From 0242fed7124eb135be773a990a1a1a01b6b18324 Mon Sep 17 00:00:00 2001 From: Remi Gacogne Date: Wed, 23 Jun 2021 11:25:15 +0200 Subject: [PATCH] rec: Check that we get the SOA on a direct query for a non-existing DS In a regression test this time. --- regression-tests.recursor-dnssec/basicDNSSEC.py | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/regression-tests.recursor-dnssec/basicDNSSEC.py b/regression-tests.recursor-dnssec/basicDNSSEC.py index b6b26fafd0..4a71292e9b 100644 --- a/regression-tests.recursor-dnssec/basicDNSSEC.py +++ b/regression-tests.recursor-dnssec/basicDNSSEC.py @@ -25,6 +25,14 @@ class BasicDNSSEC(RecursorTest): self.assertNoRRSIGsInAnswer(res) self.assertRcodeEqual(res, dns.rcode.NOERROR) + # now we request the DS for insecure.example., which does not exist, + # to check that we correctly get the SOA and not just the denial proof + # that the recursor received on the delegation from example. to insecure.example. + res = self.sendQuery('insecure.example.', 'DS') + self.assertRcodeEqual(res, dns.rcode.NOERROR) + self.assertMessageIsAuthenticated(res) + self.assertAuthorityHasSOA(res) + def testBogusAnswer(self): res = self.sendQuery('ted.bogus.example.', 'A') -- 2.47.2