From: W.C.A. Wijngaards <wouter@nlnetlabs.nl>
Date: Wed, 23 Jul 2025 14:35:25 +0000 (+0200)
Subject: - xfr-tsig, unit test for tsig_verify_reply for failed tsig.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3d7dfe2f36f268ee620efe0576beec5b7d03d160;p=thirdparty%2Funbound.git

- xfr-tsig, unit test for tsig_verify_reply for failed tsig.
---

diff --git a/testdata/tsig_test.4 b/testdata/tsig_test.4
index 4fff7844f..8ed50dffe 100644
--- a/testdata/tsig_test.4
+++ b/testdata/tsig_test.4
@@ -67,3 +67,13 @@ endpacket
 tsig-verify-reply test.key 1750421767 1 1
 c7588400000100010000000203777777076578616d706c65036e65740000010001c00c0001000100000e1000040a141e2800002904d00000000000000474657374036b65790000fa00ff00000000003d0b686d61632d73686132353600000068555107012c0020a377c921817d4009a6ab35e7f84aa697751b3a976701e8fb6b843965325bf9bdc75800000000
 endpacket
+
+# www.example.net A
+packet
+c7580000000100000000000103777777076578616d706c65036e657400000100010000291000000000000000
+endpacket
+
+# the reply packet has a wrong tsig signature. The A record is modified.
+tsig-verify-reply test.key 1750421767 1 0
+c7588400000100010000000203777777076578616d706c65036e65740000010001c00c0001000100000e1000040a141e4800002904d00000000000000474657374036b65790000fa00ff00000000003d0b686d61632d73686132353600000068555107012c0020a377c921817d4009a6ab35e7f84aa697751b3a976701e8fb6b843965325bf9bdc75800000000
+endpacket