Home | History | Annotate | Line # | Download | only in ns2 
      1 // validating resolver
      2 
      3 options {
      4 	{% include_indented "_common/options.conf.j2" %}
      5 	dnssec-validation yes;
      6 	minimal-responses no;
      7 	// Keep the DS insecurity proof deterministic: without this, a cached
      8 	// NSEC from an earlier forgery lets aggressive-NSEC synthesis answer the
      9 	// grandchild query before the DS fetch that drives is_insecure_referral().
     10 	synth-from-dnssec no;
     11 	// Pinned so the RRSIG-count cap in is_insecure_referral() is tested
     12 	// against a known number rather than the built-in default.
     13 	max-validations-per-fetch @MAX_VALIDATIONS@;
     14 };
     15 
     16 {% include "_common/controls.conf.j2" %}
     17 
     18 {% include "_common/root.hint.conf" %}
     19 
     20 zone "p031.test" {
     21 	type static-stub;
     22 	server-addresses { 10.53.0.1; };
     23 };
     24 
     25 trust-anchors {
     26 	p031.test. static-key 257 3 13 "@PARENT_DNSKEY@";
     27 };
     28