Skip to content

GitLab

D
deckard
Verified Commit 082aa90e authored by Ivana Krumlova's avatar Ivana Krumlova Committed by Petr Špaček
Browse files
Options

resolver: minimal tests for DNSSEC validation 

These tests check whether DNSSEC validator detects data
with invalid signatures.
parent 969f6f95
Pipeline #14247 passed with stage
    in 1 minute and 56 seconds
    Hide whitespace changes
    Inline Side-by-side
    Showing with 1765 additions and 0 deletions
    sets/resolver/val_minimal_anotherdomainsignature.rpl 0 → 100644
    View file @ 082aa90e
    trust-anchor: ". IN DS 49060 8 2 E7B1EB56D7D5791B3D45630FEAA9C823DB84B385ACEEAC5F44DD08885C36700F"
    val-override-date: "20170401000000"
    stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
    query-minimization: off
    CONFIG_END
    SCENARIO_BEGIN Signature belongs to another domain.
    ; K.ROOT-SERVERS.NET.
    RANGE_BEGIN 0 100
    ADDRESS 193.0.14.129
    ADDRESS 2001:7fd::1
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    . 518400 IN NS k.root-servers.net.
    . 518400 IN RRSIG NS 8 0 518400 20170409093827 20170310093827 20661 . uBuJpbRh1NYVciSKK0r3SA6NFnqE4s/+CqLfTXu26/HrY5c1aOhQHXZM cCDDjfPGFa7Eh4mqF0i9I+i+bFbYQitI1Heexye599VE19REbVsK4qaU xkArvt9k6HVqd/7BXXUyzLN1N0CScdyuT5tiEI9154SDNVpnC+z8i2u0 9hW8JEk4qqVWX/I1MYQB/UOcFSeDhD1Qku/26opqDuLl/1eaShxhMQ/c rjzOb5ZYzD0x+TUJZMYSOMwAraaFuYTT84oe6QYY+EGctAk1b50nA/5E C3Tm/xGuo9ioVtYhTwoo1XDUVeHmghdILjQZvR4pOSZoRGGP9ovb08Qg OmPXuQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN DNSKEY
    SECTION ANSWER
    . IN DNSKEY 256 3 8 AwEAAe1oA46eOLNris1CtS0qM5TdMESK6i4hpalqa6JDv57eOUkaOeje ZW1tIFUokmaK7kuKEFEosddA89CYM8rt2RbC+sfKalbHAWOus0tXZyAL efb2sW95QRzyG6LNul0jQFn9eYWBUHrVe5Wqd0zrFCbTQLUhELSfrlkI UBpO/xKaGinRHX2JjyOnle4aPZY3bEVa/+KyY2ZU6UC4SBo3aHXanP26 ok91rOTmpTWp64ybsMdCXOU8deyuQFQf6q8DhIDmJrkymhX1MXWQQlE0 fAYIYf8/t9OCwucg8oEg4FPU8Gb4Zm/l6PgO4HFkFjBT6iGFCQt3qXe2 Qe3alUWoATc=
    . IN DNSKEY 257 3 8 AwEAAb8sZgVVa02muJ+/+SVhJAvz2EWKGEGquhPbQXuF6ALBYoF4KWTO bZVF8sIVTGoaX5+UWkwwHthg7RwS1DALT/AJymYeHhUwA04gLsfCZ/cv BjmRy5RozeSJ1uxAhoCYHCT2hQBZ0cH0n8roXFXI2Y+6708pO1IBkTPT 9MpAGfezTtGYOortbSn+vqT/Zu8jOpNwkleXON4rlZRBZPd4JUMGL9Y5 N/j6+ClYeM+eFQTKXrLi1oC+0yK1sG5OlqrBDhAhBnz+IhfZz4TOkqJ9 Li2BVMatHBeB9GQHtu0FZuC3J0EQgiZxvq1RgkefFJAiB+5uVRN8U7up 5mLDxSgmT0M=
    . 2592000 IN RRSIG DNSKEY 8 0 3600000 20170409093827 20170310093827 49060 . G7s3QiWNgOsl+LoG6OKjdBHPcFyhmCS17GFnaKjfJNdPQaFL5nM/vrXo eUIIdJXAvjj62TY7wTyFlnx3yjK93RVGKEEySpGC/1gkn5AdjVoQszog IxYjKzubizULSaX7SQ3/Ar+uHLxakdS1qgNdFu6hHCl857LJPtmC8SJt iFUmm5HFyARokMrfA88VrFRKEqojcCWajeZMfRtgBipFJZoYgPUCaFlz 8OupNdNUWCbGhnDWrXCWMzeKVXTQVlJf75PXXgtkuBUmr5RSWu7AYr+c wTJ4E4610goRqYxnZ33efKE/MuhKeY66xelPh0sirPrBMR5JAlyjV3k1 qDzhcQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN AAAA
    SECTION ANSWER
    k.root-servers.net. 3600000 IN AAAA 2001:7fd::1
    k.root-servers.net. 2592000 IN RRSIG AAAA 8 3 3600000 20170409093827 20170310093827 20661 . qjVXwuxzmoRhdrXyQvKfrrzFxGiYuTTJHxwZPasJ1nVmN48dPyU6wA55 JeqoJv1Jm+XvIL1q0WtX6Zh6KLt6vVjHuMkhmFuIZYkFi/dmsEwFY8C0 ebyXyztQT5+6FOSVTAKacYc40LfBo8FqEn8RYlCu1mkAd8ANvvLrdLWW W03LVOY7JlCzyrKlAlmPmuV8z+e9PxNkUh6KfTEvAReoAAX7wYZkdefg 2d64c7rNWXvYm6LxBX6qeQ39d5WyKc8v+G01DJuDzs2Tx368QoK86vm/ qo9ERdT7koRt+gBZNYv8V4fh2SjaFsy2TJq/tiYcSia9snGDTFj6LWVM 6sBCYQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN A
    SECTION ANSWER
    k.root-servers.net. 3600000 IN A 193.0.14.129
    k.root-servers.net. 2592000 IN RRSIG A 8 3 3600000 20170409093827 20170310093827 20661 . feIXXjskcsyH+ALZu67GVDaPWXjUGTWsTlDwzgJcLBzSuRVY/GVD5Z1Q B4/oUW99rLKB5bNS1MuasZ+nZFV67sBwJk1+SqNB2bAe7G5Tv1sR2Qgi qDAoB37YDVk5JGHfuxByLYbAVG9PrPXT60BN17OYrD/TFPzprye65gk3 7l9kPpAlblcsqdvh5piKrWc7VBcyMhlp56qdASNAl+Lrb+i0DZYyJXh+ b8LV5g5zp9FaVGKe0Gi4+yDXVjcM6VEtuNRAu2+flLoc3ho6qQF1Po4Y wueL72I+yFoUxkIOJvK47eWb+YUBIBK/L8/ORjYoLBRsrbc79wb0I3Zj Xy6O4Q==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    x.root-servers.net. IN A
    SECTION ANSWER
    x.root-servers.net. 3600000 IN A 193.0.14.129
    x.root-servers.net. 2592000 IN RRSIG A 8 3 3600000 20170409093827 20170310093827 20661 . feIXXjskcsyH+ALZu67GVDaPWXjUGTWsTlDwzgJcLBzSuRVY/GVD5Z1Q B4/oUW99rLKB5bNS1MuasZ+nZFV67sBwJk1+SqNB2bAe7G5Tv1sR2Qgi qDAoB37YDVk5JGHfuxByLYbAVG9PrPXT60BN17OYrD/TFPzprye65gk3 7l9kPpAlblcsqdvh5piKrWc7VBcyMhlp56qdASNAl+Lrb+i0DZYyJXh+ b8LV5g5zp9FaVGKe0Gi4+yDXVjcM6VEtuNRAu2+flLoc3ho6qQF1Po4Y wueL72I+yFoUxkIOJvK47eWb+YUBIBK/L8/ORjYoLBRsrbc79wb0I3Zj Xy6O4Q==
    ; valid signature of k.root-servers.net IN A
    ENTRY_END
    ; QTYPE == RRSIG is not supported, https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any-04#section-7
    ENTRY_BEGIN
    MATCH opcode qtype
    ADJUST copy_id copy_query
    REPLY QR AA REFUSED
    SECTION QUESTION
    . IN RRSIG
    ENTRY_END
    RANGE_END
    STEP 1 QUERY
    ENTRY_BEGIN
    REPLY RD DO
    SECTION QUESTION
    x.root-servers.net IN A
    ENTRY_END
    STEP 10 CHECK_ANSWER
    ENTRY_BEGIN
    MATCH all
    REPLY QR RD RA DO SERVFAIL
    SECTION QUESTION
    x.root-servers.net IN A
    SECTION ANSWER
    SECTION AUTHORITY
    SECTION ADDITIONAL
    ENTRY_END
    SCENARIO_END
    sets/resolver/val_minimal_anotherrrtypesignature.rpl 0 → 100644
    View file @ 082aa90e
    trust-anchor: ". IN DS 49060 8 2 E7B1EB56D7D5791B3D45630FEAA9C823DB84B385ACEEAC5F44DD08885C36700F"
    val-override-date: "20170401000000"
    stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
    query-minimization: off
    CONFIG_END
    SCENARIO_BEGIN Signature belongs to another RR type of the domain.
    ; K.ROOT-SERVERS.NET.
    RANGE_BEGIN 0 100
    ADDRESS 193.0.14.129
    ADDRESS 2001:7fd::1
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    . 518400 IN NS k.root-servers.net.
    . 518400 IN RRSIG NS 8 0 518400 20170409093827 20170310093827 20661 . uBuJpbRh1NYVciSKK0r3SA6NFnqE4s/+CqLfTXu26/HrY5c1aOhQHXZM cCDDjfPGFa7Eh4mqF0i9I+i+bFbYQitI1Heexye599VE19REbVsK4qaU xkArvt9k6HVqd/7BXXUyzLN1N0CScdyuT5tiEI9154SDNVpnC+z8i2u0 9hW8JEk4qqVWX/I1MYQB/UOcFSeDhD1Qku/26opqDuLl/1eaShxhMQ/c rjzOb5ZYzD0x+TUJZMYSOMwAraaFuYTT84oe6QYY+EGctAk1b50nA/5E C3Tm/xGuo9ioVtYhTwoo1XDUVeHmghdILjQZvR4pOSZoRGGP9ovb08Qg OmPXuQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN DNSKEY
    SECTION ANSWER
    . IN DNSKEY 256 3 8 AwEAAe1oA46eOLNris1CtS0qM5TdMESK6i4hpalqa6JDv57eOUkaOeje ZW1tIFUokmaK7kuKEFEosddA89CYM8rt2RbC+sfKalbHAWOus0tXZyAL efb2sW95QRzyG6LNul0jQFn9eYWBUHrVe5Wqd0zrFCbTQLUhELSfrlkI UBpO/xKaGinRHX2JjyOnle4aPZY3bEVa/+KyY2ZU6UC4SBo3aHXanP26 ok91rOTmpTWp64ybsMdCXOU8deyuQFQf6q8DhIDmJrkymhX1MXWQQlE0 fAYIYf8/t9OCwucg8oEg4FPU8Gb4Zm/l6PgO4HFkFjBT6iGFCQt3qXe2 Qe3alUWoATc=
    . IN DNSKEY 257 3 8 AwEAAb8sZgVVa02muJ+/+SVhJAvz2EWKGEGquhPbQXuF6ALBYoF4KWTO bZVF8sIVTGoaX5+UWkwwHthg7RwS1DALT/AJymYeHhUwA04gLsfCZ/cv BjmRy5RozeSJ1uxAhoCYHCT2hQBZ0cH0n8roXFXI2Y+6708pO1IBkTPT 9MpAGfezTtGYOortbSn+vqT/Zu8jOpNwkleXON4rlZRBZPd4JUMGL9Y5 N/j6+ClYeM+eFQTKXrLi1oC+0yK1sG5OlqrBDhAhBnz+IhfZz4TOkqJ9 Li2BVMatHBeB9GQHtu0FZuC3J0EQgiZxvq1RgkefFJAiB+5uVRN8U7up 5mLDxSgmT0M=
    . 2592000 IN RRSIG DNSKEY 8 0 3600000 20170409093827 20170310093827 49060 . G7s3QiWNgOsl+LoG6OKjdBHPcFyhmCS17GFnaKjfJNdPQaFL5nM/vrXo eUIIdJXAvjj62TY7wTyFlnx3yjK93RVGKEEySpGC/1gkn5AdjVoQszog IxYjKzubizULSaX7SQ3/Ar+uHLxakdS1qgNdFu6hHCl857LJPtmC8SJt iFUmm5HFyARokMrfA88VrFRKEqojcCWajeZMfRtgBipFJZoYgPUCaFlz 8OupNdNUWCbGhnDWrXCWMzeKVXTQVlJf75PXXgtkuBUmr5RSWu7AYr+c wTJ4E4610goRqYxnZ33efKE/MuhKeY66xelPh0sirPrBMR5JAlyjV3k1 qDzhcQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN AAAA
    SECTION ANSWER
    k.root-servers.net. 3600000 IN AAAA 2001:7fd::1
    k.root-servers.net. 2592000 IN RRSIG AAAA 8 3 3600000 20170409093827 20170310093827 20661 . qjVXwuxzmoRhdrXyQvKfrrzFxGiYuTTJHxwZPasJ1nVmN48dPyU6wA55 JeqoJv1Jm+XvIL1q0WtX6Zh6KLt6vVjHuMkhmFuIZYkFi/dmsEwFY8C0 ebyXyztQT5+6FOSVTAKacYc40LfBo8FqEn8RYlCu1mkAd8ANvvLrdLWW W03LVOY7JlCzyrKlAlmPmuV8z+e9PxNkUh6KfTEvAReoAAX7wYZkdefg 2d64c7rNWXvYm6LxBX6qeQ39d5WyKc8v+G01DJuDzs2Tx368QoK86vm/ qo9ERdT7koRt+gBZNYv8V4fh2SjaFsy2TJq/tiYcSia9snGDTFj6LWVM 6sBCYQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN A
    SECTION ANSWER
    k.root-servers.net. 3600000 IN A 193.0.14.129
    k.root-servers.net. 2592000 IN RRSIG A 8 3 3600000 20170409093827 20170310093827 20661 . qjVXwuxzmoRhdrXyQvKfrrzFxGiYuTTJHxwZPasJ1nVmN48dPyU6wA55 JeqoJv1Jm+XvIL1q0WtX6Zh6KLt6vVjHuMkhmFuIZYkFi/dmsEwFY8C0 ebyXyztQT5+6FOSVTAKacYc40LfBo8FqEn8RYlCu1mkAd8ANvvLrdLWW W03LVOY7JlCzyrKlAlmPmuV8z+e9PxNkUh6KfTEvAReoAAX7wYZkdefg 2d64c7rNWXvYm6LxBX6qeQ39d5WyKc8v+G01DJuDzs2Tx368QoK86vm/ qo9ERdT7koRt+gBZNYv8V4fh2SjaFsy2TJq/tiYcSia9snGDTFj6LWVM 6sBCYQ== ; valid signature of k.root-servers.net IN AAAA
    ENTRY_END
    ; QTYPE == RRSIG is not supported, https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any-04#section-7
    ENTRY_BEGIN
    MATCH opcode qtype
    ADJUST copy_id copy_query
    REPLY QR AA REFUSED
    SECTION QUESTION
    . IN RRSIG
    ENTRY_END
    RANGE_END
    STEP 1 QUERY
    ENTRY_BEGIN
    REPLY RD DO
    SECTION QUESTION
    k.root-servers.net IN A
    ENTRY_END
    STEP 10 CHECK_ANSWER
    ENTRY_BEGIN
    MATCH all
    REPLY QR RD RA DO SERVFAIL
    SECTION QUESTION
    k.root-servers.net IN A
    SECTION ANSWER
    SECTION AUTHORITY
    SECTION ADDITIONAL
    ENTRY_END
    SCENARIO_END
    sets/resolver/val_minimal_baddnskeyalgorithm.rpl 0 → 100644
    View file @ 082aa90e
    trust-anchor: ". IN DS 49060 8 2 E7B1EB56D7D5791B3D45630FEAA9C823DB84B385ACEEAC5F44DD08885C36700F"
    val-override-date: "20170401000000"
    stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
    query-minimization: off
    CONFIG_END
    SCENARIO_BEGIN Changed DNSKEY algorithm.
    ; K.ROOT-SERVERS.NET.
    RANGE_BEGIN 0 100
    ADDRESS 193.0.14.129
    ADDRESS 2001:7fd::1
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    . 518400 IN NS k.root-servers.net.
    . 518400 IN RRSIG NS 8 0 518400 20170409093827 20170310093827 20661 . uBuJpbRh1NYVciSKK0r3SA6NFnqE4s/+CqLfTXu26/HrY5c1aOhQHXZM cCDDjfPGFa7Eh4mqF0i9I+i+bFbYQitI1Heexye599VE19REbVsK4qaU xkArvt9k6HVqd/7BXXUyzLN1N0CScdyuT5tiEI9154SDNVpnC+z8i2u0 9hW8JEk4qqVWX/I1MYQB/UOcFSeDhD1Qku/26opqDuLl/1eaShxhMQ/c rjzOb5ZYzD0x+TUJZMYSOMwAraaFuYTT84oe6QYY+EGctAk1b50nA/5E C3Tm/xGuo9ioVtYhTwoo1XDUVeHmghdILjQZvR4pOSZoRGGP9ovb08Qg OmPXuQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN DNSKEY
    SECTION ANSWER
    . 3600000 IN DNSKEY 256 3 7 AwEAAe1oA46eOLNris1CtS0qM5TdMESK6i4hpalqa6JDv57eOUkaOeje ZW1tIFUokmaK7kuKEFEosddA89CYM8rt2RbC+sfKalbHAWOus0tXZyAL efb2sW95QRzyG6LNul0jQFn9eYWBUHrVe5Wqd0zrFCbTQLUhELSfrlkI UBpO/xKaGinRHX2JjyOnle4aPZY3bEVa/+KyY2ZU6UC4SBo3aHXanP26 ok91rOTmpTWp64ybsMdCXOU8deyuQFQf6q8DhIDmJrkymhX1MXWQQlE0 fAYIYf8/t9OCwucg8oEg4FPU8Gb4Zm/l6PgO4HFkFjBT6iGFCQt3qXe2 Qe3alUWoATc= ; algorithm changed from 8 to 7
    . 3600000 IN DNSKEY 257 3 8 AwEAAb8sZgVVa02muJ+/+SVhJAvz2EWKGEGquhPbQXuF6ALBYoF4KWTO bZVF8sIVTGoaX5+UWkwwHthg7RwS1DALT/AJymYeHhUwA04gLsfCZ/cv BjmRy5RozeSJ1uxAhoCYHCT2hQBZ0cH0n8roXFXI2Y+6708pO1IBkTPT 9MpAGfezTtGYOortbSn+vqT/Zu8jOpNwkleXON4rlZRBZPd4JUMGL9Y5 N/j6+ClYeM+eFQTKXrLi1oC+0yK1sG5OlqrBDhAhBnz+IhfZz4TOkqJ9 Li2BVMatHBeB9GQHtu0FZuC3J0EQgiZxvq1RgkefFJAiB+5uVRN8U7up 5mLDxSgmT0M=
    . 2592000 IN RRSIG DNSKEY 8 0 3600000 20170409093827 20170310093827 49060 . G7s3QiWNgOsl+LoG6OKjdBHPcFyhmCS17GFnaKjfJNdPQaFL5nM/vrXo eUIIdJXAvjj62TY7wTyFlnx3yjK93RVGKEEySpGC/1gkn5AdjVoQszog IxYjKzubizULSaX7SQ3/Ar+uHLxakdS1qgNdFu6hHCl857LJPtmC8SJt iFUmm5HFyARokMrfA88VrFRKEqojcCWajeZMfRtgBipFJZoYgPUCaFlz 8OupNdNUWCbGhnDWrXCWMzeKVXTQVlJf75PXXgtkuBUmr5RSWu7AYr+c wTJ4E4610goRqYxnZ33efKE/MuhKeY66xelPh0sirPrBMR5JAlyjV3k1 qDzhcQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN AAAA
    SECTION ANSWER
    k.root-servers.net. 3600000 IN AAAA 2001:7fd::1
    k.root-servers.net. 2592000 IN RRSIG AAAA 8 3 3600000 20170409093827 20170310093827 20661 . qjVXwuxzmoRhdrXyQvKfrrzFxGiYuTTJHxwZPasJ1nVmN48dPyU6wA55 JeqoJv1Jm+XvIL1q0WtX6Zh6KLt6vVjHuMkhmFuIZYkFi/dmsEwFY8C0 ebyXyztQT5+6FOSVTAKacYc40LfBo8FqEn8RYlCu1mkAd8ANvvLrdLWW W03LVOY7JlCzyrKlAlmPmuV8z+e9PxNkUh6KfTEvAReoAAX7wYZkdefg 2d64c7rNWXvYm6LxBX6qeQ39d5WyKc8v+G01DJuDzs2Tx368QoK86vm/ qo9ERdT7koRt+gBZNYv8V4fh2SjaFsy2TJq/tiYcSia9snGDTFj6LWVM 6sBCYQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN A
    SECTION ANSWER
    k.root-servers.net. 3600000 IN A 193.0.14.129
    k.root-servers.net. 2592000 IN RRSIG A 8 3 3600000 20170409093827 20170310093827 20661 . feIXXjskcsyH+ALZu67GVDaPWXjUGTWsTlDwzgJcLBzSuRVY/GVD5Z1Q B4/oUW99rLKB5bNS1MuasZ+nZFV67sBwJk1+SqNB2bAe7G5Tv1sR2Qgi qDAoB37YDVk5JGHfuxByLYbAVG9PrPXT60BN17OYrD/TFPzprye65gk3 7l9kPpAlblcsqdvh5piKrWc7VBcyMhlp56qdASNAl+Lrb+i0DZYyJXh+ b8LV5g5zp9FaVGKe0Gi4+yDXVjcM6VEtuNRAu2+flLoc3ho6qQF1Po4Y wueL72I+yFoUxkIOJvK47eWb+YUBIBK/L8/ORjYoLBRsrbc79wb0I3Zj Xy6O4Q==
    ENTRY_END
    ; QTYPE == RRSIG is not supported, https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any-04#section-7
    ENTRY_BEGIN
    MATCH opcode qtype
    ADJUST copy_id copy_query
    REPLY QR AA REFUSED
    SECTION QUESTION
    . IN RRSIG
    ENTRY_END
    RANGE_END
    STEP 1 QUERY
    ENTRY_BEGIN
    REPLY RD DO
    SECTION QUESTION
    . IN NS
    ENTRY_END
    STEP 10 CHECK_ANSWER
    ENTRY_BEGIN
    MATCH all
    REPLY QR RD RA DO SERVFAIL
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    SECTION AUTHORITY
    SECTION ADDITIONAL
    ENTRY_END
    SCENARIO_END
    sets/resolver/val_minimal_baddnskeyflags.rpl 0 → 100644
    View file @ 082aa90e
    trust-anchor: ". IN DS 49060 8 2 E7B1EB56D7D5791B3D45630FEAA9C823DB84B385ACEEAC5F44DD08885C36700F"
    val-override-date: "20170401000000"
    stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
    query-minimization: off
    CONFIG_END
    SCENARIO_BEGIN Changed DNSKEY flags.
    ; K.ROOT-SERVERS.NET.
    RANGE_BEGIN 0 100
    ADDRESS 193.0.14.129
    ADDRESS 2001:7fd::1
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    . 518400 IN NS k.root-servers.net.
    . 518400 IN RRSIG NS 8 0 518400 20170409093827 20170310093827 20661 . uBuJpbRh1NYVciSKK0r3SA6NFnqE4s/+CqLfTXu26/HrY5c1aOhQHXZM cCDDjfPGFa7Eh4mqF0i9I+i+bFbYQitI1Heexye599VE19REbVsK4qaU xkArvt9k6HVqd/7BXXUyzLN1N0CScdyuT5tiEI9154SDNVpnC+z8i2u0 9hW8JEk4qqVWX/I1MYQB/UOcFSeDhD1Qku/26opqDuLl/1eaShxhMQ/c rjzOb5ZYzD0x+TUJZMYSOMwAraaFuYTT84oe6QYY+EGctAk1b50nA/5E C3Tm/xGuo9ioVtYhTwoo1XDUVeHmghdILjQZvR4pOSZoRGGP9ovb08Qg OmPXuQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN DNSKEY
    SECTION ANSWER
    . 3600000 IN DNSKEY 254 3 8 AwEAAe1oA46eOLNris1CtS0qM5TdMESK6i4hpalqa6JDv57eOUkaOeje ZW1tIFUokmaK7kuKEFEosddA89CYM8rt2RbC+sfKalbHAWOus0tXZyAL efb2sW95QRzyG6LNul0jQFn9eYWBUHrVe5Wqd0zrFCbTQLUhELSfrlkI UBpO/xKaGinRHX2JjyOnle4aPZY3bEVa/+KyY2ZU6UC4SBo3aHXanP26 ok91rOTmpTWp64ybsMdCXOU8deyuQFQf6q8DhIDmJrkymhX1MXWQQlE0 fAYIYf8/t9OCwucg8oEg4FPU8Gb4Zm/l6PgO4HFkFjBT6iGFCQt3qXe2 Qe3alUWoATc= ; flags changed from 256 to 254
    . 3600000 IN DNSKEY 257 3 8 AwEAAb8sZgVVa02muJ+/+SVhJAvz2EWKGEGquhPbQXuF6ALBYoF4KWTO bZVF8sIVTGoaX5+UWkwwHthg7RwS1DALT/AJymYeHhUwA04gLsfCZ/cv BjmRy5RozeSJ1uxAhoCYHCT2hQBZ0cH0n8roXFXI2Y+6708pO1IBkTPT 9MpAGfezTtGYOortbSn+vqT/Zu8jOpNwkleXON4rlZRBZPd4JUMGL9Y5 N/j6+ClYeM+eFQTKXrLi1oC+0yK1sG5OlqrBDhAhBnz+IhfZz4TOkqJ9 Li2BVMatHBeB9GQHtu0FZuC3J0EQgiZxvq1RgkefFJAiB+5uVRN8U7up 5mLDxSgmT0M=
    . 2592000 IN RRSIG DNSKEY 8 0 3600000 20170409093827 20170310093827 49060 . G7s3QiWNgOsl+LoG6OKjdBHPcFyhmCS17GFnaKjfJNdPQaFL5nM/vrXo eUIIdJXAvjj62TY7wTyFlnx3yjK93RVGKEEySpGC/1gkn5AdjVoQszog IxYjKzubizULSaX7SQ3/Ar+uHLxakdS1qgNdFu6hHCl857LJPtmC8SJt iFUmm5HFyARokMrfA88VrFRKEqojcCWajeZMfRtgBipFJZoYgPUCaFlz 8OupNdNUWCbGhnDWrXCWMzeKVXTQVlJf75PXXgtkuBUmr5RSWu7AYr+c wTJ4E4610goRqYxnZ33efKE/MuhKeY66xelPh0sirPrBMR5JAlyjV3k1 qDzhcQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN AAAA
    SECTION ANSWER
    k.root-servers.net. 3600000 IN AAAA 2001:7fd::1
    k.root-servers.net. 2592000 IN RRSIG AAAA 8 3 3600000 20170409093827 20170310093827 20661 . qjVXwuxzmoRhdrXyQvKfrrzFxGiYuTTJHxwZPasJ1nVmN48dPyU6wA55 JeqoJv1Jm+XvIL1q0WtX6Zh6KLt6vVjHuMkhmFuIZYkFi/dmsEwFY8C0 ebyXyztQT5+6FOSVTAKacYc40LfBo8FqEn8RYlCu1mkAd8ANvvLrdLWW W03LVOY7JlCzyrKlAlmPmuV8z+e9PxNkUh6KfTEvAReoAAX7wYZkdefg 2d64c7rNWXvYm6LxBX6qeQ39d5WyKc8v+G01DJuDzs2Tx368QoK86vm/ qo9ERdT7koRt+gBZNYv8V4fh2SjaFsy2TJq/tiYcSia9snGDTFj6LWVM 6sBCYQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN A
    SECTION ANSWER
    k.root-servers.net. 3600000 IN A 193.0.14.129
    k.root-servers.net. 2592000 IN RRSIG A 8 3 3600000 20170409093827 20170310093827 20661 . feIXXjskcsyH+ALZu67GVDaPWXjUGTWsTlDwzgJcLBzSuRVY/GVD5Z1Q B4/oUW99rLKB5bNS1MuasZ+nZFV67sBwJk1+SqNB2bAe7G5Tv1sR2Qgi qDAoB37YDVk5JGHfuxByLYbAVG9PrPXT60BN17OYrD/TFPzprye65gk3 7l9kPpAlblcsqdvh5piKrWc7VBcyMhlp56qdASNAl+Lrb+i0DZYyJXh+ b8LV5g5zp9FaVGKe0Gi4+yDXVjcM6VEtuNRAu2+flLoc3ho6qQF1Po4Y wueL72I+yFoUxkIOJvK47eWb+YUBIBK/L8/ORjYoLBRsrbc79wb0I3Zj Xy6O4Q==
    ENTRY_END
    ; QTYPE == RRSIG is not supported, https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any-04#section-7
    ENTRY_BEGIN
    MATCH opcode qtype
    ADJUST copy_id copy_query
    REPLY QR AA REFUSED
    SECTION QUESTION
    . IN RRSIG
    ENTRY_END
    RANGE_END
    STEP 1 QUERY
    ENTRY_BEGIN
    REPLY RD DO
    SECTION QUESTION
    . IN NS
    ENTRY_END
    STEP 10 CHECK_ANSWER
    ENTRY_BEGIN
    MATCH all
    REPLY QR RD RA DO SERVFAIL
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    SECTION AUTHORITY
    SECTION ADDITIONAL
    ENTRY_END
    SCENARIO_END
    sets/resolver/val_minimal_baddnskeyprotocol.rpl 0 → 100644
    View file @ 082aa90e
    trust-anchor: ". IN DS 49060 8 2 E7B1EB56D7D5791B3D45630FEAA9C823DB84B385ACEEAC5F44DD08885C36700F"
    val-override-date: "20170401000000"
    stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
    query-minimization: off
    CONFIG_END
    SCENARIO_BEGIN Changed DNSKEY protocol.
    ; K.ROOT-SERVERS.NET.
    RANGE_BEGIN 0 100
    ADDRESS 193.0.14.129
    ADDRESS 2001:7fd::1
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    . 518400 IN NS k.root-servers.net.
    . 518400 IN RRSIG NS 8 0 518400 20170409093827 20170310093827 20661 . uBuJpbRh1NYVciSKK0r3SA6NFnqE4s/+CqLfTXu26/HrY5c1aOhQHXZM cCDDjfPGFa7Eh4mqF0i9I+i+bFbYQitI1Heexye599VE19REbVsK4qaU xkArvt9k6HVqd/7BXXUyzLN1N0CScdyuT5tiEI9154SDNVpnC+z8i2u0 9hW8JEk4qqVWX/I1MYQB/UOcFSeDhD1Qku/26opqDuLl/1eaShxhMQ/c rjzOb5ZYzD0x+TUJZMYSOMwAraaFuYTT84oe6QYY+EGctAk1b50nA/5E C3Tm/xGuo9ioVtYhTwoo1XDUVeHmghdILjQZvR4pOSZoRGGP9ovb08Qg OmPXuQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN DNSKEY
    SECTION ANSWER
    . 3600000 IN DNSKEY 256 2 8 AwEAAe1oA46eOLNris1CtS0qM5TdMESK6i4hpalqa6JDv57eOUkaOeje ZW1tIFUokmaK7kuKEFEosddA89CYM8rt2RbC+sfKalbHAWOus0tXZyAL efb2sW95QRzyG6LNul0jQFn9eYWBUHrVe5Wqd0zrFCbTQLUhELSfrlkI UBpO/xKaGinRHX2JjyOnle4aPZY3bEVa/+KyY2ZU6UC4SBo3aHXanP26 ok91rOTmpTWp64ybsMdCXOU8deyuQFQf6q8DhIDmJrkymhX1MXWQQlE0 fAYIYf8/t9OCwucg8oEg4FPU8Gb4Zm/l6PgO4HFkFjBT6iGFCQt3qXe2 Qe3alUWoATc= ; protocol changed from 3 to 2
    . 3600000 IN DNSKEY 257 3 8 AwEAAb8sZgVVa02muJ+/+SVhJAvz2EWKGEGquhPbQXuF6ALBYoF4KWTO bZVF8sIVTGoaX5+UWkwwHthg7RwS1DALT/AJymYeHhUwA04gLsfCZ/cv BjmRy5RozeSJ1uxAhoCYHCT2hQBZ0cH0n8roXFXI2Y+6708pO1IBkTPT 9MpAGfezTtGYOortbSn+vqT/Zu8jOpNwkleXON4rlZRBZPd4JUMGL9Y5 N/j6+ClYeM+eFQTKXrLi1oC+0yK1sG5OlqrBDhAhBnz+IhfZz4TOkqJ9 Li2BVMatHBeB9GQHtu0FZuC3J0EQgiZxvq1RgkefFJAiB+5uVRN8U7up 5mLDxSgmT0M=
    . 2592000 IN RRSIG DNSKEY 8 0 3600000 20170409093827 20170310093827 49060 . G7s3QiWNgOsl+LoG6OKjdBHPcFyhmCS17GFnaKjfJNdPQaFL5nM/vrXo eUIIdJXAvjj62TY7wTyFlnx3yjK93RVGKEEySpGC/1gkn5AdjVoQszog IxYjKzubizULSaX7SQ3/Ar+uHLxakdS1qgNdFu6hHCl857LJPtmC8SJt iFUmm5HFyARokMrfA88VrFRKEqojcCWajeZMfRtgBipFJZoYgPUCaFlz 8OupNdNUWCbGhnDWrXCWMzeKVXTQVlJf75PXXgtkuBUmr5RSWu7AYr+c wTJ4E4610goRqYxnZ33efKE/MuhKeY66xelPh0sirPrBMR5JAlyjV3k1 qDzhcQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN AAAA
    SECTION ANSWER
    k.root-servers.net. 3600000 IN AAAA 2001:7fd::1
    k.root-servers.net. 2592000 IN RRSIG AAAA 8 3 3600000 20170409093827 20170310093827 20661 . qjVXwuxzmoRhdrXyQvKfrrzFxGiYuTTJHxwZPasJ1nVmN48dPyU6wA55 JeqoJv1Jm+XvIL1q0WtX6Zh6KLt6vVjHuMkhmFuIZYkFi/dmsEwFY8C0 ebyXyztQT5+6FOSVTAKacYc40LfBo8FqEn8RYlCu1mkAd8ANvvLrdLWW W03LVOY7JlCzyrKlAlmPmuV8z+e9PxNkUh6KfTEvAReoAAX7wYZkdefg 2d64c7rNWXvYm6LxBX6qeQ39d5WyKc8v+G01DJuDzs2Tx368QoK86vm/ qo9ERdT7koRt+gBZNYv8V4fh2SjaFsy2TJq/tiYcSia9snGDTFj6LWVM 6sBCYQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN A
    SECTION ANSWER
    k.root-servers.net. 3600000 IN A 193.0.14.129
    k.root-servers.net. 2592000 IN RRSIG A 8 3 3600000 20170409093827 20170310093827 20661 . feIXXjskcsyH+ALZu67GVDaPWXjUGTWsTlDwzgJcLBzSuRVY/GVD5Z1Q B4/oUW99rLKB5bNS1MuasZ+nZFV67sBwJk1+SqNB2bAe7G5Tv1sR2Qgi qDAoB37YDVk5JGHfuxByLYbAVG9PrPXT60BN17OYrD/TFPzprye65gk3 7l9kPpAlblcsqdvh5piKrWc7VBcyMhlp56qdASNAl+Lrb+i0DZYyJXh+ b8LV5g5zp9FaVGKe0Gi4+yDXVjcM6VEtuNRAu2+flLoc3ho6qQF1Po4Y wueL72I+yFoUxkIOJvK47eWb+YUBIBK/L8/ORjYoLBRsrbc79wb0I3Zj Xy6O4Q==
    ENTRY_END
    ; QTYPE == RRSIG is not supported, https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any-04#section-7
    ENTRY_BEGIN
    MATCH opcode qtype
    ADJUST copy_id copy_query
    REPLY QR AA REFUSED
    SECTION QUESTION
    . IN RRSIG
    ENTRY_END
    RANGE_END
    STEP 1 QUERY
    ENTRY_BEGIN
    REPLY RD DO
    SECTION QUESTION
    . IN NS
    ENTRY_END
    STEP 10 CHECK_ANSWER
    ENTRY_BEGIN
    MATCH all
    REPLY QR RD RA DO SERVFAIL
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    SECTION AUTHORITY
    SECTION ADDITIONAL
    ENTRY_END
    SCENARIO_END
    sets/resolver/val_minimal_baddsalgorithm.rpl 0 → 100644
    View file @ 082aa90e
    trust-anchor: ". IN DS 49060 7 2 E7B1EB56D7D5791B3D45630FEAA9C823DB84B385ACEEAC5F44DD08885C36700F" # algorithm changed from 8 to 7
    val-override-date: "20170401000000"
    stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
    query-minimization: off
    CONFIG_END
    SCENARIO_BEGIN Changed algorithm of trust anchor.
    ; K.ROOT-SERVERS.NET.
    RANGE_BEGIN 0 100
    ADDRESS 193.0.14.129
    ADDRESS 2001:7fd::1
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    . 518400 IN NS k.root-servers.net.
    . 518400 IN RRSIG NS 8 0 518400 20170409093827 20170310093827 20661 . uBuJpbRh1NYVciSKK0r3SA6NFnqE4s/+CqLfTXu26/HrY5c1aOhQHXZM cCDDjfPGFa7Eh4mqF0i9I+i+bFbYQitI1Heexye599VE19REbVsK4qaU xkArvt9k6HVqd/7BXXUyzLN1N0CScdyuT5tiEI9154SDNVpnC+z8i2u0 9hW8JEk4qqVWX/I1MYQB/UOcFSeDhD1Qku/26opqDuLl/1eaShxhMQ/c rjzOb5ZYzD0x+TUJZMYSOMwAraaFuYTT84oe6QYY+EGctAk1b50nA/5E C3Tm/xGuo9ioVtYhTwoo1XDUVeHmghdILjQZvR4pOSZoRGGP9ovb08Qg OmPXuQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN DNSKEY
    SECTION ANSWER
    . IN DNSKEY 256 3 8 AwEAAe1oA46eOLNris1CtS0qM5TdMESK6i4hpalqa6JDv57eOUkaOeje ZW1tIFUokmaK7kuKEFEosddA89CYM8rt2RbC+sfKalbHAWOus0tXZyAL efb2sW95QRzyG6LNul0jQFn9eYWBUHrVe5Wqd0zrFCbTQLUhELSfrlkI UBpO/xKaGinRHX2JjyOnle4aPZY3bEVa/+KyY2ZU6UC4SBo3aHXanP26 ok91rOTmpTWp64ybsMdCXOU8deyuQFQf6q8DhIDmJrkymhX1MXWQQlE0 fAYIYf8/t9OCwucg8oEg4FPU8Gb4Zm/l6PgO4HFkFjBT6iGFCQt3qXe2 Qe3alUWoATc=
    . IN DNSKEY 257 3 8 AwEAAb8sZgVVa02muJ+/+SVhJAvz2EWKGEGquhPbQXuF6ALBYoF4KWTO bZVF8sIVTGoaX5+UWkwwHthg7RwS1DALT/AJymYeHhUwA04gLsfCZ/cv BjmRy5RozeSJ1uxAhoCYHCT2hQBZ0cH0n8roXFXI2Y+6708pO1IBkTPT 9MpAGfezTtGYOortbSn+vqT/Zu8jOpNwkleXON4rlZRBZPd4JUMGL9Y5 N/j6+ClYeM+eFQTKXrLi1oC+0yK1sG5OlqrBDhAhBnz+IhfZz4TOkqJ9 Li2BVMatHBeB9GQHtu0FZuC3J0EQgiZxvq1RgkefFJAiB+5uVRN8U7up 5mLDxSgmT0M=
    . 2592000 IN RRSIG DNSKEY 8 0 3600000 20170409093827 20170310093827 49060 . G7s3QiWNgOsl+LoG6OKjdBHPcFyhmCS17GFnaKjfJNdPQaFL5nM/vrXo eUIIdJXAvjj62TY7wTyFlnx3yjK93RVGKEEySpGC/1gkn5AdjVoQszog IxYjKzubizULSaX7SQ3/Ar+uHLxakdS1qgNdFu6hHCl857LJPtmC8SJt iFUmm5HFyARokMrfA88VrFRKEqojcCWajeZMfRtgBipFJZoYgPUCaFlz 8OupNdNUWCbGhnDWrXCWMzeKVXTQVlJf75PXXgtkuBUmr5RSWu7AYr+c wTJ4E4610goRqYxnZ33efKE/MuhKeY66xelPh0sirPrBMR5JAlyjV3k1 qDzhcQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN AAAA
    SECTION ANSWER
    k.root-servers.net. 3600000 IN AAAA 2001:7fd::1
    k.root-servers.net. 2592000 IN RRSIG AAAA 8 3 3600000 20170409093827 20170310093827 20661 . qjVXwuxzmoRhdrXyQvKfrrzFxGiYuTTJHxwZPasJ1nVmN48dPyU6wA55 JeqoJv1Jm+XvIL1q0WtX6Zh6KLt6vVjHuMkhmFuIZYkFi/dmsEwFY8C0 ebyXyztQT5+6FOSVTAKacYc40LfBo8FqEn8RYlCu1mkAd8ANvvLrdLWW W03LVOY7JlCzyrKlAlmPmuV8z+e9PxNkUh6KfTEvAReoAAX7wYZkdefg 2d64c7rNWXvYm6LxBX6qeQ39d5WyKc8v+G01DJuDzs2Tx368QoK86vm/ qo9ERdT7koRt+gBZNYv8V4fh2SjaFsy2TJq/tiYcSia9snGDTFj6LWVM 6sBCYQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN A
    SECTION ANSWER
    k.root-servers.net. 3600000 IN A 193.0.14.129
    k.root-servers.net. 2592000 IN RRSIG A 8 3 3600000 20170409093827 20170310093827 20661 . feIXXjskcsyH+ALZu67GVDaPWXjUGTWsTlDwzgJcLBzSuRVY/GVD5Z1Q B4/oUW99rLKB5bNS1MuasZ+nZFV67sBwJk1+SqNB2bAe7G5Tv1sR2Qgi qDAoB37YDVk5JGHfuxByLYbAVG9PrPXT60BN17OYrD/TFPzprye65gk3 7l9kPpAlblcsqdvh5piKrWc7VBcyMhlp56qdASNAl+Lrb+i0DZYyJXh+ b8LV5g5zp9FaVGKe0Gi4+yDXVjcM6VEtuNRAu2+flLoc3ho6qQF1Po4Y wueL72I+yFoUxkIOJvK47eWb+YUBIBK/L8/ORjYoLBRsrbc79wb0I3Zj Xy6O4Q==
    ENTRY_END
    ; QTYPE == RRSIG is not supported, https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any-04#section-7
    ENTRY_BEGIN
    MATCH opcode qtype
    ADJUST copy_id copy_query
    REPLY QR AA REFUSED
    SECTION QUESTION
    . IN RRSIG
    ENTRY_END
    RANGE_END
    STEP 1 QUERY
    ENTRY_BEGIN
    REPLY RD DO
    SECTION QUESTION
    . IN NS
    ENTRY_END
    STEP 10 CHECK_ANSWER
    ENTRY_BEGIN
    MATCH all
    REPLY QR RD RA DO SERVFAIL
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    SECTION AUTHORITY
    SECTION ADDITIONAL
    ENTRY_END
    SCENARIO_END
    sets/resolver/val_minimal_baddsdigest.rpl 0 → 100644
    View file @ 082aa90e
    trust-anchor: ". IN DS 49060 8 2 A7B1EB56D7D5791B3D45630FEAA9C823DB84B385ACEEAC5F44DD08885C36700F" # digest changed
    val-override-date: "20170401000000"
    stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
    query-minimization: off
    CONFIG_END
    SCENARIO_BEGIN Changed digest of trust anchor.
    ; K.ROOT-SERVERS.NET.
    RANGE_BEGIN 0 100
    ADDRESS 193.0.14.129
    ADDRESS 2001:7fd::1
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    . 518400 IN NS k.root-servers.net.
    . 518400 IN RRSIG NS 8 0 518400 20170409093827 20170310093827 20661 . uBuJpbRh1NYVciSKK0r3SA6NFnqE4s/+CqLfTXu26/HrY5c1aOhQHXZM cCDDjfPGFa7Eh4mqF0i9I+i+bFbYQitI1Heexye599VE19REbVsK4qaU xkArvt9k6HVqd/7BXXUyzLN1N0CScdyuT5tiEI9154SDNVpnC+z8i2u0 9hW8JEk4qqVWX/I1MYQB/UOcFSeDhD1Qku/26opqDuLl/1eaShxhMQ/c rjzOb5ZYzD0x+TUJZMYSOMwAraaFuYTT84oe6QYY+EGctAk1b50nA/5E C3Tm/xGuo9ioVtYhTwoo1XDUVeHmghdILjQZvR4pOSZoRGGP9ovb08Qg OmPXuQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    . IN DNSKEY
    SECTION ANSWER
    . IN DNSKEY 256 3 8 AwEAAe1oA46eOLNris1CtS0qM5TdMESK6i4hpalqa6JDv57eOUkaOeje ZW1tIFUokmaK7kuKEFEosddA89CYM8rt2RbC+sfKalbHAWOus0tXZyAL efb2sW95QRzyG6LNul0jQFn9eYWBUHrVe5Wqd0zrFCbTQLUhELSfrlkI UBpO/xKaGinRHX2JjyOnle4aPZY3bEVa/+KyY2ZU6UC4SBo3aHXanP26 ok91rOTmpTWp64ybsMdCXOU8deyuQFQf6q8DhIDmJrkymhX1MXWQQlE0 fAYIYf8/t9OCwucg8oEg4FPU8Gb4Zm/l6PgO4HFkFjBT6iGFCQt3qXe2 Qe3alUWoATc=
    . IN DNSKEY 257 3 8 AwEAAb8sZgVVa02muJ+/+SVhJAvz2EWKGEGquhPbQXuF6ALBYoF4KWTO bZVF8sIVTGoaX5+UWkwwHthg7RwS1DALT/AJymYeHhUwA04gLsfCZ/cv BjmRy5RozeSJ1uxAhoCYHCT2hQBZ0cH0n8roXFXI2Y+6708pO1IBkTPT 9MpAGfezTtGYOortbSn+vqT/Zu8jOpNwkleXON4rlZRBZPd4JUMGL9Y5 N/j6+ClYeM+eFQTKXrLi1oC+0yK1sG5OlqrBDhAhBnz+IhfZz4TOkqJ9 Li2BVMatHBeB9GQHtu0FZuC3J0EQgiZxvq1RgkefFJAiB+5uVRN8U7up 5mLDxSgmT0M=
    . 2592000 IN RRSIG DNSKEY 8 0 3600000 20170409093827 20170310093827 49060 . G7s3QiWNgOsl+LoG6OKjdBHPcFyhmCS17GFnaKjfJNdPQaFL5nM/vrXo eUIIdJXAvjj62TY7wTyFlnx3yjK93RVGKEEySpGC/1gkn5AdjVoQszog IxYjKzubizULSaX7SQ3/Ar+uHLxakdS1qgNdFu6hHCl857LJPtmC8SJt iFUmm5HFyARokMrfA88VrFRKEqojcCWajeZMfRtgBipFJZoYgPUCaFlz 8OupNdNUWCbGhnDWrXCWMzeKVXTQVlJf75PXXgtkuBUmr5RSWu7AYr+c wTJ4E4610goRqYxnZ33efKE/MuhKeY66xelPh0sirPrBMR5JAlyjV3k1 qDzhcQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN AAAA
    SECTION ANSWER
    k.root-servers.net. 3600000 IN AAAA 2001:7fd::1
    k.root-servers.net. 2592000 IN RRSIG AAAA 8 3 3600000 20170409093827 20170310093827 20661 . qjVXwuxzmoRhdrXyQvKfrrzFxGiYuTTJHxwZPasJ1nVmN48dPyU6wA55 JeqoJv1Jm+XvIL1q0WtX6Zh6KLt6vVjHuMkhmFuIZYkFi/dmsEwFY8C0 ebyXyztQT5+6FOSVTAKacYc40LfBo8FqEn8RYlCu1mkAd8ANvvLrdLWW W03LVOY7JlCzyrKlAlmPmuV8z+e9PxNkUh6KfTEvAReoAAX7wYZkdefg 2d64c7rNWXvYm6LxBX6qeQ39d5WyKc8v+G01DJuDzs2Tx368QoK86vm/ qo9ERdT7koRt+gBZNYv8V4fh2SjaFsy2TJq/tiYcSia9snGDTFj6LWVM 6sBCYQ==
    ENTRY_END
    ENTRY_BEGIN
    MATCH opcode qtype qname
    ADJUST copy_id
    REPLY QR AA NOERROR
    SECTION QUESTION
    k.root-servers.net. IN A
    SECTION ANSWER
    k.root-servers.net. 3600000 IN A 193.0.14.129
    k.root-servers.net. 2592000 IN RRSIG A 8 3 3600000 20170409093827 20170310093827 20661 . feIXXjskcsyH+ALZu67GVDaPWXjUGTWsTlDwzgJcLBzSuRVY/GVD5Z1Q B4/oUW99rLKB5bNS1MuasZ+nZFV67sBwJk1+SqNB2bAe7G5Tv1sR2Qgi qDAoB37YDVk5JGHfuxByLYbAVG9PrPXT60BN17OYrD/TFPzprye65gk3 7l9kPpAlblcsqdvh5piKrWc7VBcyMhlp56qdASNAl+Lrb+i0DZYyJXh+ b8LV5g5zp9FaVGKe0Gi4+yDXVjcM6VEtuNRAu2+flLoc3ho6qQF1Po4Y wueL72I+yFoUxkIOJvK47eWb+YUBIBK/L8/ORjYoLBRsrbc79wb0I3Zj Xy6O4Q==
    ENTRY_END
    ; QTYPE == RRSIG is not supported, https://tools.ietf.org/html/draft-ietf-dnsop-refuse-any-04#section-7
    ENTRY_BEGIN
    MATCH opcode qtype
    ADJUST copy_id copy_query
    REPLY QR AA REFUSED
    SECTION QUESTION
    . IN RRSIG
    ENTRY_END
    RANGE_END
    STEP 1 QUERY
    ENTRY_BEGIN
    REPLY RD DO
    SECTION QUESTION
    . IN NS
    ENTRY_END
    STEP 10 CHECK_ANSWER
    ENTRY_BEGIN
    MATCH all
    REPLY QR RD RA DO SERVFAIL
    SECTION QUESTION
    . IN NS
    SECTION ANSWER
    SECTION AUTHORITY
    SECTION ADDITIONAL
    ENTRY_END
    SCENARIO_END
    sets/resolver/val_minimal_baddsdigesttype.rpl 0 → 100644
    View file @ 082aa90e
    trust-anchor: ". IN DS 49060 8 1 E7B1EB56D7D5791B3D45630FEAA9C823DB84B385ACEEAC5F44DD08885C36700F" # digest type changed from 2 to 1
    val-override-date: "20170401000000"
    stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
    query-minimization: off
    CONFIG_END
    SCENARIO_BEGIN Changed digest type of trust anchor.
    ; K.ROOT-SERVERS.NET.
    RANGE_BEGIN 0 100
    ADDRESS 193.0.14.129
    ADDRESS 2001:7fd::1