1 1.1 christos ; config options 2 1.1 christos ; The island of trust is at test. 3 1.1 christos server: 4 1.1 christos trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 5 1.1 christos val-override-date: "20201020135527" 6 1.1 christos target-fetch-policy: "0 0 0 0 0" 7 1.1 christos qname-minimisation: "no" 8 1.1 christos fake-sha1: yes 9 1.1 christos trust-anchor-signaling: no 10 1.1 christos minimal-responses: no 11 1.1 christos iter-scrub-promiscuous: no 12 1.1 christos aggressive-nsec: yes 13 1.1 christos local-zone: test. nodefault 14 1.1 christos log-servfail: yes 15 1.1 christos 16 1.1 christos stub-zone: 17 1.1 christos name: "." 18 1.1 christos stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 19 1.1 christos CONFIG_END 20 1.1 christos 21 1.1 christos SCENARIO_BEGIN Test val fill reply for uninit copy. 22 1.1 christos ; Test DNSSEC validator additional section processing use of uninit data. 23 1.1 christos 24 1.1 christos ; K.ROOT-SERVERS.NET. 25 1.1 christos RANGE_BEGIN 0 100 26 1.1 christos ADDRESS 193.0.14.129 27 1.1 christos ENTRY_BEGIN 28 1.1 christos MATCH opcode qtype qname 29 1.1 christos ADJUST copy_id 30 1.1 christos REPLY QR NOERROR 31 1.1 christos SECTION QUESTION 32 1.1 christos . IN NS 33 1.1 christos SECTION ANSWER 34 1.1 christos . IN NS K.ROOT-SERVERS.NET. 35 1.1 christos SECTION ADDITIONAL 36 1.1 christos K.ROOT-SERVERS.NET. IN A 193.0.14.129 37 1.1 christos ENTRY_END 38 1.1 christos 39 1.1 christos ENTRY_BEGIN 40 1.1 christos MATCH opcode subdomain 41 1.1 christos ADJUST copy_id copy_query 42 1.1 christos REPLY QR NOERROR 43 1.1 christos SECTION QUESTION 44 1.1 christos test. IN NS 45 1.1 christos SECTION AUTHORITY 46 1.1 christos test. IN NS ns.test. 47 1.1 christos SECTION ADDITIONAL 48 1.1 christos ns.test. IN A 1.2.3.5 49 1.1 christos ENTRY_END 50 1.1 christos RANGE_END 51 1.1 christos 52 1.1 christos ; ns.test 53 1.1 christos RANGE_BEGIN 0 100 54 1.1 christos ADDRESS 1.2.3.5 55 1.1 christos ENTRY_BEGIN 56 1.1 christos MATCH opcode qtype qname 57 1.1 christos ADJUST copy_id 58 1.1 christos REPLY QR AA NOERROR 59 1.1 christos SECTION QUESTION 60 1.1 christos test. IN NS 61 1.1 christos SECTION ANSWER 62 1.1 christos test. IN NS ns.test 63 1.1 christos test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 64 1.1 christos SECTION ADDITIONAL 65 1.1 christos ns.test. IN A 1.2.3.5 66 1.1 christos ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 67 1.1 christos ENTRY_END 68 1.1 christos 69 1.1 christos ENTRY_BEGIN 70 1.1 christos MATCH opcode qtype qname 71 1.1 christos ADJUST copy_id 72 1.1 christos REPLY QR AA NOERROR 73 1.1 christos SECTION QUESTION 74 1.1 christos ns.test. IN A 75 1.1 christos SECTION ANSWER 76 1.1 christos ns.test. IN A 1.2.3.5 77 1.1 christos ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 78 1.1 christos ENTRY_END 79 1.1 christos 80 1.1 christos ENTRY_BEGIN 81 1.1 christos MATCH opcode qtype qname 82 1.1 christos ADJUST copy_id 83 1.1 christos REPLY QR AA NOERROR 84 1.1 christos SECTION QUESTION 85 1.1 christos ns.test. IN AAAA 86 1.1 christos SECTION AUTHORITY 87 1.1 christos test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 88 1.1 christos test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 89 1.1 christos ns.test. 3600 IN NSEC nz.test. A RRSIG 90 1.1 christos ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 91 1.1 christos ENTRY_END 92 1.1 christos 93 1.1 christos ENTRY_BEGIN 94 1.1 christos MATCH opcode qtype qname 95 1.1 christos ADJUST copy_id 96 1.1 christos REPLY QR AA NOERROR 97 1.1 christos SECTION QUESTION 98 1.1 christos test. IN DNSKEY 99 1.1 christos SECTION ANSWER 100 1.1 christos test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 101 1.1 christos test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 102 1.1 christos SECTION ADDITIONAL 103 1.1 christos ENTRY_END 104 1.1 christos 105 1.1 christos ENTRY_BEGIN 106 1.1 christos MATCH opcode qname qtype 107 1.1 christos ADJUST copy_id 108 1.1 christos REPLY QR AA NOERROR 109 1.1 christos SECTION QUESTION 110 1.1 christos example.test. IN DS 111 1.1 christos SECTION ANSWER 112 1.1 christos example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 113 1.1 christos example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 114 1.1 christos ENTRY_END 115 1.1 christos 116 1.1 christos ENTRY_BEGIN 117 1.1 christos MATCH opcode subdomain 118 1.1 christos ADJUST copy_id copy_query 119 1.1 christos REPLY QR NOERROR 120 1.1 christos SECTION QUESTION 121 1.1 christos example.test. IN NS 122 1.1 christos SECTION AUTHORITY 123 1.1 christos example.test. IN NS ns.example.test. 124 1.1 christos example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 125 1.1 christos example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 126 1.1 christos SECTION ADDITIONAL 127 1.1 christos ns.example.test. IN A 1.2.3.4 128 1.1 christos ENTRY_END 129 1.1 christos RANGE_END 130 1.1 christos 131 1.1 christos ; ns.example.test. 132 1.1 christos RANGE_BEGIN 0 100 133 1.1 christos ADDRESS 1.2.3.4 134 1.1 christos ENTRY_BEGIN 135 1.1 christos MATCH opcode qtype qname 136 1.1 christos ADJUST copy_id 137 1.1 christos REPLY QR NOERROR 138 1.1 christos SECTION QUESTION 139 1.1 christos example.test. IN NS 140 1.1 christos SECTION ANSWER 141 1.1 christos example.test. IN NS ns.example.test. 142 1.1 christos example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 143 1.1 christos SECTION ADDITIONAL 144 1.1 christos ns.example.test. IN A 1.2.3.4 145 1.1 christos ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 146 1.1 christos ENTRY_END 147 1.1 christos 148 1.1 christos ENTRY_BEGIN 149 1.1 christos MATCH opcode qtype qname 150 1.1 christos ADJUST copy_id 151 1.1 christos REPLY QR AA NOERROR 152 1.1 christos SECTION QUESTION 153 1.1 christos ns.example.test. IN A 154 1.1 christos SECTION ANSWER 155 1.1 christos ns.example.test. IN A 1.2.3.4 156 1.1 christos ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 157 1.1 christos ENTRY_END 158 1.1 christos 159 1.1 christos ENTRY_BEGIN 160 1.1 christos MATCH opcode qtype qname 161 1.1 christos ADJUST copy_id 162 1.1 christos REPLY QR AA NOERROR 163 1.1 christos SECTION QUESTION 164 1.1 christos ns.example.test. IN AAAA 165 1.1 christos SECTION AUTHORITY 166 1.1 christos example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 167 1.1 christos example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 168 1.1 christos ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 169 1.1 christos example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 170 1.1 christos ENTRY_END 171 1.1 christos 172 1.1 christos ; response to DNSKEY priming query 173 1.1 christos ENTRY_BEGIN 174 1.1 christos MATCH opcode qtype qname 175 1.1 christos ADJUST copy_id 176 1.1 christos REPLY QR NOERROR 177 1.1 christos SECTION QUESTION 178 1.1 christos example.test. IN DNSKEY 179 1.1 christos SECTION ANSWER 180 1.1 christos example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 181 1.1 christos example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 182 1.1 christos ENTRY_END 183 1.1 christos 184 1.1 christos ; response to query of interest 185 1.1 christos ENTRY_BEGIN 186 1.1 christos MATCH opcode qtype qname 187 1.1 christos ADJUST copy_id 188 1.1 christos REPLY QR AA NOERROR 189 1.1 christos SECTION QUESTION 190 1.1 christos a.d.example.test. IN MX 191 1.1 christos SECTION ANSWER 192 1.1 christos d.example.test. 3600 IN DNAME tgt.example.test. 193 1.1 christos d.example.test. 3600 IN RRSIG DNAME 8 3 3600 20201116135527 20201019135527 55567 example.test. EGpXUnJuzkETAO2OWyZDrTeInnyxF7CXPXGDfFt2x3CBUeckUUZcgQQ3yMh+BATKph2nOhBfk8klvZ35C9sQO7Z32REAnqGjpHiR86xRPYxG62Nk9kXv1Odeh/adz2QhB93N8U7W57FM0P/VQDkP0GQXTSRGTuj+7ihfYVd4HWI= 194 1.1 christos a.d.example.test. 3600 IN CNAME a.tgt.example.test. 195 1.1 christos ENTRY_END 196 1.1 christos 197 1.1 christos ENTRY_BEGIN 198 1.1 christos MATCH opcode qtype qname 199 1.1 christos ADJUST copy_id 200 1.1 christos REPLY QR AA NOERROR 201 1.1 christos SECTION QUESTION 202 1.1 christos a.tgt.example.test. IN MX 203 1.1 christos SECTION ANSWER 204 1.1 christos a.tgt.example.test. 3600 IN CNAME b.d.example.test. 205 1.1 christos a.tgt.example.test. 3600 IN RRSIG CNAME 8 4 3600 20201116135527 20201019135527 55567 example.test. XHYWSHIm9J8j8T1qMh1tHZS71UguXYUVescKPFtoGHRuyRhHNob+NAqdn3I4/+8HSSGrJDqhTX/Vo3rcc3/g5HOHScwzZByB/diyJWpG9IA7pm7c7FnHnHpGBVdHq9wXlkgCPiaJShpE1zg1nNy3p99ca9/wh4y9XWSfcl0L8aw= 206 1.1 christos ENTRY_END 207 1.1 christos 208 1.1 christos ENTRY_BEGIN 209 1.1 christos MATCH opcode qtype qname 210 1.1 christos ADJUST copy_id 211 1.1 christos REPLY QR AA NOERROR 212 1.1 christos SECTION QUESTION 213 1.1 christos b.d.example.test. IN MX 214 1.1 christos SECTION ANSWER 215 1.1 christos b.d.example.test. 3600 IN CNAME c.d.example.test. 216 1.1 christos ; (unsigned - no RRSIG) 217 1.1 christos ENTRY_END 218 1.1 christos 219 1.1 christos ENTRY_BEGIN 220 1.1 christos MATCH opcode qtype qname 221 1.1 christos ADJUST copy_id 222 1.1 christos REPLY QR AA NOERROR 223 1.1 christos SECTION QUESTION 224 1.1 christos c.d.example.test. IN MX 225 1.1 christos SECTION ANSWER 226 1.1 christos c.d.example.test. 3600 IN CNAME evil.example.test. 227 1.1 christos ; (unsigned - no RRSIG) 228 1.1 christos ENTRY_END 229 1.1 christos 230 1.1 christos ENTRY_BEGIN 231 1.1 christos MATCH opcode qtype qname 232 1.1 christos ADJUST copy_id 233 1.1 christos REPLY QR AA NOERROR 234 1.1 christos SECTION QUESTION 235 1.1 christos evil.example.test. IN MX 236 1.1 christos SECTION ANSWER 237 1.1 christos evil.example.test. 3600 IN MX 10 mail.example.test. 238 1.1 christos evil.example.test. 3600 IN RRSIG MX 8 3 3600 20201116135527 20201019135527 55567 example.test. ddinUzYoxk5OLUFBVdfFqyz39P6Z+VfQciTRC2EmEl+tbD/oJGFaEEnoU2eZil7E/kOygTFwFShDrmCYUq9W3DTpDKSaj1ci2Wze1E9zwOZguSwevAtw7qEenQei2TgPWrH39OlOwcW31Siqm9RDfX9eTRW72L1qYvqXnkTIctU= 239 1.1 christos SECTION AUTHORITY 240 1.1 christos evil.example.test. 3600 IN NSEC evil.example.test. MX RRSIG 241 1.1 christos ; (unsigned) 242 1.1 christos SECTION ADDITIONAL 243 1.1 christos mail.example.test. 3600 IN A 192.0.2.10 244 1.1 christos mail.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. JYvTCMU4isgSHS7R0tGUE+3i0FdPvKFENylO8bSuDzYr2iR8Ac6CFq8OepOYn4QUp73CL7QHho2Zy6Hxn4FK/5ryynGc3IjP9gvpV1YZ54TPKmvJkhWasRoALdrPqaWKS3i2Jyr6LeGgwc7Tlntc5ZwEdr4rOAJ0MgVpPpUxjnk= 245 1.1 christos ENTRY_END 246 1.1 christos RANGE_END 247 1.1 christos 248 1.1 christos STEP 1 QUERY 249 1.1 christos ENTRY_BEGIN 250 1.1 christos REPLY RD DO 251 1.1 christos SECTION QUESTION 252 1.1 christos a.d.example.test. IN MX 253 1.1 christos ENTRY_END 254 1.1 christos 255 1.1 christos STEP 10 CHECK_ANSWER 256 1.1 christos ENTRY_BEGIN 257 1.1 christos MATCH all 258 1.1 christos REPLY QR RD RA DO SERVFAIL 259 1.1 christos SECTION QUESTION 260 1.1 christos a.d.example.test. IN MX 261 1.1 christos SECTION ANSWER 262 1.1 christos ; The reply is bogus due to the 'NSEC' rrset missing signatures. 263 1.1 christos ENTRY_END 264 1.1 christos 265 1.1 christos SCENARIO_END 266