA 375 SECTION ANSWER 376 SECTION AUTHORITY 377 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 378 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= ;{id = 55567} 379 valid.example.test. 3600 IN NSEC valid2.example.test. A RRSIG NSEC 380 valid.example.test. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. GgwpBUFe6s1OLhunIQt5IXPMc51bScvWApWC7j0GbqL3FvtDyHDW4+vBxSh4lxX+262wGkw4OksRXIq0jNm313s8RUKmfszKeNfOr7KwubNeTZnU8dhl7RwIbBAYzqv2KPT7fPX7Vi3sKYDbJrU+KJUBohueJdGf4Y6Ixcb6sqY= ;{id = 55567} 381 ENTRY_END 382 383 ; invaaaa.example.test. 384 STEP 30 QUERY 385 ENTRY_BEGIN 386 REPLY RD DO 387 SECTION QUESTION 388 invaaaa.example.test. IN AAAA 389 ENTRY_END 390 391 STEP 31 CHECK_ANSWER 392 ENTRY_BEGIN 393 MATCH all 394 REPLY QR RD RA DO SERVFAIL 395 SECTION QUESTION 396 invaaaa.example.test. IN AAAA 397 SECTION ANSWER 398 ; It is not: invaaaa.example.test. 3600 IN AAAA 64:ff9b::c000:202 399 ENTRY_END 400 401 ; from cache 402 STEP 40 QUERY 403 ENTRY_BEGIN 404 REPLY RD DO 405 SECTION QUESTION 406 invaaaa.example.test. IN AAAA 407 ENTRY_END 408 409 STEP 41 CHECK_ANSWER 410 ENTRY_BEGIN 411 MATCH all 412 REPLY QR RD RA DO SERVFAIL 413 SECTION QUESTION 414 invaaaa.example.test. IN AAAA 415 SECTION ANSWER 416 ENTRY_END 417 418 ; with cd flag 419 STEP 50 QUERY 420 ENTRY_BEGIN 421 REPLY RD CD DO 422 SECTION QUESTION 423 invaaaa.example.test. IN AAAA 424 ENTRY_END 425 426 STEP 51 CHECK_ANSWER 427 ENTRY_BEGIN 428 MATCH all 429 REPLY QR RD RA CD DO NOERROR 430 SECTION QUESTION 431 invaaaa.example.test. IN AAAA 432 SECTION ANSWER 433 SECTION AUTHORITY 434 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 435 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= ;{id = 55567} 436 invaaaa.example.test. 60 IN NSEC invaaaa2.example.test. A RRSIG NSEC 437 invaaaa.example.test. 60 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 11567 example.test. Xsc0PJbV3dYo6EweR5e/o4ROVNpJkWNdrDXNrU9vwwCOFrfdvkoOLCnmejpHM5V+v8yNt43l4gcurut8GU4hzBD2gdx1SdMV6k3Uv8UYRrQhidIwEynQRqaDhdAt7lCqTvKAn2iTHbHU9Fss0ezL01aYaCVTyPTeGZP6CgSzGU0= ;{id = 11567} 438 ENTRY_END 439 440 ; inva.example.test. 441 STEP 60 QUERY 442 ENTRY_BEGIN 443 REPLY RD DO 444 SECTION QUESTION 445 inva.example.test. IN AAAA 446 ENTRY_END 447 448 STEP 61 CHECK_ANSWER 449 ENTRY_BEGIN 450 MATCH all 451 REPLY QR RD RA DO SERVFAIL 452 SECTION QUESTION 453 inva.example.test. IN AAAA 454 SECTION ANSWER 455 ENTRY_END 456 457 ; from cache 458 STEP 70 QUERY 459 ENTRY_BEGIN 460 REPLY RD DO 461 SECTION QUESTION 462 inva.example.test. IN AAAA 463 ENTRY_END 464 465 STEP 71 CHECK_ANSWER 466 ENTRY_BEGIN 467 MATCH all 468 REPLY QR RD RA DO SERVFAIL 469 SECTION QUESTION 470 inva.example.test. IN AAAA 471 SECTION ANSWER 472 ENTRY_END 473 474 ; with cd flag 475 STEP 80 QUERY 476 ENTRY_BEGIN 477 REPLY RD CD DO 478 SECTION QUESTION 479 inva.example.test. IN AAAA 480 ENTRY_END 481 482 STEP 81 CHECK_ANSWER 483 ENTRY_BEGIN 484 MATCH all 485 REPLY QR RD RA AD CD DO NOERROR 486 SECTION QUESTION 487 inva.example.test. IN AAAA 488 SECTION ANSWER 489 SECTION AUTHORITY 490 example.test. 0 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 491 example.test. 0 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= ;{id = 55567} 492 inva.example.test. 0 IN NSEC inva2.example.test. A RRSIG NSEC 493 inva.example.test. 0 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. 1Rltlowol5kpdPYUuOt4GQJJjUr7UvJQGuhJ58Tuwxsd1rt/M+HAM61lzE2z6xcT2ezw5ja60lzNQsMiFYP0JCwcT6874X4er4+544O6fwFVcZPEh9jTOEH5TsjiYT1OltIsPf8LSUchRAo8LMSbHBpfFHe6JPZiyvBs4N60/hM= ;{id = 55567} 494 ENTRY_END 495 496 ; invboth.example.test. 497 STEP 90 QUERY 498 ENTRY_BEGIN 499 REPLY RD DO 500 SECTION QUESTION 501 invboth.example.test. IN AAAA 502 ENTRY_END 503 504 STEP 91 CHECK_ANSWER 505 ENTRY_BEGIN 506 MATCH all 507 REPLY QR RD RA DO SERVFAIL 508 SECTION QUESTION 509 invboth.example.test. IN AAAA 510 SECTION ANSWER 511 ENTRY_END 512 513 ; from cache 514 STEP 100 QUERY 515 ENTRY_BEGIN 516 REPLY RD DO 517 SECTION QUESTION 518 invboth.example.test. IN AAAA 519 ENTRY_END 520 521 STEP 101 CHECK_ANSWER 522 ENTRY_BEGIN 523 MATCH all 524 REPLY QR RD RA DO SERVFAIL 525 SECTION QUESTION 526 invboth.example.test. IN AAAA 527 SECTION ANSWER 528 ENTRY_END 529 530 ; with cd flag 531 STEP 110 QUERY 532 ENTRY_BEGIN 533 REPLY RD CD DO 534 SECTION QUESTION 535 invboth.example.test. IN AAAA 536 ENTRY_END 537 538 STEP 111 CHECK_ANSWER 539 ENTRY_BEGIN 540 MATCH all 541 REPLY QR RD RA CD DO NOERROR 542 SECTION QUESTION 543 invboth.example.test. IN AAAA 544 SECTION ANSWER 545 SECTION AUTHORITY 546 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 547 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= ;{id = 55567} 548 invboth.example.test. 60 IN NSEC invboth2.example.test. A RRSIG NSEC 549 invboth.example.test. 60 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 11567 example.test. w7oGj0Tb3o30iIknVEVToQ39DCQVUx9yV2mm1SkR4MBc4zj3eZRRoL40lHPrIndFRsrBxm7+pxdy29Nw+diWdQj5NnsEsPDSPRvkb04xaah22/zd7lmjLLx3qtFCZpEVbsLUGQAy546NmVlv65/TghlTFA3e6dOFtiwQhdWskyg= ;{id = 11567} 550 ENTRY_END 551 552 ; hasaaaa.example.test. 553 STEP 120 QUERY 554 ENTRY_BEGIN 555 REPLY RD DO 556 SECTION QUESTION 557 hasaaaa.example.test. IN AAAA 558 ENTRY_END 559 560 STEP 121 CHECK_ANSWER 561 ENTRY_BEGIN 562 MATCH all 563 REPLY QR RD RA AD DO NOERROR 564 SECTION QUESTION 565 hasaaaa.example.test. IN AAAA 566 SECTION ANSWER 567 hasaaaa.example.test. 0 IN AAAA 2001::db8:5 568 hasaaaa.example.test. 0 IN RRSIG AAAA 8 3 3600 20201116135527 20201019135527 55567 example.test. eat6Eh6Sqy9OE+BUIdUzzKuToqFn7K62oLbNUcj+JG/mlv85xeM3fKGbbwyR1mDbt/mghLfcchxWDoXtWJtYbItFVpRn4UyIuqK2w4igUb/Ic7iKoBJ4ZWlfYadE5MnAhVSQ094yAj3iUWydqQXVmTJ4UAJ3ouyzCJS8LojzZS8= ;{id = 55567} 569 ENTRY_END 570 571 ; from cache 572 STEP 130 QUERY 573 ENTRY_BEGIN 574 REPLY RD DO 575 SECTION QUESTION 576 hasaaaa.example.test. IN AAAA 577 ENTRY_END 578 579 STEP 131 CHECK_ANSWER 580 ENTRY_BEGIN 581 MATCH all 582 REPLY QR RD RA AD DO NOERROR 583 SECTION QUESTION 584 hasaaaa.example.test. IN AAAA 585 SECTION ANSWER 586 hasaaaa.example.test. 0 IN AAAA 2001::db8:5 587 hasaaaa.example.test. 0 IN RRSIG AAAA 8 3 3600 20201116135527 20201019135527 55567 example.test. eat6Eh6Sqy9OE+BUIdUzzKuToqFn7K62oLbNUcj+JG/mlv85xeM3fKGbbwyR1mDbt/mghLfcchxWDoXtWJtYbItFVpRn4UyIuqK2w4igUb/Ic7iKoBJ4ZWlfYadE5MnAhVSQ094yAj3iUWydqQXVmTJ4UAJ3ouyzCJS8LojzZS8= ;{id = 55567} 588 ENTRY_END 589 590 ; with cd flag 591 STEP 140 QUERY 592 ENTRY_BEGIN 593 REPLY RD CD DO 594 SECTION QUESTION 595 hasaaaa.example.test. IN AAAA 596 ENTRY_END 597 598 STEP 141 CHECK_ANSWER 599 ENTRY_BEGIN 600 MATCH all 601 REPLY QR RD RA AD CD DO NOERROR 602 SECTION QUESTION 603 hasaaaa.example.test. IN AAAA 604 SECTION ANSWER 605 hasaaaa.example.test. 0 IN AAAA 2001::db8:5 606 hasaaaa.example.test. 0 IN RRSIG AAAA 8 3 3600 20201116135527 20201019135527 55567 example.test. eat6Eh6Sqy9OE+BUIdUzzKuToqFn7K62oLbNUcj+JG/mlv85xeM3fKGbbwyR1mDbt/mghLfcchxWDoXtWJtYbItFVpRn4UyIuqK2w4igUb/Ic7iKoBJ4ZWlfYadE5MnAhVSQ094yAj3iUWydqQXVmTJ4UAJ3ouyzCJS8LojzZS8= ;{id = 55567} 607 ENTRY_END 608 609 SCENARIO_END 610