1 1.1 christos ; Signature test file 2 1.1 christos 3 1.1 christos ; first entry is a DNSKEY answer, with the DNSKEY rrset used for verification. 4 1.1 christos ; later entries are verified with it. 5 1.1 christos 6 1.1 christos 7 1.1 christos ; DNSKEY is revoked. 8 1.1 christos ENTRY_BEGIN 9 1.1 christos SECTION QUESTION 10 1.1 christos example.com. IN DNSKEY 11 1.1 christos SECTION ANSWER 12 1.1 christos example.com. 3600 IN DNSKEY 384 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 31027 (zsk), size = 512b} 13 1.1 christos ENTRY_END 14 1.1 christos 15 1.1 christos ; entry to test 16 1.1 christos ENTRY_BEGIN 17 1.1 christos SECTION QUESTION 18 1.1.1.2 christos bogus.example.com. IN SOA 19 1.1 christos SECTION ANSWER 20 1.1.1.2 christos ; The REVOKE key is not allowed to sign other data 21 1.1 christos example.com. 43200 IN SOA home.kuroiwa.eng.br. hostmaster.cesar.sec3.br. 2008040903 86400 86400 8640000 600 22 1.1 christos example.com. 43200 IN RRSIG SOA 5 2 43200 20081010000000 20080410122550 31027 example.com. af7nqRak6cEeQLytqLHMIUKPsOECA4Cu/Zpm7vdnKSh2q2+/8ZwIxwHLyCEGdiu/mTYffZEHTZytJyzxnB0oxA== ;{id = 31027} 23 1.1 christos ENTRY_END 24 1.1 christos 25 1.1.1.2 christos ; entry to test 26 1.1.1.2 christos ENTRY_BEGIN 27 1.1.1.2 christos SECTION QUESTION 28 1.1.1.2 christos bogus.a.example.com. IN DNSKEY 29 1.1.1.2 christos SECTION ANSWER 30 1.1.1.2 christos a.example.com. 3600 IN DNSKEY 384 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 31 1.1.1.2 christos a.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20081010000000 20080410122550 31027 example.com. MdkvlzXlNEUrnk7jTXZ0whEjYLp1bGjOevL4yyzWAl+/LgaQqbFVApXbAQhHvouFQeoMp2+NvEGTLW8unBzJEw== 32 1.1.1.2 christos ENTRY_END 33 1.1.1.2 christos 34 1.1.1.2 christos ; entry to test 35 1.1.1.2 christos ENTRY_BEGIN 36 1.1.1.2 christos SECTION QUESTION 37 1.1.1.2 christos secure.example.com. IN DNSKEY 38 1.1.1.2 christos SECTION ANSWER 39 1.1.1.2 christos ; the REVOKE key can sign itself 40 1.1.1.2 christos example.com. 3600 IN DNSKEY 384 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 31027 (zsk), size = 512b} 41 1.1.1.2 christos example.com. 3600 IN RRSIG DNSKEY 5 2 3600 20081010000000 20080410122550 31027 example.com. NEEY7W2F0XGUo9pVhiLALoz1ToM1gIS4TwUvVBPlIQMF+ZRGtB7PMthV0BN+aR+AEurxYsMfVmXEH2vKUVepgw== 42 1.1.1.2 christos ENTRY_END 43 1.1 christos 44