Merge pull request #13733 from fredmorcos/ci-verbose-logging

[thirdparty/pdns.git] / regression-tests.recursor-dnssec / test_TrustAnchors.py

diff --git a/regression-tests.recursor-dnssec/test_TrustAnchors.py b/regression-tests.recursor-dnssec/test_TrustAnchors.py
index bb761ef3e56d8ca2d6f5e2c0aee7ccba8d33698d..f44497881aba4f1fc17ea98dc8891848521dd010 100644 (file)
--- a/regression-tests.recursor-dnssec/test_TrustAnchors.py
+++ b/regression-tests.recursor-dnssec/test_TrustAnchors.py
@@ -10,14 +10,19 @@ class testTrustAnchorsEnabled(RecursorTest):
     _confdir = 'TrustAnchorsEnabled'
     _roothints = None
     _root_DS = None
+    _config_template = """
+     allow-trust-anchor-query=yes
+"""
     _lua_config_file = """
 addDS("powerdns.com", "44030 8 1 B763646757DF621DD1204AD3BFA0675B49BE3279")
+addNTA("example")
+addNTA("example.com", "some reason")
 """
 
     def testTrustanchorDotServer(self):
         expected = dns.rrset.from_text_list(
             'trustanchor.server.', 86400, dns.rdataclass.CH, 'TXT',
-            ['". 19036 20326"', '"powerdns.com. 44030"'])
+            ['". 20326"', '"powerdns.com. 44030"'])
         query = dns.message.make_query('trustanchor.server', 'TXT',
                                        dns.rdataclass.CH)
         result = self.sendUDPQuery(query)
@@ -25,6 +30,17 @@ addDS("powerdns.com", "44030 8 1 B763646757DF621DD1204AD3BFA0675B49BE3279")
         self.assertRcodeEqual(result, dns.rcode.NOERROR)
         self.assertRRsetInAnswer(result, expected)
 
+    def testNegativerustanchorDotServer(self):
+        expected = dns.rrset.from_text_list(
+            'negativetrustanchor.server.', 86400, dns.rdataclass.CH, 'TXT',
+            ['"example."', '"example.com. some reason"'])
+        query = dns.message.make_query('negativetrustanchor.server', 'TXT',
+                                       dns.rdataclass.CH)
+        result = self.sendUDPQuery(query)
+
+        self.assertRcodeEqual(result, dns.rcode.NOERROR)
+        self.assertRRsetInAnswer(result, expected)
+
 
 class testTrustAnchorsDisabled(RecursorTest):
     """This test will do a query for "trustanchor.server CH TXT" and hopes to get
@@ -35,7 +51,6 @@ class testTrustAnchorsDisabled(RecursorTest):
     _roothints = None
     _root_DS = None
     _config_template = """
-    allow-trust-anchor-query=no
 """
 
     def testTrustanchorDotServer(self):
@@ -44,3 +59,10 @@ class testTrustAnchorsDisabled(RecursorTest):
         result = self.sendUDPQuery(query)
 
         self.assertRcodeEqual(result, dns.rcode.SERVFAIL)
+
+    def testNegativerustanchorDotServer(self):
+        query = dns.message.make_query('negativetrustanchor.server', 'TXT',
+                                       dns.rdataclass.CH)
+        result = self.sendUDPQuery(query)
+
+        self.assertRcodeEqual(result, dns.rcode.SERVFAIL)