recursor: add 38696 root anchor

fetched from https://www.iana.org/dnssec/files after their 2024-07-24 update

diff --git a/pdns/recursordist/settings/table.py b/pdns/recursordist/settings/table.py
index d1603ad0e00b9ac82308c00be81da83cf2cd5762..faabe5e4a2a13a49be3d23181d73ca6122d2e91b 100644 (file)
--- a/pdns/recursordist/settings/table.py
+++ b/pdns/recursordist/settings/table.py
@@ -3336,7 +3336,7 @@ If this check draws the wrong conclusion, you can disable it.
         'name' : 'trustanchors',
         'section' : 'dnssec',
         'type' : LType.ListTrustAnchors,
-        'default' : '[{name: ., dsrecords: [\'20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d\']}]',
+        'default' : '[{name: ., dsrecords: [\'20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d\', \'38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16\']}]',
         'docdefault' : '''
 
 .. code-block:: yaml
@@ -3344,6 +3344,7 @@ If this check draws the wrong conclusion, you can disable it.
    - name: .
      dsrecords:
      - 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
+     - 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
 
 ''',
         'help' : 'Sequence of trust anchors',

diff --git a/pdns/recursordist/test-settings.cc b/pdns/recursordist/test-settings.cc
index b617d90748d8910afb4327090142cd530c964788..25b649df4f7730afba29cad1aa5f96f2cfad8b53 100644 (file)
--- a/pdns/recursordist/test-settings.cc
+++ b/pdns/recursordist/test-settings.cc
@@ -497,7 +497,7 @@ BOOST_AUTO_TEST_CASE(test_yaml_ta_merge)
   LuaConfigItems lua2;
   pdns::settings::rec::fromBridgeStructToLuaConfig(settings, lua2, proxyMapping);
   BOOST_CHECK_EQUAL(lua2.dsAnchors.size(), 2U);
-  BOOST_CHECK_EQUAL(lua2.dsAnchors[DNSName(".")].size(), 1U);
+  BOOST_CHECK_EQUAL(lua2.dsAnchors[DNSName(".")].size(), 2U);
   BOOST_CHECK_EQUAL(lua2.dsAnchors[DNSName("a")].size(), 2U);
 }
 

diff --git a/pdns/root-dnssec.hh b/pdns/root-dnssec.hh
index 1a193ffae08c438d68ae59cf0a048517a626f276..47beda38b77b126eacfafff23dc05f5ca79c2d86 100644 (file)
--- a/pdns/root-dnssec.hh
+++ b/pdns/root-dnssec.hh
@@ -25,6 +25,7 @@
 #include <array>
 #include <string>
 
-static const std::array<std::string, 1> rootDSs = {
-  "20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d"
+static const std::array<std::string, 2> rootDSs = {
+  "20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d",
+  "38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16"
 };

diff --git a/regression-tests.recursor-dnssec/test_TrustAnchors.py b/regression-tests.recursor-dnssec/test_TrustAnchors.py
index 4d3211873d5f0b6725bcd7939ef5e35e4beb97eb..83404416723a59aa30c71772c2b820116115887f 100644 (file)
--- a/regression-tests.recursor-dnssec/test_TrustAnchors.py
+++ b/regression-tests.recursor-dnssec/test_TrustAnchors.py
@@ -22,7 +22,7 @@ addNTA("example.com", "some reason")
     def testTrustanchorDotServer(self):
         expected = dns.rrset.from_text_list(
             'trustanchor.server.', 86400, dns.rdataclass.CH, 'TXT',
-            ['". 20326"', '"powerdns.com. 44030"'])
+            ['". 20326 38696"', '"powerdns.com. 44030"'])
         query = dns.message.make_query('trustanchor.server', 'TXT',
                                        dns.rdataclass.CH)
         result = self.sendUDPQuery(query)