1; 2; DS match test file. 3; test matching of DS hash against DNSKEYs. 4; 5; enter ENTRYs with a DS and a DNSKEY. 6; These are matched against another. 7; If the query name starts with 'yes' then it must match. 8; If the query name starts with 'no' then it must not match. 9 10; These are SHA256 and SHA384 tests from the draft-ietf-dnsext-ecdsa-04 11 12ENTRY_BEGIN 13SECTION QUESTION 14yes. IN A 15SECTION ANSWER 16example.net. 3600 IN DS 55648 13 2 ( b4c8c1fe2e7477127b27115656ad6256f424625bf5c1 e2770ce6d6e37df61d17 ) 17example.net. 3600 IN DNSKEY 257 3 13 ( GojIhhXUN/u4v54ZQqGSnyhWJwaubCvTmeexv7bR6edb krSqQpF64cYbcB7wNcP+e+MAnLr+Wi9xMWyQLc8NAA== ) 18ENTRY_END 19 20ENTRY_BEGIN 21SECTION QUESTION 22yes. IN A 23SECTION ANSWER 24example.net. 3600 IN DS 10771 14 4 ( 72d7b62976ce06438e9c0bf319013cf801f09ecc84b8 d7e9495f27e305c6a9b0563a9b5f4d288405c3008a94 6df983d6 ) 25example.net. 3600 IN DNSKEY 257 3 14 ( xKYaNhWdGOfJ+nPrL8/arkwf2EY3MDJ+SErKivBVSum1 w/egsXvSADtNJhyem5RCOpgQ6K8X1DRSEkrbYQ+OB+v8 /uX45NBwY8rp65F6Glur8I/mlVNgF6W/qTI37m40 ) 26ENTRY_END 27 28; same entry as above, but corrupted by a change in the DS, MUST fail 29ENTRY_BEGIN 30SECTION QUESTION 31no. IN A 32SECTION ANSWER 33example.net. 3600 IN DS 55648 13 2 ( b4c8c1fe2e7477126b27115656ad6256f424625bf5c1 e2770ce6d6e37df61d17 ) 34example.net. 3600 IN DNSKEY 257 3 13 ( GojIhhXUN/u4v54ZQqGSnyhWJwaubCvTmeexv7bR6edb krSqQpF64cYbcB7wNcP+e+MAnLr+Wi9xMWyQLc8NAA== ) 35ENTRY_END 36 37; same entry as above, but corrupted by a change in the DS, MUST fail 38ENTRY_BEGIN 39SECTION QUESTION 40no. IN A 41SECTION ANSWER 42example.net. 3600 IN DS 10771 14 4 ( 72d7b62976ce06438e9c0cf319013cf801f09ecc84b8 d7e9495f27e305c6a9b0563a9b5f4d288405c3008a94 6df983d6 ) 43example.net. 3600 IN DNSKEY 257 3 14 ( xKYaNhWdGOfJ+nPrL8/arkwf2EY3MDJ+SErKivBVSum1 w/egsXvSADtNJhyem5RCOpgQ6K8X1DRSEkrbYQ+OB+v8 /uX45NBwY8rp65F6Glur8I/mlVNgF6W/qTI37m40 ) 44ENTRY_END 45 46