Home | History | Annotate | Line # | Download | only in testdata
      1 ; config options
      2 ; The island of trust is at test.
      3 server:
      4 	trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b"
      5 	val-override-date: "20201020135527"
      6 	target-fetch-policy: "0 0 0 0 0"
      7 	qname-minimisation: no
      8 	fake-sha1: yes
      9 	trust-anchor-signaling: no
     10 	minimal-responses: no
     11 	iter-scrub-promiscuous: no
     12 	local-zone: test. nodefault
     13 	log-servfail: yes
     14 	module-config: "dns64 validator iterator"
     15 	dns64-prefix: 64:ff9b::0/96
     16 
     17 stub-zone:
     18 	name: "."
     19 	stub-addr: 193.0.14.129 	# K.ROOT-SERVERS.NET.
     20 CONFIG_END
     21 
     22 SCENARIO_BEGIN Test DNS64 with DNSSEC validation.
     23 ; valid.example.test. both AAAA and A are DNSSEC valid
     24 ; invaaaa.example.test. AAAA is invalid, A is DNSSEC valid
     25 ; inva.example.test. AAAA is valid, A is DNSSEC invalid
     26 ; invboth.example.test. AAAA is invalid, A is DNSSEC invalid
     27 ; hasaaaa.example.test. has an AAAA record.
     28 ; queries with and without CD flag.
     29 
     30 ; K.ROOT-SERVERS.NET.
     31 RANGE_BEGIN 0 300
     32 	ADDRESS 193.0.14.129
     33 ENTRY_BEGIN
     34 MATCH opcode qtype qname
     35 ADJUST copy_id
     36 REPLY QR NOERROR
     37 SECTION QUESTION
     38 . IN NS
     39 SECTION ANSWER
     40 . IN NS	K.ROOT-SERVERS.NET.
     41 SECTION ADDITIONAL
     42 K.ROOT-SERVERS.NET.	IN	A	193.0.14.129
     43 ENTRY_END
     44 
     45 ENTRY_BEGIN
     46 MATCH opcode subdomain
     47 ADJUST copy_id copy_query
     48 REPLY QR NOERROR
     49 SECTION QUESTION
     50 test. IN NS
     51 SECTION AUTHORITY
     52 test.	IN NS	ns.test.
     53 SECTION ADDITIONAL
     54 ns.test. IN A 1.2.3.5
     55 ENTRY_END
     56 RANGE_END
     57 
     58 ; ns.test
     59 RANGE_BEGIN 0 300
     60 	ADDRESS 1.2.3.5
     61 ENTRY_BEGIN
     62 MATCH opcode qtype qname
     63 ADJUST copy_id
     64 REPLY QR AA NOERROR
     65 SECTION QUESTION
     66 test. IN NS
     67 SECTION ANSWER
     68 test.    IN NS   ns.test
     69 test.	3600	IN	RRSIG	NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s=
     70 SECTION ADDITIONAL
     71 ns.test. IN A 1.2.3.5
     72 ns.test.	3600	IN	RRSIG	A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw=
     73 ENTRY_END
     74 
     75 ENTRY_BEGIN
     76 MATCH opcode qtype qname
     77 ADJUST copy_id
     78 REPLY QR AA NOERROR
     79 SECTION QUESTION
     80 ns.test. IN A
     81 SECTION ANSWER
     82 ns.test. IN A 1.2.3.5
     83 ns.test.	3600	IN	RRSIG	A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw=
     84 ENTRY_END
     85 
     86 ENTRY_BEGIN
     87 MATCH opcode qtype qname
     88 ADJUST copy_id
     89 REPLY QR AA NOERROR
     90 SECTION QUESTION
     91 ns.test. IN AAAA
     92 SECTION AUTHORITY
     93 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600
     94 test.	3600	IN	RRSIG	SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw=
     95 ns.test. 3600 IN NSEC nz.test. A RRSIG
     96 ns.test.	3600	IN	RRSIG	NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU=
     97 ENTRY_END
     98 
     99 ENTRY_BEGIN
    100 MATCH opcode qtype qname
    101 ADJUST copy_id
    102 REPLY QR AA NOERROR
    103 SECTION QUESTION
    104 test. IN DNSKEY
    105 SECTION ANSWER
    106 test.    3600    IN      DNSKEY  257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b}
    107 test.	3600	IN	RRSIG	DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc=
    108 SECTION ADDITIONAL
    109 ENTRY_END
    110 
    111 ENTRY_BEGIN
    112 MATCH opcode qname qtype
    113 ADJUST copy_id
    114 REPLY QR AA NOERROR
    115 SECTION QUESTION
    116 example.test. IN DS
    117 SECTION ANSWER
    118 example.test.	3600	IN	DS	55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39
    119 example.test.	3600	IN	RRSIG	DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I=
    120 ENTRY_END
    121 
    122 ENTRY_BEGIN
    123 MATCH opcode subdomain
    124 ADJUST copy_id copy_query
    125 REPLY QR NOERROR
    126 SECTION QUESTION
    127 example.test. IN NS
    128 SECTION AUTHORITY
    129 example.test.    IN NS   ns.example.test.
    130 example.test.	3600	IN	DS	55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39
    131 example.test.	3600	IN	RRSIG	DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I=
    132 SECTION ADDITIONAL
    133 ns.example.test. IN A 1.2.3.4
    134 ENTRY_END
    135 RANGE_END
    136 
    137 ; ns.example.test.
    138 RANGE_BEGIN 0 300
    139 	ADDRESS 1.2.3.4
    140 ENTRY_BEGIN
    141 MATCH opcode qtype qname
    142 ADJUST copy_id
    143 REPLY QR NOERROR
    144 SECTION QUESTION
    145 example.test. IN NS
    146 SECTION ANSWER
    147 example.test.    IN NS   ns.example.test.
    148 example.test.	3600	IN	RRSIG	NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4=
    149 SECTION ADDITIONAL
    150 ns.example.test.         IN      A       1.2.3.4
    151 ns.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo=
    152 ENTRY_END
    153 
    154 ENTRY_BEGIN
    155 MATCH opcode qtype qname
    156 ADJUST copy_id
    157 REPLY QR AA NOERROR
    158 SECTION QUESTION
    159 ns.example.test. IN A
    160 SECTION ANSWER
    161 ns.example.test.         IN      A       1.2.3.4
    162 ns.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo=
    163 ENTRY_END
    164 
    165 ENTRY_BEGIN
    166 MATCH opcode qtype qname
    167 ADJUST copy_id
    168 REPLY QR AA NOERROR
    169 SECTION QUESTION
    170 ns.example.test. IN AAAA
    171 SECTION AUTHORITY
    172 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    173 example.test.	3600	IN	RRSIG	SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8=
    174 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG
    175 ns.example.test.	3600	IN	RRSIG	NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. v/5aO/n8Ow21y7LE7JKZsFkUJU5MjIfadVRm2Tdb8f3RLwYDdBTs3aWeeEQdCRSUF61TmfJM1jIxlWQPuHbqzGnjSk7adw9gFpP7wFwoqG3/xdCFHoxo/3/1F/4Ankey3sDgKgOFsgnu40TlL36mGPYszeK+/2o3SAx2GM+3BdU=
    176 ENTRY_END
    177 
    178 ; response to DNSKEY priming query
    179 ENTRY_BEGIN
    180 MATCH opcode qtype qname
    181 ADJUST copy_id
    182 REPLY QR NOERROR
    183 SECTION QUESTION
    184 example.test. IN DNSKEY
    185 SECTION ANSWER
    186 example.test.	3600	IN	DNSKEY	257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b}
    187 example.test.	3600	IN	RRSIG	DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g=
    188 ENTRY_END
    189 
    190 ; response to query of interest
    191 ENTRY_BEGIN
    192 MATCH opcode qtype qname
    193 ADJUST copy_id
    194 REPLY QR AA NOERROR
    195 SECTION QUESTION
    196 valid.example.test. AAAA
    197 SECTION ANSWER
    198 SECTION AUTHORITY
    199 example.test.	3600	IN	SOA	ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    200 example.test.	3600	IN	RRSIG	SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8=
    201 valid.example.test.	3600	IN	NSEC	valid2.example.test. A RRSIG NSEC
    202 valid.example.test.	3600	IN	RRSIG	NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. GgwpBUFe6s1OLhunIQt5IXPMc51bScvWApWC7j0GbqL3FvtDyHDW4+vBxSh4lxX+262wGkw4OksRXIq0jNm313s8RUKmfszKeNfOr7KwubNeTZnU8dhl7RwIbBAYzqv2KPT7fPX7Vi3sKYDbJrU+KJUBohueJdGf4Y6Ixcb6sqY=
    203 ENTRY_END
    204 
    205 ENTRY_BEGIN
    206 MATCH opcode qtype qname
    207 ADJUST copy_id
    208 REPLY QR AA NOERROR
    209 SECTION QUESTION
    210 valid.example.test. A
    211 SECTION ANSWER
    212 valid.example.test.	3600	IN	A	192.0.2.1
    213 valid.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. hZx175Bx+TmOZjv021Y5Os4254guBqMWLk9A1ixCM0B7v9s9WxMBidDvjiWO6dwjkvC4v8dfcoCWvoFfgwBNUFQQV9xDrqB06Oo4qyMftpyQrV/FsHrHQ7OlxaX/P5vhuPtQvLMj/J67P7WWIewqZV9SKP4I1vFX+c5L/uO/8Ts=
    214 ENTRY_END
    215 
    216 ENTRY_BEGIN
    217 MATCH opcode qtype qname
    218 ADJUST copy_id
    219 REPLY QR AA NOERROR
    220 SECTION QUESTION
    221 invaaaa.example.test. AAAA
    222 SECTION ANSWER
    223 SECTION AUTHORITY
    224 example.test.	3600	IN	SOA	ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    225 example.test.	3600	IN	RRSIG	SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8=
    226 invaaaa.example.test.	3600	IN	NSEC	invaaaa2.example.test. A RRSIG NSEC
    227 ; signature on the NSEC is invalidated: (wrong keytag)
    228 ; correct is:
    229 ; invaaaa.example.test.	3600	IN	RRSIG	NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. Xsc0PJbV3dYo6EweR5e/o4ROVNpJkWNdrDXNrU9vwwCOFrfdvkoOLCnmejpHM5V+v8yNt43l4gcurut8GU4hzBD2gdx1SdMV6k3Uv8UYRrQhidIwEynQRqaDhdAt7lCqTvKAn2iTHbHU9Fss0ezL01aYaCVTyPTeGZP6CgSzGU0=
    230 invaaaa.example.test.	3600	IN	RRSIG	NSEC 8 3 3600 20201116135527 20201019135527 11567 example.test. Xsc0PJbV3dYo6EweR5e/o4ROVNpJkWNdrDXNrU9vwwCOFrfdvkoOLCnmejpHM5V+v8yNt43l4gcurut8GU4hzBD2gdx1SdMV6k3Uv8UYRrQhidIwEynQRqaDhdAt7lCqTvKAn2iTHbHU9Fss0ezL01aYaCVTyPTeGZP6CgSzGU0=
    231 ENTRY_END
    232 
    233 ENTRY_BEGIN
    234 MATCH opcode qtype qname
    235 ADJUST copy_id
    236 REPLY QR AA NOERROR
    237 SECTION QUESTION
    238 invaaaa.example.test. A
    239 SECTION ANSWER
    240 invaaaa.example.test.	3600	IN	A	192.0.2.2
    241 invaaaa.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. vNWrVbz9L8eaBXIulg+zswK02cjy+stKxHhedDclVqduavv7+6ZV7idFY+zlHZU6KxrfjGB8/UFMkdpOlcgrAy0D9YQAVjm2zCKzx6f3GSenlNWMlhwgeAJb+ozP/cmrZ+ctqF7id9q4E5P08yTPHEqEcdXDMG0iTEuSvel/p7I=
    242 ENTRY_END
    243 
    244 ENTRY_BEGIN
    245 MATCH opcode qtype qname
    246 ADJUST copy_id
    247 REPLY QR AA NOERROR
    248 SECTION QUESTION
    249 inva.example.test. AAAA
    250 SECTION ANSWER
    251 SECTION AUTHORITY
    252 example.test.	3600	IN	SOA	ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    253 example.test.	3600	IN	RRSIG	SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8=
    254 inva.example.test.	3600	IN	NSEC	inva2.example.test. A RRSIG NSEC
    255 inva.example.test.	3600	IN	RRSIG	NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. 1Rltlowol5kpdPYUuOt4GQJJjUr7UvJQGuhJ58Tuwxsd1rt/M+HAM61lzE2z6xcT2ezw5ja60lzNQsMiFYP0JCwcT6874X4er4+544O6fwFVcZPEh9jTOEH5TsjiYT1OltIsPf8LSUchRAo8LMSbHBpfFHe6JPZiyvBs4N60/hM=
    256 ENTRY_END
    257 
    258 ENTRY_BEGIN
    259 MATCH opcode qtype qname
    260 ADJUST copy_id
    261 REPLY QR AA NOERROR
    262 SECTION QUESTION
    263 inva.example.test. A
    264 SECTION ANSWER
    265 inva.example.test.	3600	IN	A	192.0.2.3
    266 ; signature is invalidated: (wrong keytag)
    267 ; correct is:
    268 ;inva.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. CrBrpUkdpdDv/rg6u5I/Ja5FOHUvTl8g0wxymHfrm+qQMCJ86CHdsON6g8JyCE4HsZ6ZXEc9/s5Qxnse/awlEKGjvM6SYRbXhhbjJDDY2MoitwYXLAocq2gM0tqZeKMnYZzMRiRdhaL4XvwubHAtD/gU/RiF2/uequViwlaFo8w=
    269 inva.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 11567 example.test. CrBrpUkdpdDv/rg6u5I/Ja5FOHUvTl8g0wxymHfrm+qQMCJ86CHdsON6g8JyCE4HsZ6ZXEc9/s5Qxnse/awlEKGjvM6SYRbXhhbjJDDY2MoitwYXLAocq2gM0tqZeKMnYZzMRiRdhaL4XvwubHAtD/gU/RiF2/uequViwlaFo8w=
    270 ENTRY_END
    271 
    272 ENTRY_BEGIN
    273 MATCH opcode qtype qname
    274 ADJUST copy_id
    275 REPLY QR AA NOERROR
    276 SECTION QUESTION
    277 invboth.example.test. AAAA
    278 SECTION ANSWER
    279 SECTION AUTHORITY
    280 example.test.	3600	IN	SOA	ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    281 example.test.	3600	IN	RRSIG	SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8=
    282 invboth.example.test.	3600	IN	NSEC	invboth2.example.test. A RRSIG NSEC
    283 ; signature on the NSEC is invalidated: (wrong keytag)
    284 ; correct is:
    285 ;invboth.example.test.	3600	IN	RRSIG	NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. w7oGj0Tb3o30iIknVEVToQ39DCQVUx9yV2mm1SkR4MBc4zj3eZRRoL40lHPrIndFRsrBxm7+pxdy29Nw+diWdQj5NnsEsPDSPRvkb04xaah22/zd7lmjLLx3qtFCZpEVbsLUGQAy546NmVlv65/TghlTFA3e6dOFtiwQhdWskyg=
    286 invboth.example.test.	3600	IN	RRSIG	NSEC 8 3 3600 20201116135527 20201019135527 11567 example.test. w7oGj0Tb3o30iIknVEVToQ39DCQVUx9yV2mm1SkR4MBc4zj3eZRRoL40lHPrIndFRsrBxm7+pxdy29Nw+diWdQj5NnsEsPDSPRvkb04xaah22/zd7lmjLLx3qtFCZpEVbsLUGQAy546NmVlv65/TghlTFA3e6dOFtiwQhdWskyg=
    287 ENTRY_END
    288 
    289 ENTRY_BEGIN
    290 MATCH opcode qtype qname
    291 ADJUST copy_id
    292 REPLY QR AA NOERROR
    293 SECTION QUESTION
    294 invboth.example.test. A
    295 SECTION ANSWER
    296 invboth.example.test.	3600	IN	A	192.0.2.4
    297 ; signature is invalidated: (wrong keytag)
    298 ; correct is:
    299 ;invboth.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. Dt7oT9T55C83sIo8P21SzpB9WWBvEllrj0QXzCkO5Jb7XFtt7YwNnBmRMwbLbRol3YUVCkGaY/mSrATuP5xiq0sPulr8togzKWD0QOAJrxOnuk40ffkp1zrwiqkH7tRy5S9wQUx+vUt7RT1PcEqWufI4XRPmbhFuPXIMM1i8Te8=
    300 invboth.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 11567 example.test. Dt7oT9T55C83sIo8P21SzpB9WWBvEllrj0QXzCkO5Jb7XFtt7YwNnBmRMwbLbRol3YUVCkGaY/mSrATuP5xiq0sPulr8togzKWD0QOAJrxOnuk40ffkp1zrwiqkH7tRy5S9wQUx+vUt7RT1PcEqWufI4XRPmbhFuPXIMM1i8Te8=
    301 ENTRY_END
    302 
    303 ENTRY_BEGIN
    304 MATCH opcode qtype qname
    305 ADJUST copy_id
    306 REPLY QR AA NOERROR
    307 SECTION QUESTION
    308 hasaaaa.example.test. AAAA
    309 SECTION ANSWER
    310 hasaaaa.example.test.	3600	IN	AAAA	2001::db8:5
    311 hasaaaa.example.test.	3600	IN	RRSIG	AAAA 8 3 3600 20201116135527 20201019135527 55567 example.test. eat6Eh6Sqy9OE+BUIdUzzKuToqFn7K62oLbNUcj+JG/mlv85xeM3fKGbbwyR1mDbt/mghLfcchxWDoXtWJtYbItFVpRn4UyIuqK2w4igUb/Ic7iKoBJ4ZWlfYadE5MnAhVSQ094yAj3iUWydqQXVmTJ4UAJ3ouyzCJS8LojzZS8=
    312 ENTRY_END
    313 
    314 ENTRY_BEGIN
    315 MATCH opcode qtype qname
    316 ADJUST copy_id
    317 REPLY QR AA NOERROR
    318 SECTION QUESTION
    319 hasaaaa.example.test. A
    320 SECTION ANSWER
    321 hasaaaa.example.test.	3600	IN	A	192.0.2.5
    322 hasaaaa.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. Lh0DMv541AunEERFv3Zck1JE4fCC48V247y5+4O/ciblzc67VDjlCnp2BAXtjoYgWmvRqtxgPMzttALbHN2YxweX0Tq6/Ji0iyvLepC6a0+LjT45KPAmXYEigX/oxyUX7bxKXJ0k+Tm9FdnesDMGuoDuk7gVYi9Bdrst8DWULJc=
    323 ENTRY_END
    324 RANGE_END
    325 
    326 STEP 1 QUERY
    327 ENTRY_BEGIN
    328 REPLY RD DO
    329 SECTION QUESTION
    330 valid.example.test. IN AAAA
    331 ENTRY_END
    332 
    333 STEP 2 CHECK_ANSWER
    334 ENTRY_BEGIN
    335 MATCH all
    336 REPLY QR RD RA AD DO NOERROR
    337 SECTION QUESTION
    338 valid.example.test. IN AAAA
    339 SECTION ANSWER
    340 valid.example.test.     0       IN      AAAA    64:ff9b::c000:201
    341 ENTRY_END
    342 
    343 ; from cache
    344 STEP 10 QUERY
    345 ENTRY_BEGIN
    346 REPLY RD DO
    347 SECTION QUESTION
    348 valid.example.test. IN AAAA
    349 ENTRY_END
    350 
    351 STEP 11 CHECK_ANSWER
    352 ENTRY_BEGIN
    353 MATCH all
    354 REPLY QR RD RA AD DO NOERROR
    355 SECTION QUESTION
    356 valid.example.test. IN AAAA
    357 SECTION ANSWER
    358 valid.example.test.     0       IN      AAAA    64:ff9b::c000:201
    359 ENTRY_END
    360 
    361 ; with cd flag
    362 STEP 20 QUERY
    363 ENTRY_BEGIN
    364 REPLY RD CD DO
    365 SECTION QUESTION
    366 valid.example.test. IN AAAA
    367 ENTRY_END
    368 
    369 STEP 21 CHECK_ANSWER
    370 ENTRY_BEGIN
    371 MATCH all
    372 REPLY QR RD RA AD CD DO NOERROR
    373 SECTION QUESTION
    374 valid.example.test. IN AAAA
    375 SECTION ANSWER
    376 SECTION AUTHORITY
    377 example.test.   3600    IN      SOA     ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    378 example.test.   3600    IN      RRSIG   SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= ;{id = 55567}
    379 valid.example.test.     3600    IN      NSEC    valid2.example.test. A RRSIG NSEC
    380 valid.example.test.     3600    IN      RRSIG   NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. GgwpBUFe6s1OLhunIQt5IXPMc51bScvWApWC7j0GbqL3FvtDyHDW4+vBxSh4lxX+262wGkw4OksRXIq0jNm313s8RUKmfszKeNfOr7KwubNeTZnU8dhl7RwIbBAYzqv2KPT7fPX7Vi3sKYDbJrU+KJUBohueJdGf4Y6Ixcb6sqY= ;{id = 55567}
    381 ENTRY_END
    382 
    383 ; invaaaa.example.test.
    384 STEP 30 QUERY
    385 ENTRY_BEGIN
    386 REPLY RD DO
    387 SECTION QUESTION
    388 invaaaa.example.test. IN AAAA
    389 ENTRY_END
    390 
    391 STEP 31 CHECK_ANSWER
    392 ENTRY_BEGIN
    393 MATCH all
    394 REPLY QR RD RA DO SERVFAIL
    395 SECTION QUESTION
    396 invaaaa.example.test. IN AAAA
    397 SECTION ANSWER
    398 ; It is not: invaaaa.example.test.   3600    IN      AAAA    64:ff9b::c000:202
    399 ENTRY_END
    400 
    401 ; from cache
    402 STEP 40 QUERY
    403 ENTRY_BEGIN
    404 REPLY RD DO
    405 SECTION QUESTION
    406 invaaaa.example.test. IN AAAA
    407 ENTRY_END
    408 
    409 STEP 41 CHECK_ANSWER
    410 ENTRY_BEGIN
    411 MATCH all
    412 REPLY QR RD RA DO SERVFAIL
    413 SECTION QUESTION
    414 invaaaa.example.test. IN AAAA
    415 SECTION ANSWER
    416 ENTRY_END
    417 
    418 ; with cd flag
    419 STEP 50 QUERY
    420 ENTRY_BEGIN
    421 REPLY RD CD DO
    422 SECTION QUESTION
    423 invaaaa.example.test. IN AAAA
    424 ENTRY_END
    425 
    426 STEP 51 CHECK_ANSWER
    427 ENTRY_BEGIN
    428 MATCH all
    429 REPLY QR RD RA CD DO NOERROR
    430 SECTION QUESTION
    431 invaaaa.example.test. IN AAAA
    432 SECTION ANSWER
    433 SECTION AUTHORITY
    434 example.test.   3600    IN      SOA     ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    435 example.test.   3600    IN      RRSIG   SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= ;{id = 55567}
    436 invaaaa.example.test.   60      IN      NSEC    invaaaa2.example.test. A RRSIG NSEC
    437 invaaaa.example.test.   60      IN      RRSIG   NSEC 8 3 3600 20201116135527 20201019135527 11567 example.test. Xsc0PJbV3dYo6EweR5e/o4ROVNpJkWNdrDXNrU9vwwCOFrfdvkoOLCnmejpHM5V+v8yNt43l4gcurut8GU4hzBD2gdx1SdMV6k3Uv8UYRrQhidIwEynQRqaDhdAt7lCqTvKAn2iTHbHU9Fss0ezL01aYaCVTyPTeGZP6CgSzGU0= ;{id = 11567}
    438 ENTRY_END
    439 
    440 ; inva.example.test.
    441 STEP 60 QUERY
    442 ENTRY_BEGIN
    443 REPLY RD DO
    444 SECTION QUESTION
    445 inva.example.test. IN AAAA
    446 ENTRY_END
    447 
    448 STEP 61 CHECK_ANSWER
    449 ENTRY_BEGIN
    450 MATCH all
    451 REPLY QR RD RA DO SERVFAIL
    452 SECTION QUESTION
    453 inva.example.test. IN AAAA
    454 SECTION ANSWER
    455 ENTRY_END
    456 
    457 ; from cache
    458 STEP 70 QUERY
    459 ENTRY_BEGIN
    460 REPLY RD DO
    461 SECTION QUESTION
    462 inva.example.test. IN AAAA
    463 ENTRY_END
    464 
    465 STEP 71 CHECK_ANSWER
    466 ENTRY_BEGIN
    467 MATCH all
    468 REPLY QR RD RA DO SERVFAIL
    469 SECTION QUESTION
    470 inva.example.test. IN AAAA
    471 SECTION ANSWER
    472 ENTRY_END
    473 
    474 ; with cd flag
    475 STEP 80 QUERY
    476 ENTRY_BEGIN
    477 REPLY RD CD DO
    478 SECTION QUESTION
    479 inva.example.test. IN AAAA
    480 ENTRY_END
    481 
    482 STEP 81 CHECK_ANSWER
    483 ENTRY_BEGIN
    484 MATCH all
    485 REPLY QR RD RA AD CD DO NOERROR
    486 SECTION QUESTION
    487 inva.example.test. IN AAAA
    488 SECTION ANSWER
    489 SECTION AUTHORITY
    490 example.test.   0       IN      SOA     ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    491 example.test.   0       IN      RRSIG   SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= ;{id = 55567}
    492 inva.example.test.      0       IN      NSEC    inva2.example.test. A RRSIG NSEC
    493 inva.example.test.      0       IN      RRSIG   NSEC 8 3 3600 20201116135527 20201019135527 55567 example.test. 1Rltlowol5kpdPYUuOt4GQJJjUr7UvJQGuhJ58Tuwxsd1rt/M+HAM61lzE2z6xcT2ezw5ja60lzNQsMiFYP0JCwcT6874X4er4+544O6fwFVcZPEh9jTOEH5TsjiYT1OltIsPf8LSUchRAo8LMSbHBpfFHe6JPZiyvBs4N60/hM= ;{id = 55567}
    494 ENTRY_END
    495 
    496 ; invboth.example.test.
    497 STEP 90 QUERY
    498 ENTRY_BEGIN
    499 REPLY RD DO
    500 SECTION QUESTION
    501 invboth.example.test. IN AAAA
    502 ENTRY_END
    503 
    504 STEP 91 CHECK_ANSWER
    505 ENTRY_BEGIN
    506 MATCH all
    507 REPLY QR RD RA DO SERVFAIL
    508 SECTION QUESTION
    509 invboth.example.test. IN AAAA
    510 SECTION ANSWER
    511 ENTRY_END
    512 
    513 ; from cache
    514 STEP 100 QUERY
    515 ENTRY_BEGIN
    516 REPLY RD DO
    517 SECTION QUESTION
    518 invboth.example.test. IN AAAA
    519 ENTRY_END
    520 
    521 STEP 101 CHECK_ANSWER
    522 ENTRY_BEGIN
    523 MATCH all
    524 REPLY QR RD RA DO SERVFAIL
    525 SECTION QUESTION
    526 invboth.example.test. IN AAAA
    527 SECTION ANSWER
    528 ENTRY_END
    529 
    530 ; with cd flag
    531 STEP 110 QUERY
    532 ENTRY_BEGIN
    533 REPLY RD CD DO
    534 SECTION QUESTION
    535 invboth.example.test. IN AAAA
    536 ENTRY_END
    537 
    538 STEP 111 CHECK_ANSWER
    539 ENTRY_BEGIN
    540 MATCH all
    541 REPLY QR RD RA CD DO NOERROR
    542 SECTION QUESTION
    543 invboth.example.test. IN AAAA
    544 SECTION ANSWER
    545 SECTION AUTHORITY
    546 example.test.   3600    IN      SOA     ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    547 example.test.   3600    IN      RRSIG   SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= ;{id = 55567}
    548 invboth.example.test.   60      IN      NSEC    invboth2.example.test. A RRSIG NSEC
    549 invboth.example.test.   60      IN      RRSIG   NSEC 8 3 3600 20201116135527 20201019135527 11567 example.test. w7oGj0Tb3o30iIknVEVToQ39DCQVUx9yV2mm1SkR4MBc4zj3eZRRoL40lHPrIndFRsrBxm7+pxdy29Nw+diWdQj5NnsEsPDSPRvkb04xaah22/zd7lmjLLx3qtFCZpEVbsLUGQAy546NmVlv65/TghlTFA3e6dOFtiwQhdWskyg= ;{id = 11567}
    550 ENTRY_END
    551 
    552 ; hasaaaa.example.test.
    553 STEP 120 QUERY
    554 ENTRY_BEGIN
    555 REPLY RD DO
    556 SECTION QUESTION
    557 hasaaaa.example.test. IN AAAA
    558 ENTRY_END
    559 
    560 STEP 121 CHECK_ANSWER
    561 ENTRY_BEGIN
    562 MATCH all
    563 REPLY QR RD RA AD DO NOERROR
    564 SECTION QUESTION
    565 hasaaaa.example.test. IN AAAA
    566 SECTION ANSWER
    567 hasaaaa.example.test.   0       IN      AAAA    2001::db8:5
    568 hasaaaa.example.test.   0       IN      RRSIG   AAAA 8 3 3600 20201116135527 20201019135527 55567 example.test. eat6Eh6Sqy9OE+BUIdUzzKuToqFn7K62oLbNUcj+JG/mlv85xeM3fKGbbwyR1mDbt/mghLfcchxWDoXtWJtYbItFVpRn4UyIuqK2w4igUb/Ic7iKoBJ4ZWlfYadE5MnAhVSQ094yAj3iUWydqQXVmTJ4UAJ3ouyzCJS8LojzZS8= ;{id = 55567}
    569 ENTRY_END
    570 
    571 ; from cache
    572 STEP 130 QUERY
    573 ENTRY_BEGIN
    574 REPLY RD DO
    575 SECTION QUESTION
    576 hasaaaa.example.test. IN AAAA
    577 ENTRY_END
    578 
    579 STEP 131 CHECK_ANSWER
    580 ENTRY_BEGIN
    581 MATCH all
    582 REPLY QR RD RA AD DO NOERROR
    583 SECTION QUESTION
    584 hasaaaa.example.test. IN AAAA
    585 SECTION ANSWER
    586 hasaaaa.example.test.   0       IN      AAAA    2001::db8:5
    587 hasaaaa.example.test.   0       IN      RRSIG   AAAA 8 3 3600 20201116135527 20201019135527 55567 example.test. eat6Eh6Sqy9OE+BUIdUzzKuToqFn7K62oLbNUcj+JG/mlv85xeM3fKGbbwyR1mDbt/mghLfcchxWDoXtWJtYbItFVpRn4UyIuqK2w4igUb/Ic7iKoBJ4ZWlfYadE5MnAhVSQ094yAj3iUWydqQXVmTJ4UAJ3ouyzCJS8LojzZS8= ;{id = 55567}
    588 ENTRY_END
    589 
    590 ; with cd flag
    591 STEP 140 QUERY
    592 ENTRY_BEGIN
    593 REPLY RD CD DO
    594 SECTION QUESTION
    595 hasaaaa.example.test. IN AAAA
    596 ENTRY_END
    597 
    598 STEP 141 CHECK_ANSWER
    599 ENTRY_BEGIN
    600 MATCH all
    601 REPLY QR RD RA AD CD DO NOERROR
    602 SECTION QUESTION
    603 hasaaaa.example.test. IN AAAA
    604 SECTION ANSWER
    605 hasaaaa.example.test.   0       IN      AAAA    2001::db8:5
    606 hasaaaa.example.test.   0       IN      RRSIG   AAAA 8 3 3600 20201116135527 20201019135527 55567 example.test. eat6Eh6Sqy9OE+BUIdUzzKuToqFn7K62oLbNUcj+JG/mlv85xeM3fKGbbwyR1mDbt/mghLfcchxWDoXtWJtYbItFVpRn4UyIuqK2w4igUb/Ic7iKoBJ4ZWlfYadE5MnAhVSQ094yAj3iUWydqQXVmTJ4UAJ3ouyzCJS8LojzZS8= ;{id = 55567}
    607 ENTRY_END
    608 
    609 SCENARIO_END
    610