tests-extra: tests for proofs of expanded/unexpanded wildcards below dp

tests-extra/data/example.zone

@@ -10,6 +10,7 @@ ns2.b.example.	3600 IN A	192.0.2.8
 a.example.	3600 IN NS	ns1.a.example.
 a.example.	3600 IN NS	ns2.a.example.
 a.example.	3600 IN DS	57855 5 1 B6DCD485719ADCA18E5F3D48A2331627FDD3636B
+*.a.example. 3600 IN A 192.0.2.11
 ai.example.	3600 IN A	192.0.2.9
 ai.example.	3600 IN HINFO	"KLH-10" "ITS"
 ai.example.	3600 IN AAAA	2001:db8::f00:baa9

tests-extra/tests/basic/nsec/test.py

@@ -66,6 +66,16 @@ resp = knot.dig("a.to-nxdomain.example", "A", dnssec=True)
 resp.check(rcode="NXDOMAIN", flags="QR AA", eflags="DO")
 resp.cmp(bind)
 
+# Wildcard Expansion below delegation point 
+resp = knot.dig("a.a.example", "A", dnssec=True)
+resp.check(rcode="NOERROR", flags="QR", eflags="DO")
+resp.cmp(bind)
+
+# Wildcard Expansion below delegation point (nodata)
+resp = knot.dig("a.a.example", "AAAA", dnssec=True)
+resp.check(rcode="NOERROR", flags="QR", eflags="DO")
+resp.cmp(bind)
+
 # B9. Direct wildcard query (positive)
 resp = knot.dig("*.w.example", "MX", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")
@@ -76,6 +86,16 @@ resp = knot.dig("*.w.example", "AAAA", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")
 resp.cmp(bind)
 
+# Direct wildcard query below delegation point (positive)
+resp = knot.dig("*.a.example", "A", dnssec=True)
+resp.check(rcode="NOERROR", flags="QR", eflags="DO")
+resp.cmp(bind)
+
+# Direct wildcard query below delegation point (no data)
+resp = knot.dig("*.a.example", "AAAA", dnssec=True)
+resp.check(rcode="NOERROR", flags="QR", eflags="DO")
+resp.cmp(bind)
+
 # B11. DS Child Zone No Data Error.
 resp = knot.dig("example", "DS", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")

tests-extra/tests/basic/nsec3/test.py

@@ -56,7 +56,7 @@ resp = knot.dig("a.to-apex.example", "SOA", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")
 resp.cmp(bind)
 
-# Wildcard Expansion to apex (NODATA)
+# Wildcard Expansion to apex (no data)
 resp = knot.dig("a.to-apex.example", "TXT", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")
 resp.cmp(bind)
@@ -66,6 +66,16 @@ resp = knot.dig("a.to-nxdomain.example", "A", bufsize=1600, dnssec=True)
 resp.check(rcode="NXDOMAIN", flags="QR AA", eflags="DO")
 resp.cmp(bind)
 
+# Wildcard Expansion below delegation point
+resp = knot.dig("a.a.example", "A", dnssec=True)
+resp.check(rcode="NOERROR", flags="QR", eflags="DO")
+resp.cmp(bind)
+
+# Wildcard Expansion below delegation point (no data)
+resp = knot.dig("a.a.example", "AAAA", dnssec=True)
+resp.check(rcode="NOERROR", flags="QR", eflags="DO")
+resp.cmp(bind)
+
 # B9. Direct wildcard query (positive)
 resp = knot.dig("*.w.example", "MX", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")
@@ -76,6 +86,16 @@ resp = knot.dig("*.w.example", "AAAA", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")
 resp.cmp(bind)
 
+# Direct wildcard query below delegation point (positive)
+resp = knot.dig("*.a.example", "A", dnssec=True)
+resp.check(rcode="NOERROR", flags="QR", eflags="DO")
+resp.cmp(bind)
+
+# Direct wildcard query below delegation point (no data)
+resp = knot.dig("*.a.example", "AAAA", dnssec=True)
+resp.check(rcode="NOERROR", flags="QR", eflags="DO")
+resp.cmp(bind)
+
 # B11. DS Child Zone No Data Error.
 resp = knot.dig("example", "DS", dnssec=True)
 resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")