1; config options 2server: 3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm 3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )" 4 val-override-date: "20120420235959" 5 target-fetch-policy: "0 0 0 0 0" 6 qname-minimisation: "no" 7 fake-sha1: yes 8 trust-anchor-signaling: no 9 10stub-zone: 11 name: "." 12 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 13CONFIG_END 14 15SCENARIO_BEGIN Test validator NSEC3 B.1 name error without nc NSEC3. 16 17; K.ROOT-SERVERS.NET. 18RANGE_BEGIN 0 100 19 ADDRESS 193.0.14.129 20ENTRY_BEGIN 21MATCH opcode qtype qname 22ADJUST copy_id 23REPLY QR NOERROR 24SECTION QUESTION 25. IN NS 26SECTION ANSWER 27. IN NS K.ROOT-SERVERS.NET. 28SECTION ADDITIONAL 29K.ROOT-SERVERS.NET. IN A 193.0.14.129 30ENTRY_END 31 32ENTRY_BEGIN 33MATCH opcode subdomain 34ADJUST copy_id copy_query 35REPLY QR NOERROR 36SECTION QUESTION 37example. IN A 38SECTION AUTHORITY 39example. IN NS ns1.example. 40; leave out to make unbound take ns1 41;example. IN NS ns2.example. 42SECTION ADDITIONAL 43ns1.example. IN A 192.0.2.1 44; leave out to make unbound take ns1 45;ns2.example. IN A 192.0.2.2 46ENTRY_END 47RANGE_END 48 49; ns1.example. 50RANGE_BEGIN 0 100 51 ADDRESS 192.0.2.1 52ENTRY_BEGIN 53MATCH opcode qtype qname 54ADJUST copy_id copy_query 55REPLY QR REFUSED 56SECTION QUESTION 57ns1.example. IN A 58SECTION ANSWER 59ENTRY_END 60 61ENTRY_BEGIN 62MATCH opcode qtype qname 63ADJUST copy_id copy_query 64REPLY QR REFUSED 65SECTION QUESTION 66ns1.example. IN AAAA 67SECTION ANSWER 68ENTRY_END 69 70ENTRY_BEGIN 71MATCH opcode qtype qname 72ADJUST copy_id copy_query 73REPLY QR REFUSED 74SECTION QUESTION 75example. IN NS 76SECTION ANSWER 77ENTRY_END 78 79; response to DNSKEY priming query 80 81ENTRY_BEGIN 82MATCH opcode qtype qname 83ADJUST copy_id 84REPLY QR NOERROR 85SECTION QUESTION 86example. IN DNSKEY 87SECTION ANSWER 88example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89ep O6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= ) 89example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8 Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= ) 90example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf 3bH+QsCtg== ) 91 92ENTRY_END 93 94ENTRY_BEGIN 95MATCH opcode qtype qname 96ADJUST copy_id 97REPLY QR AA DO NXDOMAIN 98SECTION QUESTION 99a.c.x.w.example. IN A 100SECTION AUTHORITY 101example. SOA ns1.example. bugs.x.w.example. 1 3600 300 ( 3600000 3600 ) 102example. RRSIG SOA 7 1 3600 20150420235959 20051021000000 ( 40430 example. Hu25UIyNPmvPIVBrldN+9Mlp9Zql39qaUd8i q4ZLlYWfUUbbAS41pG+68z81q1xhkYAcEyHd V I2LmKusbZsT0Q== ) 103 104;; NSEC3 RR that covers the "next closer" name (c.x.w.example) 105;; H(c.x.w.example) = 0va5bpr2ou0vk0lbqeeljri88laipsfh 106 107;0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi 47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 108;0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRx K9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 109 110;; NSEC3 RR that matches the closest encloser (x.w.example) 111;; H(x.w.example) = b4um86eghhds6nea196smvmlo4ors995 112 113b4um86eghhds6nea196smvmlo4ors995.example. NSEC3 1 1 12 aabbccdd ( gjeqe526plbf1g8mklp59enfd789njgi MX RRSIG ) 114b4um86eghhds6nea196smvmlo4ors995.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. ZkPG3M32lmoHM6pa3D6gZFGB/rhL//Bs3Omh 5u4m/CUi wtblEVOaAKKZd7S959OeiX43aLX3 pOv0TSTyiTxIZg== ) 115 116;; NSEC3 RR that covers wildcard at the closest encloser (*.x.w.example) 117;; H(*.x.w.example) = 92pqneegtaue7pjatc3l3qnk738c6v5m 118 11935mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 12035mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH +z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 121 122SECTION ADDITIONAL 123ENTRY_END 124 125RANGE_END 126 127STEP 1 QUERY 128ENTRY_BEGIN 129REPLY RD 130SECTION QUESTION 131a.c.x.w.example. IN A 132ENTRY_END 133 134; recursion happens here. 135STEP 10 CHECK_ANSWER 136ENTRY_BEGIN 137MATCH all 138REPLY QR RD RA SERVFAIL 139SECTION QUESTION 140a.c.x.w.example. IN A 141SECTION ANSWER 142SECTION AUTHORITY 143SECTION ADDITIONAL 144ENTRY_END 145 146SCENARIO_END 147