1 1.1 christos ; config options 2 1.1 christos ; The island of trust is at test. 3 1.1 christos server: 4 1.1 christos trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 5 1.1 christos val-override-date: "20201020135527" 6 1.1 christos target-fetch-policy: "0 0 0 0 0" 7 1.1 christos qname-minimisation: "no" 8 1.1 christos fake-sha1: yes 9 1.1 christos trust-anchor-signaling: no 10 1.1 christos minimal-responses: no 11 1.1 christos iter-scrub-promiscuous: no 12 1.1 christos aggressive-nsec: yes 13 1.1 christos local-zone: test. nodefault 14 1.1 christos log-servfail: yes 15 1.1 christos ;msg-buffer-size: 4096 16 1.1 christos 17 1.1 christos stub-zone: 18 1.1 christos name: "." 19 1.1 christos stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 20 1.1 christos CONFIG_END 21 1.1 christos 22 1.1 christos SCENARIO_BEGIN Test validator canonicalize of short PX record. 23 1.1 christos ; The record ends just before the second dname. 24 1.1 christos ; And the message buffer is small, and filled with previous content. 25 1.1 christos 26 1.1 christos ; K.ROOT-SERVERS.NET. 27 1.1 christos RANGE_BEGIN 0 100 28 1.1 christos ADDRESS 193.0.14.129 29 1.1 christos ENTRY_BEGIN 30 1.1 christos MATCH opcode qtype qname 31 1.1 christos ADJUST copy_id 32 1.1 christos REPLY QR NOERROR 33 1.1 christos SECTION QUESTION 34 1.1 christos . IN NS 35 1.1 christos SECTION ANSWER 36 1.1 christos . IN NS K.ROOT-SERVERS.NET. 37 1.1 christos SECTION ADDITIONAL 38 1.1 christos K.ROOT-SERVERS.NET. IN A 193.0.14.129 39 1.1 christos ENTRY_END 40 1.1 christos 41 1.1 christos ENTRY_BEGIN 42 1.1 christos MATCH opcode subdomain 43 1.1 christos ADJUST copy_id copy_query 44 1.1 christos REPLY QR NOERROR 45 1.1 christos SECTION QUESTION 46 1.1 christos test. IN NS 47 1.1 christos SECTION AUTHORITY 48 1.1 christos test. IN NS ns.test. 49 1.1 christos SECTION ADDITIONAL 50 1.1 christos ns.test. IN A 1.2.3.5 51 1.1 christos ENTRY_END 52 1.1 christos RANGE_END 53 1.1 christos 54 1.1 christos ; ns.test 55 1.1 christos RANGE_BEGIN 0 100 56 1.1 christos ADDRESS 1.2.3.5 57 1.1 christos ENTRY_BEGIN 58 1.1 christos MATCH opcode qtype qname 59 1.1 christos ADJUST copy_id 60 1.1 christos REPLY QR AA NOERROR 61 1.1 christos SECTION QUESTION 62 1.1 christos test. IN NS 63 1.1 christos SECTION ANSWER 64 1.1 christos test. IN NS ns.test 65 1.1 christos test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 66 1.1 christos SECTION ADDITIONAL 67 1.1 christos ns.test. IN A 1.2.3.5 68 1.1 christos ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 69 1.1 christos ENTRY_END 70 1.1 christos 71 1.1 christos ENTRY_BEGIN 72 1.1 christos MATCH opcode qtype qname 73 1.1 christos ADJUST copy_id 74 1.1 christos REPLY QR AA NOERROR 75 1.1 christos SECTION QUESTION 76 1.1 christos ns.test. IN A 77 1.1 christos SECTION ANSWER 78 1.1 christos ns.test. IN A 1.2.3.5 79 1.1 christos ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 80 1.1 christos ENTRY_END 81 1.1 christos 82 1.1 christos ENTRY_BEGIN 83 1.1 christos MATCH opcode qtype qname 84 1.1 christos ADJUST copy_id 85 1.1 christos REPLY QR AA NOERROR 86 1.1 christos SECTION QUESTION 87 1.1 christos ns.test. IN AAAA 88 1.1 christos SECTION AUTHORITY 89 1.1 christos test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 90 1.1 christos test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 91 1.1 christos ns.test. 3600 IN NSEC nz.test. A RRSIG 92 1.1 christos ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 93 1.1 christos ENTRY_END 94 1.1 christos 95 1.1 christos ENTRY_BEGIN 96 1.1 christos MATCH opcode qtype qname 97 1.1 christos ADJUST copy_id 98 1.1 christos REPLY QR AA NOERROR 99 1.1 christos SECTION QUESTION 100 1.1 christos test. IN DNSKEY 101 1.1 christos SECTION ANSWER 102 1.1 christos test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 103 1.1 christos test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 104 1.1 christos SECTION ADDITIONAL 105 1.1 christos ENTRY_END 106 1.1 christos 107 1.1 christos ENTRY_BEGIN 108 1.1 christos MATCH opcode qname qtype 109 1.1 christos ADJUST copy_id 110 1.1 christos REPLY QR AA NOERROR 111 1.1 christos SECTION QUESTION 112 1.1 christos example.test. IN DS 113 1.1 christos SECTION ANSWER 114 1.1 christos example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 115 1.1 christos example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 116 1.1 christos ENTRY_END 117 1.1 christos 118 1.1 christos ENTRY_BEGIN 119 1.1 christos MATCH opcode subdomain 120 1.1 christos ADJUST copy_id copy_query 121 1.1 christos REPLY QR NOERROR 122 1.1 christos SECTION QUESTION 123 1.1 christos example.test. IN NS 124 1.1 christos SECTION AUTHORITY 125 1.1 christos example.test. IN NS ns.example.test. 126 1.1 christos example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 127 1.1 christos example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 128 1.1 christos SECTION ADDITIONAL 129 1.1 christos ns.example.test. IN A 1.2.3.4 130 1.1 christos ENTRY_END 131 1.1 christos RANGE_END 132 1.1 christos 133 1.1 christos ; ns.example.test. 134 1.1 christos RANGE_BEGIN 0 100 135 1.1 christos ADDRESS 1.2.3.4 136 1.1 christos ENTRY_BEGIN 137 1.1 christos MATCH opcode qtype qname 138 1.1 christos ADJUST copy_id 139 1.1 christos REPLY QR NOERROR 140 1.1 christos SECTION QUESTION 141 1.1 christos example.test. IN NS 142 1.1 christos SECTION ANSWER 143 1.1 christos example.test. IN NS ns.example.test. 144 1.1 christos example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 145 1.1 christos SECTION ADDITIONAL 146 1.1 christos ns.example.test. IN A 1.2.3.4 147 1.1 christos ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 148 1.1 christos ENTRY_END 149 1.1 christos 150 1.1 christos ENTRY_BEGIN 151 1.1 christos MATCH opcode qtype qname 152 1.1 christos ADJUST copy_id 153 1.1 christos REPLY QR AA NOERROR 154 1.1 christos SECTION QUESTION 155 1.1 christos ns.example.test. IN A 156 1.1 christos SECTION ANSWER 157 1.1 christos ns.example.test. IN A 1.2.3.4 158 1.1 christos ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 159 1.1 christos ENTRY_END 160 1.1 christos 161 1.1 christos ENTRY_BEGIN 162 1.1 christos MATCH opcode qtype qname 163 1.1 christos ADJUST copy_id 164 1.1 christos REPLY QR AA NOERROR 165 1.1 christos SECTION QUESTION 166 1.1 christos ns.example.test. IN AAAA 167 1.1 christos SECTION AUTHORITY 168 1.1 christos example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 169 1.1 christos example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 170 1.1 christos ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 171 1.1 christos ENTRY_END 172 1.1 christos 173 1.1 christos ; response to DNSKEY priming query 174 1.1 christos ENTRY_BEGIN 175 1.1 christos MATCH opcode qtype qname 176 1.1 christos ADJUST copy_id 177 1.1 christos REPLY QR NOERROR 178 1.1 christos SECTION QUESTION 179 1.1 christos example.test. IN DNSKEY 180 1.1 christos SECTION ANSWER 181 1.1 christos example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 182 1.1 christos example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 183 1.1 christos ENTRY_END 184 1.1 christos 185 1.1 christos ENTRY_BEGIN 186 1.1 christos MATCH opcode qtype qname 187 1.1 christos ADJUST copy_id 188 1.1 christos REPLY QR AA NOERROR 189 1.1 christos SECTION QUESTION 190 1.1 christos px.example.test. IN PX 191 1.1 christos SECTION ANSWER 192 1.1 christos ; PX with preference 10, first name "." , second name is missing. 193 1.1 christos px.example.test. 3600 IN PX \# 3 000A00 194 1.1 christos ; invalid signature 195 1.1 christos px.example.test. 3600 IN RRSIG PX 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g 196 1.1 christos ENTRY_END 197 1.1 christos RANGE_END 198 1.1 christos 199 1.1 christos STEP 10 QUERY 200 1.1 christos ENTRY_BEGIN 201 1.1 christos REPLY RD DO 202 1.1 christos SECTION QUESTION 203 1.1 christos px.example.test. IN PX 204 1.1 christos ENTRY_END 205 1.1 christos 206 1.1 christos STEP 20 CHECK_ANSWER 207 1.1 christos ENTRY_BEGIN 208 1.1 christos MATCH all 209 1.1 christos REPLY QR RD RA DO SERVFAIL 210 1.1 christos SECTION QUESTION 211 1.1 christos px.example.test. IN PX 212 1.1 christos SECTION ANSWER 213 1.1 christos ENTRY_END 214 1.1 christos 215 1.1 christos SCENARIO_END 216