1 ; Signature test file 2 3 ; first entry is a DNSKEY answer, with the DNSKEY rrset used for verification. 4 ; later entries are verified with it. 5 6 7 ; DNSKEY is revoked. 8 ENTRY_BEGIN 9 SECTION QUESTION 10 example.com. IN DNSKEY 11 SECTION ANSWER 12 example.com. 3600 IN DNSKEY 384 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 31027 (zsk), size = 512b} 13 ENTRY_END 14 15 ; entry to test 16 ENTRY_BEGIN 17 SECTION QUESTION 18 bogus.example.com. IN SOA 19 SECTION ANSWER 20 ; The REVOKE key is not allowed to sign other data 21 example.com. 43200 IN SOA home.kuroiwa.eng.br. hostmaster.cesar.sec3.br. 2008040903 86400 86400 8640000 600 22 example.com. 43200 IN RRSIG SOA 5 2 43200 20081010000000 20080410122550 31027 example.com. af7nqRak6cEeQLytqLHMIUKPsOECA4Cu/Zpm7vdnKSh2q2+/8ZwIxwHLyCEGdiu/mTYffZEHTZytJyzxnB0oxA== ;{id = 31027} 23 ENTRY_END 24 25 ; entry to test 26 ENTRY_BEGIN 27 SECTION QUESTION 28 bogus.a.example.com. IN DNSKEY 29 SECTION ANSWER 30 a.example.com. 3600 IN DNSKEY 384 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 31 a.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20081010000000 20080410122550 31027 example.com. MdkvlzXlNEUrnk7jTXZ0whEjYLp1bGjOevL4yyzWAl+/LgaQqbFVApXbAQhHvouFQeoMp2+NvEGTLW8unBzJEw== 32 ENTRY_END 33 34 ; entry to test 35 ENTRY_BEGIN 36 SECTION QUESTION 37 secure.example.com. IN DNSKEY 38 SECTION ANSWER 39 ; the REVOKE key can sign itself 40 example.com. 3600 IN DNSKEY 384 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 31027 (zsk), size = 512b} 41 example.com. 3600 IN RRSIG DNSKEY 5 2 3600 20081010000000 20080410122550 31027 example.com. NEEY7W2F0XGUo9pVhiLALoz1ToM1gIS4TwUvVBPlIQMF+ZRGtB7PMthV0BN+aR+AEurxYsMfVmXEH2vKUVepgw== 42 ENTRY_END 43 44