summaryrefslogtreecommitdiffstats
path: root/tests/deckard/sets/resolver/val_nsec3_optout_unsec_cache.rpl
blob: 6e2df9b81f14cad65d8184fec31149f3b5a4de66 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
; config options
        trust-anchor: ". IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5"
	val-override-date: "20160220000000"
	stub-addr: 202.12.27.33 # M.ROOT-SERVERS.NET.
	query-minimization: off
CONFIG_END

SCENARIO_BEGIN Test validator NSEC3 B.3 referral to optout unsigned zone, cache timeout.

; K.ROOT-SERVERS.NET.
RANGE_BEGIN 0 100
	ADDRESS 202.12.27.33 
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
. IN NS
SECTION ANSWER
.      518400 IN	NS	a.root-servers.net.
.      518400 IN	NS	b.root-servers.net.
.      518400 IN	NS	c.root-servers.net.
.      518400 IN	NS	d.root-servers.net.
.      518400 IN	NS	e.root-servers.net.
.      518400 IN	NS	f.root-servers.net.
.      518400 IN	NS	g.root-servers.net.
.      518400 IN	NS	h.root-servers.net.
.      518400 IN	NS	i.root-servers.net.
.      518400 IN	NS	j.root-servers.net.
.      518400 IN	NS	k.root-servers.net.
.      518400 IN	NS	l.root-servers.net.
.      518400 IN	NS	m.root-servers.net.
.      518400 IN	RRSIG	NS 8 0 518400 20160227170000 20160217160000 54549 . Qtgnr2k192gjdx3bLZgzkvqoEhTE4LXfFcPtrGPKawn/78LX6M4LuCZh rSXYMJERXVDQcQbX88EYh8kN3ALgLKpGdyu8HJ6B0vZiDc8yMbn2TuA0 RDqEPTp5om1LbQ0nEWa5XnrTi1fJTNzhT6eBJlcmkJ1/jMfmPG9J4dKJ x/Q=
SECTION ADDITIONAL
M.ROOT-SERVERS.NET.	IN	A	202.12.27.33
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR RD RA AD
SECTION QUESTION
. IN DNSKEY
SECTION ANSWER
. 		13943	IN DNSKEY	256 3 8 AwEAAbr/RV0stAWYbmKOldjShp4AOQGOyY3ATI1NUpP4X1qBs6lsXpc+1ABgv6zkg02IktjZrHnmD0HsElu3wqXMrT5KL1W7Spmg0Pou9WZ8QttdTKXwrVXrASsaGI2z/pLBSnK8EdzqUrTVxY4TEGZtxV519isM06CCMihxTn5cfFBF
. 		13943 IN DNSKEY	257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
. 		13943 IN RRSIG	DNSKEY 8 0 172800 20160224235959 20160210000000 19036 . Y2Ktm7gpEXcFg02ZlPNaRhO+GUPSvB2z8tsqe199vO9Rx7tIT/8F2A6OBjiyR6GqPGcPKaXADAt+QjmV174123QJ6UDrk2cPiGPXfEleDlJVtBV5oAVaBedeZxqnmw9WpVCIV6cY5wZbO8mYltA5oZMg8XInokVm6qGPA4wo2Miai5st/KhY+2Ke29StiXeVDdQ4p3e25dE4z1QW3ISxJ0zqvkTMHgQZZiP7IlfXKlCyyrd/Ddrxd22GWY53/oy9/Bry4K8naAw4m5+Q5tEf2zvtiAoaIbi2cM3Lf8AzQU25I6zaERJeQXhyA8cqn4WrbsAANn128Q+9Aibyiol9xg==
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
SECTION AUTHORITY
net.	172800	IN 	NS	a.gtld-servers.net.
net.    86400	IN	DS	35886 8 2 7862B27F5F516EBE19680444D4CE5E762981931842C465F00236401D8BD973EE
net.    86400	IN	RRSIG	DS 8 1 86400 20160228050000 20160218040000 54549 . HXdj4gjShkf/LpyxcxthJyRJE/YAB+NHsbwkfoMJvcdJa6u6J0H4K55BSB5UdR6vFGtY5NHl8tnEQIUeHOrxqMzDoMLofs05So9CdphNhsOdR25sCXLAIAL6l9KfI0+oEFXrCNA2GpU1S6SjNmk0NPzslYBSjAVY8RkTNDJGwqE=
SECTION ADDITIONAL
a.gtld-servers.net.	IN 	A	192.5.6.30
ENTRY_END
RANGE_END

RANGE_BEGIN 0 100
	ADDRESS 192.5.6.30
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
net.     	IN DNSKEY
SECTION ANSWER
net.	86400	IN	DNSKEY	257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmXSuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQDS4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn
net.   	86400	IN	DNSKEY	256 3 8 AQPAQAy1b2gx5xTywO8c6kI7OGIMt8yhN1iAemwNkd67cv8CAqNuDi0M3uOIrsVofliQFwp5HgNeIHFWbf8KxUlueZ6Wol2LTe/LnK9QKrczPSHr+q+lEH0cCoe8Cwmuc9y3GwkxqFWGHPCsHLZyVMuvdr3cenc0fvk1dDL7Rg7AlQ==
net.   	86400	IN	RRSIG	DNSKEY 8 1 86400 20160301173857 20160215173357 35886 net. BHm4lkpvTReitAK4JpVCLStI+JBswb9OEEmdKCCiiGe8zt3aVb6A+b2YCaJcWSA/RRrzASaOWvW7Lb5gyqxV/quEdLgB+xrMlnVUUQclLsF4EvdPMRzm+i8fVK//uo3IPDp/uyzVwR8dRpbPuJud1Mhttt0JZTNg0KqJZQEbq0odNdVWGln6PrvXd8f7L4VUaEJQI5H2SiUD8Iz56+EGmV9a6KIEJDKC0tiwPd1gQChaa5JcJBE9z1baSDX3H1f/tprOz/2H2kr0SDAL4Pztik5uer3bETQtmUK0s9Bq16AKSb3Fjs31LF/7bVwWyOVzIZJlfGk19w7c0seBr7f4gA==SECTION AUTHORITY
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
SECTION AUTHORITY
sample.net.         	172800	IN	NS	ns.sample.net.
a1rt98bs5qgc9nfi51s9hci47uljg6jh.net. 86400	IN	NSEC3	1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM
a1rt98bs5qgc9nfi51s9hci47uljg6jh.net. 86400	IN	RRSIG	NSEC3 8 2 86400 20160224061807 20160217050807 51128 net. N9aNNHsSDLSSXMHpw1Bo200V2dqtDc68f4JyCg4ZFCvIKSs5lNeiptWrdfbluQJmdhJK9gz6t3ITbFsnnJjLqwihBiiFbwd1FPctuMK3bGUpZfGXem+3zu4mGKzozQ8nr8KjDUX6fYoLri2vOuCv82a7vbp8RF/6QU6MqvsT4Qw=
55j4p0id76bnr9pf6341vkh0aga83vi2.net. 86400	IN	NSEC3	1 1 0 - 55JHR77O5IJ0MSJFOSIA68OGIQIN5N15 NS DS RRSIG
55j4p0id76bnr9pf6341vkh0aga83vi2.net. 86400	IN	RRSIG	NSEC3 8 2 86400 20160223061458 20160216050458 51128 net. QGDWMjAF7ziCridkheQEMH42INj+mHGnPuor/UvkNr2nZz1DDSewqG6/6uQR9FFSzRXINCZT6fdwhoIyTfxfLlNNXxABSqauTFXJ4ZXaBvDh0kwPwFBYOGSeKFukNLDiBhiUVLeMa1Va0M3H7ehWcOn1jsH301KTwu+6F5n6b/Q=
SECTION ADDITIONAL
ns.sample.net.			172800	IN	A	192.0.2.1
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
sample.net.     	IN DS
SECTION ANSWER
SECTION AUTHORITY
a1rt98bs5qgc9nfi51s9hci47uljg6jh.net. 86400	IN	NSEC3	1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM
a1rt98bs5qgc9nfi51s9hci47uljg6jh.net. 86400	IN	RRSIG	NSEC3 8 2 86400 20160224061807 20160217050807 51128 net. N9aNNHsSDLSSXMHpw1Bo200V2dqtDc68f4JyCg4ZFCvIKSs5lNeiptWrdfbluQJmdhJK9gz6t3ITbFsnnJjLqwihBiiFbwd1FPctuMK3bGUpZfGXem+3zu4mGKzozQ8nr8KjDUX6fYoLri2vOuCv82a7vbp8RF/6QU6MqvsT4Qw=
net.                	900	IN	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1455877597 1800 900 604800 86400
net.                	900	IN	RRSIG	SOA 8 1 900 20160226102637 20160219091637 51128 net. TDZlVntb/Dun6Ng0o5eeaXhJw+3HqEcoAEjwrd+xs1D1/+JlhIoP/bnrpcW0pkDxBf8Byg+Jx6J+y7jfPiEboL6aWzSZhX+bqgLGlKlU4oHf3ahUtuyEHxBZ0m/pPDGZQGW35U/9iZ3a1Ga1aPR4zsxoXfQLwwRpDfr3lGKGCrw=
55j4p0id76bnr9pf6341vkh0aga83vi2.net. 86400	IN	NSEC3	1 1 0 - 55JHR77O5IJ0MSJFOSIA68OGIQIN5N15 NS DS RRSIG
55j4p0id76bnr9pf6341vkh0aga83vi2.net. 86400	IN	RRSIG	NSEC3 8 2 86400 20160223061458 20160216050458 51128 net. QGDWMjAF7ziCridkheQEMH42INj+mHGnPuor/UvkNr2nZz1DDSewqG6/6uQR9FFSzRXINCZT6fdwhoIyTfxfLlNNXxABSqauTFXJ4ZXaBvDh0kwPwFBYOGSeKFukNLDiBhiUVLeMa1Va0M3H7ehWcOn1jsH301KTwu+6F5n6b/Q=
SECTION ADDITIONAL
ENTRY_END
RANGE_END

RANGE_BEGIN 0 100
	ADDRESS 192.0.2.1
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
a.b.sample.net.		IN	A
SECTION ANSWER
SECTION AUTHORITY
b.sample.net.		6000	IN	NS	ns.b.sample.net
SECTION ADDITIONAL
ns.b.sample.net		6000	IN	A	192.0.2.2
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
b.sample.net.     	IN DS
SECTION ANSWER
SECTION AUTHORITY
sample.net.         	180	IN	SOA	internal.sample.net. hostmaster.sample.com. 1455875127 90000 90000 90000 180
SECTION ADDITIONAL
ENTRY_END
RANGE_END

RANGE_BEGIN 10 10
	ADDRESS 192.0.2.2
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
a.b.sample.net. 	20	IN	A	192.0.2.3
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END
RANGE_END

;; must not be fetched due to cache
RANGE_BEGIN 30 30
	ADDRESS 192.0.2.2
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
a.b.sample.net. 	20	IN	A	192.0.2.4
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END
RANGE_END

RANGE_BEGIN 50 50
	ADDRESS 192.0.2.2
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
a.b.sample.net. 	20	IN	A	192.0.2.5
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END
RANGE_END


STEP 10 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
a.b.sample.net.		IN	A
ENTRY_END

STEP 20 CHECK_ANSWER
ENTRY_BEGIN
MATCH flags rcode question answer additional authority
REPLY QR RD RA
SECTION QUESTION
a.b.sample.net.		IN	A
SECTION ANSWER
a.b.sample.net. 	IN	A	192.0.2.3
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

;; cache hit
STEP 30 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
a.b.sample.net.		IN	A
ENTRY_END

STEP 40 CHECK_ANSWER
ENTRY_BEGIN
MATCH flags rcode question answer additional authority
REPLY QR RD RA
SECTION QUESTION
a.b.sample.net.		IN	A
SECTION ANSWER
a.b.sample.net.		IN	A	192.0.2.3
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

STEP 45 TIME_PASSES ELAPSE 25

STEP 50 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
a.b.sample.net.		IN	A
ENTRY_END

STEP 60 CHECK_ANSWER
ENTRY_BEGIN
MATCH flags rcode question answer additional authority
REPLY QR RD RA
SECTION QUESTION
a.b.sample.net.		IN	A
SECTION ANSWER
a.b.sample.net.		IN	A	192.0.2.5
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

SCENARIO_END