xref: /netbsd-src/external/bsd/unbound/dist/testdata/val_nsec3_entnodata_optout.rpl (revision 0cd9f4ecf44538bbdd5619b5b2081449960ab3e6) 
1; config options
2; The island of trust is at example.com
3server:
4	trust-anchor: "example.com.    3600    IN      DS      2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
5	val-override-date: "20070916134226"
6	target-fetch-policy: "0 0 0 0 0"
7	fake-sha1: yes
8	trust-anchor-signaling: no
9
10stub-zone:
11	name: "."
12	stub-addr: 193.0.14.129 	# K.ROOT-SERVERS.NET.
13CONFIG_END
14
15SCENARIO_BEGIN Test validator with NSEC3 response for NODATA ENT with optout.
16
17; K.ROOT-SERVERS.NET.
18RANGE_BEGIN 0 100
19	ADDRESS 193.0.14.129
20ENTRY_BEGIN
21MATCH opcode qtype qname
22ADJUST copy_id
23REPLY QR NOERROR
24SECTION QUESTION
25. IN NS
26SECTION ANSWER
27. IN NS	K.ROOT-SERVERS.NET.
28SECTION ADDITIONAL
29K.ROOT-SERVERS.NET.	IN	A	193.0.14.129
30ENTRY_END
31
32ENTRY_BEGIN
33MATCH opcode subdomain
34ADJUST copy_id copy_query
35REPLY QR NOERROR
36SECTION QUESTION
37com. IN A
38SECTION AUTHORITY
39com.	IN NS	a.gtld-servers.net.
40SECTION ADDITIONAL
41a.gtld-servers.net.	IN 	A	192.5.6.30
42ENTRY_END
43RANGE_END
44
45; a.gtld-servers.net.
46RANGE_BEGIN 0 100
47	ADDRESS 192.5.6.30
48ENTRY_BEGIN
49MATCH opcode qtype qname
50ADJUST copy_id
51REPLY QR NOERROR
52SECTION QUESTION
53com. IN NS
54SECTION ANSWER
55com.    IN NS   a.gtld-servers.net.
56SECTION ADDITIONAL
57a.gtld-servers.net.     IN      A       192.5.6.30
58ENTRY_END
59
60ENTRY_BEGIN
61MATCH opcode subdomain
62ADJUST copy_id copy_query
63REPLY QR NOERROR
64SECTION QUESTION
65example.com. IN A
66SECTION AUTHORITY
67example.com.	IN NS	ns.example.com.
68SECTION ADDITIONAL
69ns.example.com.		IN 	A	1.2.3.4
70ENTRY_END
71RANGE_END
72
73; ns.example.com.
74RANGE_BEGIN 0 100
75	ADDRESS 1.2.3.4
76ENTRY_BEGIN
77MATCH opcode qtype qname
78ADJUST copy_id
79REPLY QR AA REFUSED
80SECTION QUESTION
81ns.example.com. IN A
82ENTRY_END
83
84ENTRY_BEGIN
85MATCH opcode qtype qname
86ADJUST copy_id
87REPLY QR AA REFUSED
88SECTION QUESTION
89ns.example.com. IN AAAA
90ENTRY_END
91
92ENTRY_BEGIN
93MATCH opcode qtype qname
94ADJUST copy_id
95REPLY QR NOERROR
96SECTION QUESTION
97example.com. IN NS
98SECTION ANSWER
99example.com.    IN NS   ns.example.com.
100example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
101SECTION ADDITIONAL
102ns.example.com.         IN      A       1.2.3.4
103ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
104ENTRY_END
105
106; response to DNSKEY priming query
107ENTRY_BEGIN
108MATCH opcode qtype qname
109ADJUST copy_id
110REPLY QR NOERROR
111SECTION QUESTION
112example.com. IN DNSKEY
113SECTION ANSWER
114example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
115example.com.    3600    IN      RRSIG   DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
116SECTION AUTHORITY
117example.com.	IN NS	ns.example.com.
118example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
119SECTION ADDITIONAL
120ns.example.com.		IN 	A	1.2.3.4
121ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
122ENTRY_END
123
124ENTRY_BEGIN
125MATCH opcode qtype qname
126ADJUST copy_id
127REPLY QR NOERROR
128SECTION QUESTION
129www.example.com. IN A
130SECTION AUTHORITY
131example.com.	IN SOA	ns.example.com. hostmaster.example.com. 2007090400 28800 7200 604800 18000
132example.com.    3600    IN      RRSIG   SOA 3 2 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCM6lsu9byZIQ1yYjJmyYfFWM2RWAIUcR5t84r2La824oWCkLjmHXRQlco= ;{id = 2854}
133
134; NODATA response. H(www.example.com.) = s1unhcti19bkdr98fegs0v46mbu3t4m3
135s1unhcti19bkdr98fegs0v46mbu3t4m3.example.com. IN NSEC3  1 1 123 aabb00123456bbccdd s1unhcti19bkdr98fegs0v46mbu3t4m4 MX RRSIG
136s1unhcti19bkdr98fegs0v46mbu3t4m3.example.com.   3600    IN      RRSIG   NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. MCwCFE/a24nsY2luhQmZjY/ObAIgNSMkAhQWd4MUOUVK55bD6AbMHWrDA0yvEA== ;{id = 2854}
137
138ENTRY_END
139
140ENTRY_BEGIN
141MATCH opcode qtype qname
142ADJUST copy_id
143REPLY QR NOERROR
144SECTION QUESTION
145ent.example.com. IN DS
146SECTION AUTHORITY
147; example.com. -> b6fuorg741ufili49mg9j4328ig53sqg.
148; OPTOUT
149b6fuorg741ufili49mg9j4328ig53sqg.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd b6fuorg741ufili49mg9j4328ig54sqg NS SOA DNSKEY RRSIG
150b6fuorg741ufili49mg9j4328ig53sqg.example.com.	3600	IN	RRSIG	NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AHNLlpOM8cBFBBdzUO9nQC/O6mw3rDUrqcdiSwMKAIckd3k5WZvoP78=
151
152; ent.example.com. -> 2kekcu37chvrqjb272ptidu9jhk8oqag.
153; OPTOUT SPAN around it
1542kekcu37chvrqjb272ptidu9jhk7oqag.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd 2kekcu37chvrqjb272ptidu9jhk9oqag
1552kekcu37chvrqjb272ptidu9jhk7oqag.example.com.	3600	IN	RRSIG	NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AFgtC3UEm/Tu4HIjfDHIDmZkvgwHF0kWKcD3wP2hs+/wOfaILtXBr4c=
156ENTRY_END
157
158; refer to server one down
159ENTRY_BEGIN
160MATCH opcode subdomain
161ADJUST copy_id copy_query
162REPLY QR NOERROR
163SECTION QUESTION
164ent.example.com. IN A
165SECTION AUTHORITY
166; example.com. -> b6fuorg741ufili49mg9j4328ig53sqg.
167; OPTOUT
168b6fuorg741ufili49mg9j4328ig53sqg.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd b6fuorg741ufili49mg9j4328ig54sqg NS SOA DNSKEY RRSIG
169b6fuorg741ufili49mg9j4328ig53sqg.example.com.	3600	IN	RRSIG	NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AHNLlpOM8cBFBBdzUO9nQC/O6mw3rDUrqcdiSwMKAIckd3k5WZvoP78=
170
171; ent.example.com. -> 2kekcu37chvrqjb272ptidu9jhk8oqag.
172; OPTOUT SPAN around it
1732kekcu37chvrqjb272ptidu9jhk7oqag.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd 2kekcu37chvrqjb272ptidu9jhk9oqag
1742kekcu37chvrqjb272ptidu9jhk7oqag.example.com.	3600	IN	RRSIG	NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AFgtC3UEm/Tu4HIjfDHIDmZkvgwHF0kWKcD3wP2hs+/wOfaILtXBr4c=
175ENTRY_END
176
177RANGE_END
178
179STEP 1 QUERY
180ENTRY_BEGIN
181REPLY RD DO
182SECTION QUESTION
183ent.example.com. IN A
184ENTRY_END
185
186; recursion happens here.
187STEP 10 CHECK_ANSWER
188ENTRY_BEGIN
189MATCH all
190REPLY QR RD RA DO NOERROR
191SECTION QUESTION
192ent.example.com. IN A
193SECTION ANSWER
194SECTION AUTHORITY
195b6fuorg741ufili49mg9j4328ig53sqg.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd b6fuorg741ufili49mg9j4328ig54sqg NS SOA DNSKEY RRSIG
196b6fuorg741ufili49mg9j4328ig53sqg.example.com.	3600	IN	RRSIG	NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AHNLlpOM8cBFBBdzUO9nQC/O6mw3rDUrqcdiSwMKAIckd3k5WZvoP78=
1972kekcu37chvrqjb272ptidu9jhk7oqag.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd 2kekcu37chvrqjb272ptidu9jhk9oqag
1982kekcu37chvrqjb272ptidu9jhk7oqag.example.com.	3600	IN	RRSIG	NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AFgtC3UEm/Tu4HIjfDHIDmZkvgwHF0kWKcD3wP2hs+/wOfaILtXBr4c=
199SECTION ADDITIONAL
200ENTRY_END
201
202SCENARIO_END
203