1; config options 2server: 3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )" 4 val-override-date: "20120420235959" 5 target-fetch-policy: "0 0 0 0 0" 6 fake-sha1: yes 7 trust-anchor-signaling: no 8 9stub-zone: 10 name: "." 11 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 12CONFIG_END 13 14SCENARIO_BEGIN Test validator NSEC3 B.5 wildcard nodata, without ce. 15 16; K.ROOT-SERVERS.NET. 17RANGE_BEGIN 0 100 18 ADDRESS 193.0.14.129 19ENTRY_BEGIN 20MATCH opcode qtype qname 21ADJUST copy_id 22REPLY QR NOERROR 23SECTION QUESTION 24. IN NS 25SECTION ANSWER 26. IN NS K.ROOT-SERVERS.NET. 27SECTION ADDITIONAL 28K.ROOT-SERVERS.NET. IN A 193.0.14.129 29ENTRY_END 30 31ENTRY_BEGIN 32MATCH opcode subdomain 33ADJUST copy_id copy_query 34REPLY QR NOERROR 35SECTION QUESTION 36example. IN A 37SECTION AUTHORITY 38example. IN NS ns1.example. 39; leave out to make unbound take ns1 40;example. IN NS ns2.example. 41SECTION ADDITIONAL 42ns1.example. IN A 192.0.2.1 43; leave out to make unbound take ns1 44;ns2.example. IN A 192.0.2.2 45ENTRY_END 46RANGE_END 47 48; ns1.example. 49RANGE_BEGIN 0 100 50 ADDRESS 192.0.2.1 51ENTRY_BEGIN 52MATCH opcode qtype qname 53ADJUST copy_id copy_query 54REPLY QR REFUSED 55SECTION QUESTION 56ns1.example. IN A 57SECTION ANSWER 58ENTRY_END 59 60ENTRY_BEGIN 61MATCH opcode qtype qname 62ADJUST copy_id copy_query 63REPLY QR REFUSED 64SECTION QUESTION 65ns1.example. IN AAAA 66SECTION ANSWER 67ENTRY_END 68 69ENTRY_BEGIN 70MATCH opcode qtype qname 71ADJUST copy_id copy_query 72REPLY QR REFUSED 73SECTION QUESTION 74example. IN NS 75SECTION ANSWER 76ENTRY_END 77 78; response to DNSKEY priming query 79 80ENTRY_BEGIN 81MATCH opcode qtype qname 82ADJUST copy_id 83REPLY QR NOERROR 84SECTION QUESTION 85example. IN DNSKEY 86SECTION ANSWER 87example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= ) 88example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= ) 89example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== ) 90ENTRY_END 91 92ENTRY_BEGIN 93MATCH opcode qtype qname 94ADJUST copy_id 95REPLY QR AA DO NOERROR 96SECTION QUESTION 97a.z.w.example. IN AAAA 98SECTION ANSWER 99SECTION AUTHORITY 100example. SOA ns1.example. bugs.x.w.example. 1 3600 300 ( 3600000 3600 ) 101example. RRSIG SOA 7 1 3600 20150420235959 20051021000000 ( 40430 example. Hu25UIyNPmvPIVBrldN+9Mlp9Zql39qaUd8i q4ZLlYWfUUbbAS41pG+68z81q1xhkYAcEyHd VI2LmKusbZsT0Q== ) 102 103;; NSEC3 RR that matches the closest encloser (w.example) 104;; H(w.example) = k8udemvp1j2f7eg6jebps17vp3n8i58h 105;k8udemvp1j2f7eg6jebps17vp3n8i58h.example. NSEC3 1 1 12 aabbccdd ( kohar7mbb8dc2ce8a9qvl8hon4k53uhi ) 106;k8udemvp1j2f7eg6jebps17vp3n8i58h.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. FtXGbvF0+wf8iWkyo73enAuVx03klN+pILBK S6qCcftVtfH4yVzsEZquJ27NHR7ruxJWDNMt Otx7w9WfcIg62A== ) 107 108;; NSEC3 RR that covers the "next closer" name (z.w.example) 109;; H(z.w.example) = qlu7gtfaeh0ek0c05ksfhdpbcgglbe03 110q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd ( r53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG ) 111q04jkcevqvmu85r014c7dkba38o0ji5r.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. hV5I89b+4FHJDATp09g4bbN0R1F845CaXpL3 ZxlMKimoPAyqletMlEWwLfFia7sdpSzn+ZlN NlkxWcLsIlMmUg== ) 112 113;; NSEC3 RR that matches a wildcard at the closest encloser. 114;; H(*.w.example) = r53bq7cc2uvmubfu5ocmm6pers9tk9en 115r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. NSEC3 1 1 12 aabbccdd ( t644ebqk9bibcna874givr6joj62mlhv MX RRSIG ) 116r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. aupviViruXs4bDg9rCbezzBMf9h1ZlDvbW/C ZFKulIGXXLj8B/fsDJarXVDA9bnUoRhEbKp+ HF1FWKW7RIJdtQ== ) 117 118SECTION ADDITIONAL 119ENTRY_END 120 121; catch glue queries 122ENTRY_BEGIN 123MATCH opcode qtype qname 124ADJUST copy_id 125REPLY QR AA DO NOERROR 126SECTION QUESTION 127ns2.example. IN A 128SECTION ANSWER 129; nothing to make sure the ns1 server is used for queries. 130ENTRY_END 131 132ENTRY_BEGIN 133MATCH opcode qtype qname 134ADJUST copy_id 135REPLY QR AA DO NOERROR 136SECTION QUESTION 137ns2.example. IN AAAA 138SECTION ANSWER 139; nothing to make sure the ns1 server is used for queries. 140ENTRY_END 141 142 143RANGE_END 144 145STEP 1 QUERY 146ENTRY_BEGIN 147REPLY RD 148SECTION QUESTION 149a.z.w.example. IN AAAA 150ENTRY_END 151 152; recursion happens here. 153STEP 10 CHECK_ANSWER 154ENTRY_BEGIN 155MATCH all 156REPLY QR RD RA SERVFAIL 157SECTION QUESTION 158a.z.w.example. IN AAAA 159SECTION ANSWER 160SECTION AUTHORITY 161SECTION ADDITIONAL 162ENTRY_END 163 164SCENARIO_END 165