From: Remi Gacogne <remi.gacogne@powerdns.com>
Date: Wed, 23 Jun 2021 09:25:15 +0000 (+0200)
Subject: rec: Check that we get the SOA on a direct query for a non-existing DS
X-Git-Tag: dnsdist-1.7.0-alpha1~128^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0242fed7124eb135be773a990a1a1a01b6b18324;p=thirdparty%2Fpdns.git

rec: Check that we get the SOA on a direct query for a non-existing DS

In a regression test this time.
---

diff --git a/regression-tests.recursor-dnssec/basicDNSSEC.py b/regression-tests.recursor-dnssec/basicDNSSEC.py
index b6b26fafd0..4a71292e9b 100644
--- a/regression-tests.recursor-dnssec/basicDNSSEC.py
+++ b/regression-tests.recursor-dnssec/basicDNSSEC.py
@@ -25,6 +25,14 @@ class BasicDNSSEC(RecursorTest):
         self.assertNoRRSIGsInAnswer(res)
         self.assertRcodeEqual(res, dns.rcode.NOERROR)
 
+        # now we request the DS for insecure.example., which does not exist,
+        # to check that we correctly get the SOA and not just the denial proof
+        # that the recursor received on the delegation from example. to insecure.example.
+        res = self.sendQuery('insecure.example.', 'DS')
+        self.assertRcodeEqual(res, dns.rcode.NOERROR)
+        self.assertMessageIsAuthenticated(res)
+        self.assertAuthorityHasSOA(res)
+
     def testBogusAnswer(self):
         res = self.sendQuery('ted.bogus.example.', 'A')