Skip to content

GitLab

D
deckard
Commit 3a635cc4 authored by Ondřej Surý's avatar Ondřej Surý
Browse files
Options

Merge branch 'test_world_mx_nic_www' into 'master' 

Test for www.nic.mx. CNAME kresd issue

See merge request !4
parents b1028235 3ac6fa28
Hide whitespace changes
Inline Side-by-side
Showing with 248 additions and 0 deletions
sets/resolver/world_mx_nic_www.rpl 0 → 100644
View file @ 3a635cc4
; test with real world Internet data
; attempt to resolve www.nic.mx A leads to CNAME www.nicmexico.mx.
; sub-tree nic.mx is not signed and nixmexico.mx is signed.
; the answer must not have AD flag set!
val-override-date: 20170124180319
trust-anchor: ". 172800 IN DS 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5"
stub-addr: 2001:dc3::35
CONFIG_END
SCENARIO_BEGIN www.nic.mx. CNAME kresd issue
; DNS root ; M.ROOT-SERVERS.NET.
RANGE_BEGIN 0 100
ADDRESS 2001:dc3::35
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA DO NOERROR
SECTION QUESTION
. IN DNSKEY
SECTION ANSWER
. 16567 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0=
. 16567 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc=
. 16567 IN RRSIG DNSKEY 8 0 172800 20170201000000 20170111000000 19036 . Sh+EpofvZgk3J9szMD2B94FxFgyIUKz3hkbCjgWSTqPQyhqNgqVU8QlS EtOo8YLmS4AX98eit5Gmmb2ObpkGoXBmAzu5w/Qt5WsGsWzLQhYrsy9s lDmFQ2JKUoCyfdwqhlJ8VxjzdFdMUiVl+/GPnv4yjxjM8Ke3VAtBkn6n BO7JkcxxOfcgZdZ4MuvSr40K/SenZE+JlLLL1LF4TMCGqaZTTdOx6kFF KSSgy2AS884htWcK0tnwRc630g6nAI2wdvjlRLBeisbfXanI4v8iiPyT FnMmnV7wJGWJ4gtRJ0UH3u5RWXUPZ+s1tKytk3slXbLyQ9xkEDveuD+h b659gQ==
ENTRY_END
ENTRY_BEGIN
MATCH opcode subdomain
ADJUST copy_id copy_query
REPLY QR DO NOERROR
SECTION QUESTION
mx. IN NS
SECTION AUTHORITY
mx. 172800 IN NS c.mx-ns.mx.
mx. 172800 IN NS m.mx-ns.mx.
mx. 172800 IN NS e.mx-ns.mx.
mx. 172800 IN NS i.mx-ns.mx.
mx. 172800 IN NS o.mx-ns.mx.
mx. 172800 IN NS x.mx-ns.mx.
mx. 86400 IN DS 55955 8 2 3d7f3313e86341ec23a02f8ed837572d62cf74bf175ac8b2f19b1e2b8930b0d5
mx. 86400 IN RRSIG DS 8 1 86400 20170206050000 20170124040000 61045 . DYmv0z7EnlUOu081yDzeh3tourMFyYtBv7IKIiwPN5ZXuHmw0PvqT0oU//DomnA0NdfCRizOSmvDlZITNtlTffEA3mudnbPC+TEpdf1nffHLHQPnjcS0U+zfoBvRK0OHha3J7YgSXFQuCskJAg4P6ktPzgcd2ccv/FRlzzw4CrZOE3AtDWir31xt8c8DxZjysjIptblua7o9kwac+biWoszUl+sJBAXGbn0XXMloTAisYHyyZF9YeTRz3er8gyao8ynRe2KgUZPX4ieVQl+BsXDOmVRYLE8l4hLSRanjoWOR3gAqQUHJwn9xXxhGfApe5tUhaCE7v1EplCw9ykaKVA==
SECTION ADDITIONAL
c.mx-ns.mx. 172800 IN A 192.100.224.1
e.mx-ns.mx. 172800 IN A 189.201.244.1
i.mx-ns.mx. 172800 IN A 207.248.68.1
m.mx-ns.mx. 172800 IN A 200.94.176.1
o.mx-ns.mx. 172800 IN A 200.23.1.1
x.mx-ns.mx. 172800 IN A 201.131.252.1
c.mx-ns.mx. 172800 IN AAAA 2001:1258::1
m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1
ENTRY_END
; end of M.ROOT-SERVERS.NET.
RANGE_END
; ?.mx-ns.mx.
RANGE_BEGIN 0 100
ADDRESS 192.100.224.1
ADDRESS 189.201.244.1
ADDRESS 207.248.68.1
ADDRESS 200.94.176.1
ADDRESS 200.23.1.1
ADDRESS 201.131.252.1
ADDRESS 2001:1258::1
ADDRESS 2001:13c7:7000::1
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA RD NOERROR
SECTION QUESTION
mx. IN DNSKEY
SECTION ANSWER
mx. 86400 IN DNSKEY 257 3 8 AwEAAcokawGJMW4OI1eas0vAtfl0etrPSlqkh7n/JPpdMt5fplkWI0oo YS3kYBXYzMxXnpNOK57jp5JodELeZKDrHCrUhAzZiy5iJQDy9Qi85mSC KTHg32+JKjXiMEkTZUlOzNRrXC7apWfZbzbx98CnzkWw0Xj2wDIniptM jnwAJeb8L+Mm5AzZSkUugga/eDvpVsT5MZZnT/DuJdxS5olx+HyTKLct m/LDljtQKJya0UtXUKkVc5cv8y+ja5AivjXXrUmDcgd1P6bntcbjpcFY UuLZMsmyOZ2uViXNEhIdBcP+davulxW++DawqOtvnpuRxfLFsuYw/vDC ilfIGEdgz20=
mx. 86400 IN DNSKEY 256 3 8 AwEAAcwqWcnh23qhQTbWsbOKbRI4btNQCYRa4ksadH8VjQ++VruqkhPu d7e/RsZMhevCWDJHrjfJ739NmiGIwS58uh1sVACfKRmxLP25/1V9frIi HBxkaVLXPAHm8+ApIhzUzaUTUrmSnDm0/wJryo34zETnA6J4czfzYDLX Vqh3KVtL
mx. 86400 IN RRSIG DNSKEY 8 1 86400 20170223000000 20170124000000 48529 mx. BYGaUXiyB0vIi4sBwvUuL2Im+zcIpykZD96YdvA3Kpk7RlV3LcLD9L6B +HpwFWMRZ+vt09YW/jrzSR9mlXpZeWR6BhHoo9f2MGOO5dwejnUuipLD +t5wKi91XALmaRN4Z2ptdJ0wVMpfXlkfrNTB+RvYAqx/azDGw5Ewjh7C J5Y=
mx. 86400 IN RRSIG DNSKEY 8 1 86400 20170303150000 20170102150000 55955 mx. SboaaGva7+GbfoNKa8Ov2GhSIvYStcBeudk0A0+53/LMs7sHuLegE9+P lTqih4sl/W1Yd4a4jWoVYGGYu8M4tb1fzaxvr5eTDwm3gKGirbTsQPFl Ih5gNnC6QJKYBhpN7w/Fn3JmJTBLwhd7tREygGqkNO/LdTwiHfbcIzkU 5UpD9A3/oeZoMQe71AvJstU5PIHxg3PU1CNU9YBcNhYzUfTfcr+hlbmA Nm6RaOBaWJwp4YzcS3uJcaXmpS1t/lbxWIgeOXRhql6ZHqCai0lSmNnm vAydmJI/cqXsJ23Pj22TD1QwDFKTp0u2oIiykeFzdbIG0s2thtmyY4km qh1Ulg==
ENTRY_END
; nix.mx
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA DO NOERROR
SECTION QUESTION
nic.mx. IN NS
SECTION ANSWER
nic.mx. 172800 IN NS o.mx-ns.mx.
nic.mx. 172800 IN NS m.mx-ns.mx.
nic.mx. 172800 IN NS c.mx-ns.mx.
nic.mx. 172800 IN NS x.mx-ns.mx.
nic.mx. 172800 IN NS e.mx-ns.mx.
nic.mx. 172800 IN NS i.mx-ns.mx.
SECTION ADDITIONAL
c.mx-ns.mx. 172800 IN A 192.100.224.1
c.mx-ns.mx. 172800 IN AAAA 2001:1258::1
e.mx-ns.mx. 172800 IN A 189.201.244.1
i.mx-ns.mx. 172800 IN A 207.248.68.1
m.mx-ns.mx. 172800 IN A 200.94.176.1
m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1
o.mx-ns.mx. 172800 IN A 200.23.1.1
x.mx-ns.mx. 172800 IN A 201.131.252.1
ENTRY_END
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA DO NOERROR
SECTION QUESTION
nic.mx. IN DS
SECTION AUTHORITY
qpcf3eq45ur6ndho0ecuj1o25g7d48pi.mx. 1800 IN NSEC3 1 1 100 FBB1D947FF931FC5 QPDGRP34SI0F3CBG41HRN7G8TLFK6C7B NS SOA RRSIG DNSKEY NSEC3PARAM
qpcf3eq45ur6ndho0ecuj1o25g7d48pi.mx. 1800 IN RRSIG NSEC3 8 2 1800 20170223000000 20170124000000 48529 mx. RI7Ezya54VVVcCiyH2rHBjRwWzsoe2A1vBcwzFUeiKFPsoOsCkvAfpvU uZ96IEa0Ni7ZksS2XFuV9TeQotk/HirhRGq2AauGtF4RLExmZnZouAjz tLZYXhr7mZAqfKLzZV5qNzlYSia3wF9m4wkz4eSBfeJ/6u2AoQP81C3Y Dls=
mx. 1800 IN SOA m.mx-ns.mx. hostmaster.nic.mx. 1485251802 900 900 604800 1800
mx. 1800 IN RRSIG SOA 8 1 86400 20170223000000 20170124000000 48529 mx. Gwjg+/GJUJj32FMa9HKESM7zsPFdVVEotOIyXKhZjOX139PhfbcOdfJr bfhDvVV8weMoLHhM0rVko0Sr+H8S3+R8wNOkvoFPqd3G5YV2azS52qOQ xPq1gVT0g3bWtmgF0KV2fGQ2Lcw7ynksenBmpQCggjbh/O98zwfRJkcc Huk=
1e790cnnc0n6fmd7hhf7o1baus5muq9l.mx. 1800 IN NSEC3 1 1 100 FBB1D947FF931FC5 1EDMBBOCRH8AB8GRQF55CMJV2IS3U6E7 NS DS RRSIG
1e790cnnc0n6fmd7hhf7o1baus5muq9l.mx. 1800 IN RRSIG NSEC3 8 2 1800 20170223000000 20170124000000 48529 mx. xP9wMq871/wi0N99DkUhXHB1VjyjG5zds0CHIdrm1MC0JPl2atB1nliC tYC/nMC6vHGRk7bcX0kFNDgi0duGuNwKEHyTp2gHBSoMefUtDfJbOoq8 4VSQvS0WaJlK1H3eV21AdhmpZEAe0YB6e7lU5plhqNMX5mxDD5d0ZVD8 TWI=
ENTRY_END
; this entry is the one which caused kresd to return AD flag despite of missing RRSIGs
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA DO NOERROR
SECTION QUESTION
www.nic.mx. IN A
SECTION ANSWER
www.nic.mx. 300 IN CNAME www.nicmexico.mx.
ENTRY_END
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA DO NOERROR
SECTION QUESTION
www.nic.mx. IN RRSIG
SECTION AUTHORITY
nic.mx. 1800 IN SOA m.mx-ns.mx. hostmaster.nic.mx. 2016101701 3600 900 604800 1800
ENTRY_END
; nixmexico.mx
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA RD NOERROR
SECTION QUESTION
nicmexico.mx. IN NS
SECTION ANSWER
nicmexico.mx. 172800 IN NS o.mx-ns.mx.
nicmexico.mx. 172800 IN NS m.mx-ns.mx.
nicmexico.mx. 172800 IN NS e.mx-ns.mx.
nicmexico.mx. 172800 IN NS x.mx-ns.mx.
nicmexico.mx. 172800 IN NS i.mx-ns.mx.
nicmexico.mx. 172800 IN NS c.mx-ns.mx.
nicmexico.mx. 172800 IN RRSIG NS 7 2 172800 20170221235959 20161221161902 14618 nicmexico.mx. MMPJ1lltyGLyE+s+V7mFb3iJzWkKgnCRtBGgVqynFaKJBgEX+0NFy8Iq o8CKWlXGXitDilaE3xy6ynYnb8CeQuEeaKVLzikUwxu+bTR/tcX1fECp 2i9uDFTl/wrYSyNU4gEy/4Ueev5GsM8XQmK5j8xgUmwc+258eRBZ129O K1E=
SECTION ADDITIONAL
c.mx-ns.mx. 172800 IN A 192.100.224.1
c.mx-ns.mx. 172800 IN AAAA 2001:1258::1
e.mx-ns.mx. 172800 IN A 189.201.244.1
i.mx-ns.mx. 172800 IN A 207.248.68.1
m.mx-ns.mx. 172800 IN A 200.94.176.1
m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1
o.mx-ns.mx. 172800 IN A 200.23.1.1
x.mx-ns.mx. 172800 IN A 201.131.252.1
ENTRY_END
ENTRY_BEGIN
MATCH opcode qtype qname
REPLY QR AA DO
SECTION QUESTION
nicmexico.mx. IN DS
SECTION ANSWER
nicmexico.mx. 86400 IN DS 25953 7 1 3980E3CBB2DC1F0A39EE58454F218D695C6FCF2B
nicmexico.mx. 86400 IN DS 25953 7 2 E390593C68F6C5BD1A38E3CF7D9643235AC9C09A1023EBEA8E6D56FC 9EF2AAA6
nicmexico.mx. 86400 IN RRSIG DS 8 2 86400 20170223000000 20170124000000 48529 mx. kwiqOPNYD6k+CPGGewQ7YWnJqomLkr4wrIT96qnb11l1m+BBtCZnxh1X 9u1I4nQsLC9/gJh1sytYkMogObxd6CsMUwAn8lA7Pnlbz1upINis7oE5 2MoHjYDhhJnfSryTtiw5Xak+Bup3GGmi4KgNsitQXUK8rFg5xAwyjtb6 udg=
ENTRY_END
ENTRY_BEGIN
MATCH opcode qtype qname
REPLY QR AA DO
SECTION QUESTION
nicmexico.mx. IN DNSKEY
SECTION ANSWER
nicmexico.mx. 172800 IN DNSKEY 257 3 7 AwEAAdU7ho1gF5Swo/P3EMrcm82fE3bSvXec/q4HvGndCS+iEhOVMQgx SmjhdnILgNE23x5v7iprrQdcrC6qG3h5pWromlJt4zqqWD91OuydXGpB vkx9o3gWo9wqr+2mX4cPKsKKhiyQ1EBEbaYZP1PqEWigdTuzVB2zGWAu yCNlbgHX8Q4pgU/P+jdTB0RFkQEa7BtIu/+7JYpB09REdjtn4AgdqaVK rq9gQRxAbpuQezw5vEnK/EFiH+FIa8FWctMhRkC2IdG5THpG8lzZry+Q 04Mih/r7tsY/RbA0asG4RVOFTtHCdjIZc4f4fxNIaR4B7IzBPIWN0d3/ ILI6sObAnJs=
nicmexico.mx. 172800 IN DNSKEY 256 3 7 AwEAAdlPfZYpM3PWP1ub8MDc4fSBVu3f+lS3ojPAaKNEgXu0mzGP9BtS Rj7kAIR2BQN61sb6b2QIT2QnGSkOjfho0TLm1UjcAMjRC6A4bwVmwYgj OMXd56jRi1zeus3nBz661inwqSOOs4+72SiVLqmbzDV0uFHAZFrSIrS0 Fp5vDTS/
nicmexico.mx. 172800 IN DNSKEY 256 3 7 AwEAAbmZ5YmUhQKofswApd84tnITiUqh8kyN609rOanl3ga7WEjGs2bD D8RU/oOj31OzfnEFLSLH0fpIWCPWT+lvZ9HFOxAMavXnwncKsAVLNrv+ CuBGTiQ4wa2C/vQ7i/D1SbnXAUs/17Pu9onlAGeDoolgsUAgldfRwEGp tVfY8r71
nicmexico.mx. 172800 IN RRSIG DNSKEY 7 2 172800 20170221235959 20161221161902 14618 nicmexico.mx. BTeItGos/TVLbiYrisWuJCFmdnA+p3yBHOMfUsvPAOvs5trTincG5wkY EHsq13Dvk9JNjSYh4HPlmlnsXDmUPXm6Z4bd1BXFVPiK3r4I1YGwwP/M ATNjw5V8w+my3PvOQdwyhWiF8dnd0EfeK3t+b/prwZiWs64ezaNiMxUk i5s=
nicmexico.mx. 172800 IN RRSIG DNSKEY 7 2 172800 20170221235959 20161221161902 25953 nicmexico.mx. NPVmWrmIeGHYOjrfonov29kFG5gP2vaP0qE8sZplYt44MzgBnhLt+cZS sk6NNEhLPgYe4fiPxj3xzT+BjxTUCCQo3CT1KR4uaEIbepBmxDx8dMv6 4c1AO2wNnt8x/OBG+Nwg3gLaf4UtdJvOQsdpOsTzqKKo7WPKxeb462gw 4aZzYh4uhEjTFil8eGLXOlGe8CYThAdwxKbA6tEZxE5UEa2mIb2orSbz ro+ehp6imnn3YWtLWBtkWQqsSaqLug4HUrXgjbqNSZ+FCdO4WIxLgDsz k+jlA7tdkZknE43AQX/md6orKDalCb4OtrC0yrgYDtwVsgP1qZVAjJWW 09nUIg==
ENTRY_END
ENTRY_BEGIN
MATCH opcode qtype qname
REPLY QR AA DO
SECTION QUESTION
www.nicmexico.mx. IN A
SECTION ANSWER
www.nicmexico.mx. 172800 IN A 200.94.180.55
www.nicmexico.mx. 172800 IN A 200.94.180.54
www.nicmexico.mx. 172800 IN A 200.94.180.57
www.nicmexico.mx. 172800 IN A 200.94.180.56
www.nicmexico.mx. 172800 IN RRSIG A 7 3 172800 20170221235959 20161221161902 14618 nicmexico.mx. s3THv+Ay2WrcOTG6bo+54Zc/rff/jhzcJKZ3ZRYMXhw3FToSvTOSqsIG 1gzW/Sk6r2oikHH3nNluaMTAXfCULu2mHiQVAuFlnajFSMPcm8KvEyV0 cCT7knkAFqb+ODkimPMufRHiOLbnhQk9/A25qK7J8rCB76IUmzk41hYR NBU=
SECTION AUTHORITY
nicmexico.mx. 172800 IN NS m.mx-ns.mx.
nicmexico.mx. 172800 IN NS c.mx-ns.mx.
nicmexico.mx. 172800 IN NS i.mx-ns.mx.
nicmexico.mx. 172800 IN NS o.mx-ns.mx.
nicmexico.mx. 172800 IN NS x.mx-ns.mx.
nicmexico.mx. 172800 IN NS e.mx-ns.mx.
nicmexico.mx. 172800 IN RRSIG NS 7 2 172800 20170221235959 20161221161902 14618 nicmexico.mx. MMPJ1lltyGLyE+s+V7mFb3iJzWkKgnCRtBGgVqynFaKJBgEX+0NFy8Iq o8CKWlXGXitDilaE3xy6ynYnb8CeQuEeaKVLzikUwxu+bTR/tcX1fECp 2i9uDFTl/wrYSyNU4gEy/4Ueev5GsM8XQmK5j8xgUmwc+258eRBZ129O K1E=
SECTION ADDITIONAL
c.mx-ns.mx. 172800 IN A 192.100.224.1
e.mx-ns.mx. 172800 IN A 189.201.244.1
i.mx-ns.mx. 172800 IN A 207.248.68.1
m.mx-ns.mx. 172800 IN A 200.94.176.1
o.mx-ns.mx. 172800 IN A 200.23.1.1
x.mx-ns.mx. 172800 IN A 201.131.252.1
c.mx-ns.mx. 172800 IN AAAA 2001:1258::1
m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1
ENTRY_END
; end ?.mx-ns.mx.
RANGE_END
STEP 10 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
www.nic.mx. IN A
ENTRY_END
STEP 11 CHECK_ANSWER
ENTRY_BEGIN
MATCH flags rcode question answer
REPLY QR RD RA DO NOERROR
SECTION QUESTION
www.nic.mx. IN A
SECTION ANSWER
www.nic.mx. 300 IN CNAME www.nicmexico.mx.
www.nicmexico.mx. 171139 IN A 200.94.180.57
www.nicmexico.mx. 171139 IN A 200.94.180.56
www.nicmexico.mx. 171139 IN A 200.94.180.54
www.nicmexico.mx. 171139 IN A 200.94.180.55
www.nicmexico.mx. 171139 IN RRSIG A 7 3 172800 20170221235959 20161221161902 14618 nicmexico.mx. s3THv+Ay2WrcOTG6bo+54Zc/rff/jhzcJKZ3ZRYMXhw3FToSvTOSqsIG1gzW/Sk6r2oikHH3nNluaMTAXfCULu2mHiQVAuFlnajFSMPcm8KvEyV0cCT7knkAFqb+ODkimPMufRHiOLbnhQk9/A25qK7J8rCB76IUmzk41hYRNBU=
ENTRY_END
SCENARIO_END
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment