fill_reply_uninit.rpl revision 1.1
1 ; config options 2 ; The island of trust is at test. 3 server: 4 trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 5 val-override-date: "20201020135527" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: "no" 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 minimal-responses: no 11 iter-scrub-promiscuous: no 12 aggressive-nsec: yes 13 local-zone: test. nodefault 14 log-servfail: yes 15 16 stub-zone: 17 name: "." 18 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 19 CONFIG_END 20 21 SCENARIO_BEGIN Test val fill reply for uninit copy. 22 ; Test DNSSEC validator additional section processing use of uninit data. 23 24 ; K.ROOT-SERVERS.NET. 25 RANGE_BEGIN 0 100 26 ADDRESS 193.0.14.129 27 ENTRY_BEGIN 28 MATCH opcode qtype qname 29 ADJUST copy_id 30 REPLY QR NOERROR 31 SECTION QUESTION 32 . IN NS 33 SECTION ANSWER 34 . IN NS K.ROOT-SERVERS.NET. 35 SECTION ADDITIONAL 36 K.ROOT-SERVERS.NET. IN A 193.0.14.129 37 ENTRY_END 38 39 ENTRY_BEGIN 40 MATCH opcode subdomain 41 ADJUST copy_id copy_query 42 REPLY QR NOERROR 43 SECTION QUESTION 44 test. IN NS 45 SECTION AUTHORITY 46 test. IN NS ns.test. 47 SECTION ADDITIONAL 48 ns.test. IN A 1.2.3.5 49 ENTRY_END 50 RANGE_END 51 52 ; ns.test 53 RANGE_BEGIN 0 100 54 ADDRESS 1.2.3.5 55 ENTRY_BEGIN 56 MATCH opcode qtype qname 57 ADJUST copy_id 58 REPLY QR AA NOERROR 59 SECTION QUESTION 60 test. IN NS 61 SECTION ANSWER 62 test. IN NS ns.test 63 test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 64 SECTION ADDITIONAL 65 ns.test. IN A 1.2.3.5 66 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 67 ENTRY_END 68 69 ENTRY_BEGIN 70 MATCH opcode qtype qname 71 ADJUST copy_id 72 REPLY QR AA NOERROR 73 SECTION QUESTION 74 ns.test. IN A 75 SECTION ANSWER 76 ns.test. IN A 1.2.3.5 77 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 78 ENTRY_END 79 80 ENTRY_BEGIN 81 MATCH opcode qtype qname 82 ADJUST copy_id 83 REPLY QR AA NOERROR 84 SECTION QUESTION 85 ns.test. IN AAAA 86 SECTION AUTHORITY 87 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 88 test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 89 ns.test. 3600 IN NSEC nz.test. A RRSIG 90 ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 91 ENTRY_END 92 93 ENTRY_BEGIN 94 MATCH opcode qtype qname 95 ADJUST copy_id 96 REPLY QR AA NOERROR 97 SECTION QUESTION 98 test. IN DNSKEY 99 SECTION ANSWER 100 test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 101 test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 102 SECTION ADDITIONAL 103 ENTRY_END 104 105 ENTRY_BEGIN 106 MATCH opcode qname qtype 107 ADJUST copy_id 108 REPLY QR AA NOERROR 109 SECTION QUESTION 110 example.test. IN DS 111 SECTION ANSWER 112 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 113 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 114 ENTRY_END 115 116 ENTRY_BEGIN 117 MATCH opcode subdomain 118 ADJUST copy_id copy_query 119 REPLY QR NOERROR 120 SECTION QUESTION 121 example.test. IN NS 122 SECTION AUTHORITY 123 example.test. IN NS ns.example.test. 124 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 125 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 126 SECTION ADDITIONAL 127 ns.example.test. IN A 1.2.3.4 128 ENTRY_END 129 RANGE_END 130 131 ; ns.example.test. 132 RANGE_BEGIN 0 100 133 ADDRESS 1.2.3.4 134 ENTRY_BEGIN 135 MATCH opcode qtype qname 136 ADJUST copy_id 137 REPLY QR NOERROR 138 SECTION QUESTION 139 example.test. IN NS 140 SECTION ANSWER 141 example.test. IN NS ns.example.test. 142 example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 143 SECTION ADDITIONAL 144 ns.example.test. IN A 1.2.3.4 145 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 146 ENTRY_END 147 148 ENTRY_BEGIN 149 MATCH opcode qtype qname 150 ADJUST copy_id 151 REPLY QR AA NOERROR 152 SECTION QUESTION 153 ns.example.test. IN A 154 SECTION ANSWER 155 ns.example.test. IN A 1.2.3.4 156 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 157 ENTRY_END 158 159 ENTRY_BEGIN 160 MATCH opcode qtype qname 161 ADJUST copy_id 162 REPLY QR AA NOERROR 163 SECTION QUESTION 164 ns.example.test. IN AAAA 165 SECTION AUTHORITY 166 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 167 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 168 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 169 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 170 ENTRY_END 171 172 ; response to DNSKEY priming query 173 ENTRY_BEGIN 174 MATCH opcode qtype qname 175 ADJUST copy_id 176 REPLY QR NOERROR 177 SECTION QUESTION 178 example.test. IN DNSKEY 179 SECTION ANSWER 180 example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 181 example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 182 ENTRY_END 183 184 ; response to query of interest 185 ENTRY_BEGIN 186 MATCH opcode qtype qname 187 ADJUST copy_id 188 REPLY QR AA NOERROR 189 SECTION QUESTION 190 a.d.example.test. IN MX 191 SECTION ANSWER 192 d.example.test. 3600 IN DNAME tgt.example.test. 193 d.example.test. 3600 IN RRSIG DNAME 8 3 3600 20201116135527 20201019135527 55567 example.test. EGpXUnJuzkETAO2OWyZDrTeInnyxF7CXPXGDfFt2x3CBUeckUUZcgQQ3yMh+BATKph2nOhBfk8klvZ35C9sQO7Z32REAnqGjpHiR86xRPYxG62Nk9kXv1Odeh/adz2QhB93N8U7W57FM0P/VQDkP0GQXTSRGTuj+7ihfYVd4HWI= 194 a.d.example.test. 3600 IN CNAME a.tgt.example.test. 195 ENTRY_END 196 197 ENTRY_BEGIN 198 MATCH opcode qtype qname 199 ADJUST copy_id 200 REPLY QR AA NOERROR 201 SECTION QUESTION 202 a.tgt.example.test. IN MX 203 SECTION ANSWER 204 a.tgt.example.test. 3600 IN CNAME b.d.example.test. 205 a.tgt.example.test. 3600 IN RRSIG CNAME 8 4 3600 20201116135527 20201019135527 55567 example.test. XHYWSHIm9J8j8T1qMh1tHZS71UguXYUVescKPFtoGHRuyRhHNob+NAqdn3I4/+8HSSGrJDqhTX/Vo3rcc3/g5HOHScwzZByB/diyJWpG9IA7pm7c7FnHnHpGBVdHq9wXlkgCPiaJShpE1zg1nNy3p99ca9/wh4y9XWSfcl0L8aw= 206 ENTRY_END 207 208 ENTRY_BEGIN 209 MATCH opcode qtype qname 210 ADJUST copy_id 211 REPLY QR AA NOERROR 212 SECTION QUESTION 213 b.d.example.test. IN MX 214 SECTION ANSWER 215 b.d.example.test. 3600 IN CNAME c.d.example.test. 216 ; (unsigned - no RRSIG) 217 ENTRY_END 218 219 ENTRY_BEGIN 220 MATCH opcode qtype qname 221 ADJUST copy_id 222 REPLY QR AA NOERROR 223 SECTION QUESTION 224 c.d.example.test. IN MX 225 SECTION ANSWER 226 c.d.example.test. 3600 IN CNAME evil.example.test. 227 ; (unsigned - no RRSIG) 228 ENTRY_END 229 230 ENTRY_BEGIN 231 MATCH opcode qtype qname 232 ADJUST copy_id 233 REPLY QR AA NOERROR 234 SECTION QUESTION 235 evil.example.test. IN MX 236 SECTION ANSWER 237 evil.example.test. 3600 IN MX 10 mail.example.test. 238 evil.example.test. 3600 IN RRSIG MX 8 3 3600 20201116135527 20201019135527 55567 example.test. ddinUzYoxk5OLUFBVdfFqyz39P6Z+VfQciTRC2EmEl+tbD/oJGFaEEnoU2eZil7E/kOygTFwFShDrmCYUq9W3DTpDKSaj1ci2Wze1E9zwOZguSwevAtw7qEenQei2TgPWrH39OlOwcW31Siqm9RDfX9eTRW72L1qYvqXnkTIctU= 239 SECTION AUTHORITY 240 evil.example.test. 3600 IN NSEC evil.example.test. MX RRSIG 241 ; (unsigned) 242 SECTION ADDITIONAL 243 mail.example.test. 3600 IN A 192.0.2.10 244 mail.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. JYvTCMU4isgSHS7R0tGUE+3i0FdPvKFENylO8bSuDzYr2iR8Ac6CFq8OepOYn4QUp73CL7QHho2Zy6Hxn4FK/5ryynGc3IjP9gvpV1YZ54TPKmvJkhWasRoALdrPqaWKS3i2Jyr6LeGgwc7Tlntc5ZwEdr4rOAJ0MgVpPpUxjnk= 245 ENTRY_END 246 RANGE_END 247 248 STEP 1 QUERY 249 ENTRY_BEGIN 250 REPLY RD DO 251 SECTION QUESTION 252 a.d.example.test. IN MX 253 ENTRY_END 254 255 STEP 10 CHECK_ANSWER 256 ENTRY_BEGIN 257 MATCH all 258 REPLY QR RD RA DO SERVFAIL 259 SECTION QUESTION 260 a.d.example.test. IN MX 261 SECTION ANSWER 262 ; The reply is bogus due to the 'NSEC' rrset missing signatures. 263 ENTRY_END 264 265 SCENARIO_END 266
Indexes created Mon Oct 26 00:26:21 UTC 2026