1 ; config options 2 ; The island of trust is at test. 3 server: 4 trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 5 val-override-date: "20201020135527" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: "no" 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 minimal-responses: no 11 iter-scrub-promiscuous: no 12 aggressive-nsec: yes 13 local-zone: test. nodefault 14 log-servfail: yes 15 ;msg-buffer-size: 4096 16 17 stub-zone: 18 name: "." 19 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 20 CONFIG_END 21 22 SCENARIO_BEGIN Test validator canonicalize of short PX record. 23 ; The record ends just before the second dname. 24 ; And the message buffer is small, and filled with previous content. 25 26 ; K.ROOT-SERVERS.NET. 27 RANGE_BEGIN 0 100 28 ADDRESS 193.0.14.129 29 ENTRY_BEGIN 30 MATCH opcode qtype qname 31 ADJUST copy_id 32 REPLY QR NOERROR 33 SECTION QUESTION 34 . IN NS 35 SECTION ANSWER 36 . IN NS K.ROOT-SERVERS.NET. 37 SECTION ADDITIONAL 38 K.ROOT-SERVERS.NET. IN A 193.0.14.129 39 ENTRY_END 40 41 ENTRY_BEGIN 42 MATCH opcode subdomain 43 ADJUST copy_id copy_query 44 REPLY QR NOERROR 45 SECTION QUESTION 46 test. IN NS 47 SECTION AUTHORITY 48 test. IN NS ns.test. 49 SECTION ADDITIONAL 50 ns.test. IN A 1.2.3.5 51 ENTRY_END 52 RANGE_END 53 54 ; ns.test 55 RANGE_BEGIN 0 100 56 ADDRESS 1.2.3.5 57 ENTRY_BEGIN 58 MATCH opcode qtype qname 59 ADJUST copy_id 60 REPLY QR AA NOERROR 61 SECTION QUESTION 62 test. IN NS 63 SECTION ANSWER 64 test. IN NS ns.test 65 test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 66 SECTION ADDITIONAL 67 ns.test. IN A 1.2.3.5 68 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 69 ENTRY_END 70 71 ENTRY_BEGIN 72 MATCH opcode qtype qname 73 ADJUST copy_id 74 REPLY QR AA NOERROR 75 SECTION QUESTION 76 ns.test. IN A 77 SECTION ANSWER 78 ns.test. IN A 1.2.3.5 79 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 80 ENTRY_END 81 82 ENTRY_BEGIN 83 MATCH opcode qtype qname 84 ADJUST copy_id 85 REPLY QR AA NOERROR 86 SECTION QUESTION 87 ns.test. IN AAAA 88 SECTION AUTHORITY 89 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 90 test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 91 ns.test. 3600 IN NSEC nz.test. A RRSIG 92 ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 93 ENTRY_END 94 95 ENTRY_BEGIN 96 MATCH opcode qtype qname 97 ADJUST copy_id 98 REPLY QR AA NOERROR 99 SECTION QUESTION 100 test. IN DNSKEY 101 SECTION ANSWER 102 test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 103 test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 104 SECTION ADDITIONAL 105 ENTRY_END 106 107 ENTRY_BEGIN 108 MATCH opcode qname qtype 109 ADJUST copy_id 110 REPLY QR AA NOERROR 111 SECTION QUESTION 112 example.test. IN DS 113 SECTION ANSWER 114 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 115 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 116 ENTRY_END 117 118 ENTRY_BEGIN 119 MATCH opcode subdomain 120 ADJUST copy_id copy_query 121 REPLY QR NOERROR 122 SECTION QUESTION 123 example.test. IN NS 124 SECTION AUTHORITY 125 example.test. IN NS ns.example.test. 126 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 127 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 128 SECTION ADDITIONAL 129 ns.example.test. IN A 1.2.3.4 130 ENTRY_END 131 RANGE_END 132 133 ; ns.example.test. 134 RANGE_BEGIN 0 100 135 ADDRESS 1.2.3.4 136 ENTRY_BEGIN 137 MATCH opcode qtype qname 138 ADJUST copy_id 139 REPLY QR NOERROR 140 SECTION QUESTION 141 example.test. IN NS 142 SECTION ANSWER 143 example.test. IN NS ns.example.test. 144 example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 145 SECTION ADDITIONAL 146 ns.example.test. IN A 1.2.3.4 147 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 148 ENTRY_END 149 150 ENTRY_BEGIN 151 MATCH opcode qtype qname 152 ADJUST copy_id 153 REPLY QR AA NOERROR 154 SECTION QUESTION 155 ns.example.test. IN A 156 SECTION ANSWER 157 ns.example.test. IN A 1.2.3.4 158 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 159 ENTRY_END 160 161 ENTRY_BEGIN 162 MATCH opcode qtype qname 163 ADJUST copy_id 164 REPLY QR AA NOERROR 165 SECTION QUESTION 166 ns.example.test. IN AAAA 167 SECTION AUTHORITY 168 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 169 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 170 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 171 ENTRY_END 172 173 ; response to DNSKEY priming query 174 ENTRY_BEGIN 175 MATCH opcode qtype qname 176 ADJUST copy_id 177 REPLY QR NOERROR 178 SECTION QUESTION 179 example.test. IN DNSKEY 180 SECTION ANSWER 181 example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 182 example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 183 ENTRY_END 184 185 ENTRY_BEGIN 186 MATCH opcode qtype qname 187 ADJUST copy_id 188 REPLY QR AA NOERROR 189 SECTION QUESTION 190 px.example.test. IN PX 191 SECTION ANSWER 192 ; PX with preference 10, first name "." , second name is missing. 193 px.example.test. 3600 IN PX \# 3 000A00 194 ; invalid signature 195 px.example.test. 3600 IN RRSIG PX 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g 196 ENTRY_END 197 RANGE_END 198 199 STEP 10 QUERY 200 ENTRY_BEGIN 201 REPLY RD DO 202 SECTION QUESTION 203 px.example.test. IN PX 204 ENTRY_END 205 206 STEP 20 CHECK_ANSWER 207 ENTRY_BEGIN 208 MATCH all 209 REPLY QR RD RA DO SERVFAIL 210 SECTION QUESTION 211 px.example.test. IN PX 212 SECTION ANSWER 213 ENTRY_END 214 215 SCENARIO_END 216