1 ; config options 2 ; The island of trust is at test. 3 server: 4 trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 5 val-override-date: "20201020135527" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: no 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 minimal-responses: no 11 iter-scrub-promiscuous: no 12 aggressive-nsec: yes 13 local-zone: test. nodefault 14 log-servfail: yes 15 16 stub-zone: 17 name: "." 18 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 19 CONFIG_END 20 21 SCENARIO_BEGIN Test validator with CNAME and other data at the name 22 23 ; K.ROOT-SERVERS.NET. 24 RANGE_BEGIN 0 100 25 ADDRESS 193.0.14.129 26 ENTRY_BEGIN 27 MATCH opcode qtype qname 28 ADJUST copy_id 29 REPLY QR NOERROR 30 SECTION QUESTION 31 . IN NS 32 SECTION ANSWER 33 . IN NS K.ROOT-SERVERS.NET. 34 SECTION ADDITIONAL 35 K.ROOT-SERVERS.NET. IN A 193.0.14.129 36 ENTRY_END 37 38 ENTRY_BEGIN 39 MATCH opcode subdomain 40 ADJUST copy_id copy_query 41 REPLY QR NOERROR 42 SECTION QUESTION 43 test. IN NS 44 SECTION AUTHORITY 45 test. IN NS ns.test. 46 SECTION ADDITIONAL 47 ns.test. IN A 1.2.3.5 48 ENTRY_END 49 RANGE_END 50 51 ; ns.test 52 RANGE_BEGIN 0 100 53 ADDRESS 1.2.3.5 54 ENTRY_BEGIN 55 MATCH opcode qtype qname 56 ADJUST copy_id 57 REPLY QR AA NOERROR 58 SECTION QUESTION 59 test. IN NS 60 SECTION ANSWER 61 test. IN NS ns.test 62 test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 63 SECTION ADDITIONAL 64 ns.test. IN A 1.2.3.5 65 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 66 ENTRY_END 67 68 ENTRY_BEGIN 69 MATCH opcode qtype qname 70 ADJUST copy_id 71 REPLY QR AA NOERROR 72 SECTION QUESTION 73 ns.test. IN A 74 SECTION ANSWER 75 ns.test. IN A 1.2.3.5 76 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 77 ENTRY_END 78 79 ENTRY_BEGIN 80 MATCH opcode qtype qname 81 ADJUST copy_id 82 REPLY QR AA NOERROR 83 SECTION QUESTION 84 ns.test. IN AAAA 85 SECTION AUTHORITY 86 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 87 test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 88 ns.test. 3600 IN NSEC nz.test. A RRSIG 89 ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 90 ENTRY_END 91 92 ENTRY_BEGIN 93 MATCH opcode qtype qname 94 ADJUST copy_id 95 REPLY QR AA NOERROR 96 SECTION QUESTION 97 test. IN DNSKEY 98 SECTION ANSWER 99 test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 100 test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 101 SECTION ADDITIONAL 102 ENTRY_END 103 104 ENTRY_BEGIN 105 MATCH opcode qname qtype 106 ADJUST copy_id 107 REPLY QR AA NOERROR 108 SECTION QUESTION 109 example.test. IN DS 110 SECTION ANSWER 111 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 112 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 113 ENTRY_END 114 115 ENTRY_BEGIN 116 MATCH opcode subdomain 117 ADJUST copy_id copy_query 118 REPLY QR NOERROR 119 SECTION QUESTION 120 example.test. IN NS 121 SECTION AUTHORITY 122 example.test. IN NS ns.example.test. 123 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 124 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 125 SECTION ADDITIONAL 126 ns.example.test. IN A 1.2.3.4 127 ENTRY_END 128 RANGE_END 129 130 ; ns.example.test. 131 RANGE_BEGIN 0 100 132 ADDRESS 1.2.3.4 133 ENTRY_BEGIN 134 MATCH opcode qtype qname 135 ADJUST copy_id 136 REPLY QR NOERROR 137 SECTION QUESTION 138 example.test. IN NS 139 SECTION ANSWER 140 example.test. IN NS ns.example.test. 141 example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 142 SECTION ADDITIONAL 143 ns.example.test. IN A 1.2.3.4 144 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 145 ENTRY_END 146 147 ENTRY_BEGIN 148 MATCH opcode qtype qname 149 ADJUST copy_id 150 REPLY QR AA NOERROR 151 SECTION QUESTION 152 ns.example.test. IN A 153 SECTION ANSWER 154 ns.example.test. IN A 1.2.3.4 155 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 156 ENTRY_END 157 158 ENTRY_BEGIN 159 MATCH opcode qtype qname 160 ADJUST copy_id 161 REPLY QR AA NOERROR 162 SECTION QUESTION 163 ns.example.test. IN AAAA 164 SECTION AUTHORITY 165 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 166 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 167 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 168 ENTRY_END 169 170 ; response to DNSKEY priming query 171 ENTRY_BEGIN 172 MATCH opcode qtype qname 173 ADJUST copy_id 174 REPLY QR NOERROR 175 SECTION QUESTION 176 example.test. IN DNSKEY 177 SECTION ANSWER 178 example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 179 example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 180 ENTRY_END 181 182 ; response to query of interest 183 ENTRY_BEGIN 184 MATCH opcode qtype qname 185 ADJUST copy_id 186 REPLY QR AA NOERROR 187 SECTION QUESTION 188 www.example.test. IN A 189 SECTION ANSWER 190 www.example.test. 3600 IN A 10.20.30.40 191 www.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. OQEgDcpez8Bvdwd+hxA3v63FWJhutWkv9w+k+8RLcWv34WPhebsf7CBV74ggY2c+HafvYiuIFfhdF5CX28YQjxqWVzFgE6bEA6spPc6qdHiQaY/096/4SLCDcL+2EtOqcR/uZGj5uNhhaCJ9UjscBKfEZmHUOAMXKmjsvl0I/+I= 192 www.example.test. 3600 IN CNAME tgt.example.test. 193 www.example.test. 3600 IN RRSIG CNAME 8 3 3600 20201116135527 20201019135527 55567 example.test. hbJ/74XR/5S9KJ36xi5eXTV9Qmx9RTkVpkuN3sFJb2cRbkqSSv8VhMhbePh/XbGQCaVvPoTRrKMASf5Nkn2x1LX378cFdnn1p2+85Q9AYjc6oAcvGh2NNBEh/F6UA3nzCHI6S++QlyQFNUKwuAnrg/9g9nE6BdVC3rL0pKSEWPU= 194 ENTRY_END 195 196 ENTRY_BEGIN 197 MATCH opcode qtype qname 198 ADJUST copy_id 199 REPLY QR AA NOERROR 200 SECTION QUESTION 201 www2.example.test. IN A 202 SECTION ANSWER 203 www2.example.test. 3600 IN CNAME tgt2.example.test. 204 www2.example.test. 3600 IN RRSIG CNAME 8 3 3600 20201116135527 20201019135527 55567 example.test. LOs6t3W5DExcLi17Zysn0Iw4dFl/G0gUMvLDtLZh/Vq7QNGFZ/EI55hUkiELI0HTyCHW2z/5MbGk3mLfStGBrNaTbZTSUxkUnxKI+eaEReWXPepEALea4Isf5KYxj1HyrhWcjI3CQp9+ALjZWtI63fVf64mdiu2hAAMIVt7GiGU= 205 www2.example.test. 3600 IN A 10.20.30.42 206 www2.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. tbNIBmCBc1WeNrgG2aXc+g/T73iRKteVWrhHf4w/9EBr7bVW0K0Lt7oewg5LvWMmJwhEef54Er3SxoVsxwFWnUavJqVymv55EMp0fkFv7Fiud8Q3CBwi19h2x5T0upNadHkKFKo1FGjs3jasaPHcV3MLU0uxTUaIJZ9v4GY8HlU= 207 ENTRY_END 208 209 ENTRY_BEGIN 210 MATCH opcode qtype qname 211 ADJUST copy_id 212 REPLY QR AA NOERROR 213 SECTION QUESTION 214 tgt.example.test. IN A 215 SECTION ANSWER 216 tgt.example.test. 3600 IN A 10.20.30.44 217 tgt.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. NuTUOwgit91nOEVd4OrA0WdfMzwkRQBgFdgHkv65+MVkjBBI8MzDrgmrJykwNfhjOetsUU7/ON1rABPCNbdaGFwXjDAghukNxCiN+vAGk+dMgG6JVI/mDDJaC9MdJpBGBEWOnF1yB66aLENIhNYoiYyn9aAc79MfVh/1bu5by9E= 218 ENTRY_END 219 220 ENTRY_BEGIN 221 MATCH opcode qtype qname 222 ADJUST copy_id 223 REPLY QR AA NOERROR 224 SECTION QUESTION 225 tgt2.example.test. IN A 226 SECTION ANSWER 227 tgt2.example.test. 3600 IN A 10.20.30.45 228 tgt2.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. W1fB3ZFbW5nLDgVEeyvlD/SFBWudR32ELh0JOlyC3kN/ZVGrJvEH7QQCvuJ0KuXgjcio2uxNSCXeVoYP8AyiCdL/ji+MAy3y+YvRWSEAVqhIebKlr5zOWtAscNBnMxenpmkd23jrIIHMQepfv4jvQue73Lb2+url/RJtNcsRaio= 229 ENTRY_END 230 RANGE_END 231 232 STEP 1 QUERY 233 ENTRY_BEGIN 234 REPLY RD DO 235 SECTION QUESTION 236 www.example.test. IN A 237 ENTRY_END 238 239 STEP 10 CHECK_ANSWER 240 ENTRY_BEGIN 241 MATCH all 242 REPLY QR RD RA AD DO NOERROR 243 SECTION QUESTION 244 www.example.test. IN A 245 SECTION ANSWER 246 www.example.test. 3600 IN A 10.20.30.40 247 www.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. OQEgDcpez8Bvdwd+hxA3v63FWJhutWkv9w+k+8RLcWv34WPhebsf7CBV74ggY2c+HafvYiuIFfhdF5CX28YQjxqWVzFgE6bEA6spPc6qdHiQaY/096/4SLCDcL+2EtOqcR/uZGj5uNhhaCJ9UjscBKfEZmHUOAMXKmjsvl0I/+I= 248 ENTRY_END 249 250 STEP 20 QUERY 251 ENTRY_BEGIN 252 REPLY RD DO 253 SECTION QUESTION 254 www2.example.test. IN A 255 ENTRY_END 256 257 STEP 21 CHECK_ANSWER 258 ENTRY_BEGIN 259 MATCH all 260 REPLY QR RD RA AD DO NOERROR 261 SECTION QUESTION 262 www2.example.test. IN A 263 SECTION ANSWER 264 www2.example.test. 3600 IN CNAME tgt2.example.test. 265 www2.example.test. 3600 IN RRSIG CNAME 8 3 3600 20201116135527 20201019135527 55567 example.test. LOs6t3W5DExcLi17Zysn0Iw4dFl/G0gUMvLDtLZh/Vq7QNGFZ/EI55hUkiELI0HTyCHW2z/5MbGk3mLfStGBrNaTbZTSUxkUnxKI+eaEReWXPepEALea4Isf5KYxj1HyrhWcjI3CQp9+ALjZWtI63fVf64mdiu2hAAMIVt7GiGU= 266 tgt2.example.test. 3600 IN A 10.20.30.45 267 tgt2.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. W1fB3ZFbW5nLDgVEeyvlD/SFBWudR32ELh0JOlyC3kN/ZVGrJvEH7QQCvuJ0KuXgjcio2uxNSCXeVoYP8AyiCdL/ji+MAy3y+YvRWSEAVqhIebKlr5zOWtAscNBnMxenpmkd23jrIIHMQepfv4jvQue73Lb2+url/RJtNcsRaio= 268 ENTRY_END 269 270 SCENARIO_END 271