From 468ace026826a0be0d93fa0d99ac068244cbb1a6 Mon Sep 17 00:00:00 2001 From: Kees Monshouwer Date: Mon, 21 Sep 2020 16:15:30 +0200 Subject: [PATCH] auth: add direct NSEC3PARAM test and add dnssec in the any-query test --- .../tests/any-query/expected_result.dnssec | 23 +++++++++++++++++++ .../tests/any-query/expected_result.narrow | 23 +++++++++++++++++++ .../tests/any-query/expected_result.nsec3 | 23 +++++++++++++++++++ .../tests/direct-nsec3param/command | 2 ++ .../tests/direct-nsec3param/description | 1 + .../tests/direct-nsec3param/expected_result | 4 ++++ .../direct-nsec3param/expected_result.dnssec | 7 ++++++ .../direct-nsec3param/expected_result.narrow | 5 ++++ .../direct-nsec3param/expected_result.nsec3 | 5 ++++ 9 files changed, 93 insertions(+) create mode 100644 regression-tests/tests/any-query/expected_result.dnssec create mode 100644 regression-tests/tests/any-query/expected_result.narrow create mode 100644 regression-tests/tests/any-query/expected_result.nsec3 create mode 100755 regression-tests/tests/direct-nsec3param/command create mode 100644 regression-tests/tests/direct-nsec3param/description create mode 100644 regression-tests/tests/direct-nsec3param/expected_result create mode 100644 regression-tests/tests/direct-nsec3param/expected_result.dnssec create mode 100644 regression-tests/tests/direct-nsec3param/expected_result.narrow create mode 100644 regression-tests/tests/direct-nsec3param/expected_result.nsec3 diff --git a/regression-tests/tests/any-query/expected_result.dnssec b/regression-tests/tests/any-query/expected_result.dnssec new file mode 100644 index 0000000000..6032816825 --- /dev/null +++ b/regression-tests/tests/any-query/expected_result.dnssec @@ -0,0 +1,23 @@ +0 example.com. IN DNSKEY 86400 257 3 13 ... +0 example.com. IN MX 120 10 smtp-servers.example.com. +0 example.com. IN MX 120 15 smtp-servers.test.com. +0 example.com. IN NS 120 ns1.example.com. +0 example.com. IN NS 120 ns2.example.com. +0 example.com. IN NSEC 86400 _imap._tcp.example.com. NS SOA MX RRSIG NSEC DNSKEY +0 example.com. IN RRSIG 100000 SOA 13 2 100000 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 120 MX 13 2 120 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 120 NS 13 2 120 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 86400 DNSKEY 13 2 86400 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 86400 NSEC 13 2 86400 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN SOA 100000 ns1.example.com. ahu.example.com. 2847484148 28800 7200 604800 86400 +2 . IN OPT 32768 +2 ns1.example.com. IN A 120 192.168.1.1 +2 ns1.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +2 ns2.example.com. IN A 120 192.168.1.2 +2 ns2.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +2 smtp-servers.example.com. IN A 120 192.168.0.2 +2 smtp-servers.example.com. IN A 120 192.168.0.3 +2 smtp-servers.example.com. IN A 120 192.168.0.4 +2 smtp-servers.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='example.com.', qtype=ANY diff --git a/regression-tests/tests/any-query/expected_result.narrow b/regression-tests/tests/any-query/expected_result.narrow new file mode 100644 index 0000000000..b36512962c --- /dev/null +++ b/regression-tests/tests/any-query/expected_result.narrow @@ -0,0 +1,23 @@ +0 example.com. IN DNSKEY 86400 257 3 13 ... +0 example.com. IN MX 120 10 smtp-servers.example.com. +0 example.com. IN MX 120 15 smtp-servers.test.com. +0 example.com. IN NS 120 ns1.example.com. +0 example.com. IN NS 120 ns2.example.com. +0 example.com. IN NSEC3PARAM 86400 1 0 1 abcd +0 example.com. IN RRSIG 100000 SOA 13 2 100000 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 120 MX 13 2 120 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 120 NS 13 2 120 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 86400 DNSKEY 13 2 86400 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 86400 NSEC3PARAM 13 2 86400 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN SOA 100000 ns1.example.com. ahu.example.com. 2847484148 28800 7200 604800 86400 +2 . IN OPT 32768 +2 ns1.example.com. IN A 120 192.168.1.1 +2 ns1.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +2 ns2.example.com. IN A 120 192.168.1.2 +2 ns2.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +2 smtp-servers.example.com. IN A 120 192.168.0.2 +2 smtp-servers.example.com. IN A 120 192.168.0.3 +2 smtp-servers.example.com. IN A 120 192.168.0.4 +2 smtp-servers.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='example.com.', qtype=ANY diff --git a/regression-tests/tests/any-query/expected_result.nsec3 b/regression-tests/tests/any-query/expected_result.nsec3 new file mode 100644 index 0000000000..b36512962c --- /dev/null +++ b/regression-tests/tests/any-query/expected_result.nsec3 @@ -0,0 +1,23 @@ +0 example.com. IN DNSKEY 86400 257 3 13 ... +0 example.com. IN MX 120 10 smtp-servers.example.com. +0 example.com. IN MX 120 15 smtp-servers.test.com. +0 example.com. IN NS 120 ns1.example.com. +0 example.com. IN NS 120 ns2.example.com. +0 example.com. IN NSEC3PARAM 86400 1 0 1 abcd +0 example.com. IN RRSIG 100000 SOA 13 2 100000 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 120 MX 13 2 120 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 120 NS 13 2 120 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 86400 DNSKEY 13 2 86400 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN RRSIG 86400 NSEC3PARAM 13 2 86400 [expiry] [inception] [keytag] example.com. ... +0 example.com. IN SOA 100000 ns1.example.com. ahu.example.com. 2847484148 28800 7200 604800 86400 +2 . IN OPT 32768 +2 ns1.example.com. IN A 120 192.168.1.1 +2 ns1.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +2 ns2.example.com. IN A 120 192.168.1.2 +2 ns2.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +2 smtp-servers.example.com. IN A 120 192.168.0.2 +2 smtp-servers.example.com. IN A 120 192.168.0.3 +2 smtp-servers.example.com. IN A 120 192.168.0.4 +2 smtp-servers.example.com. IN RRSIG 120 A 13 3 120 [expiry] [inception] [keytag] example.com. ... +Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='example.com.', qtype=ANY diff --git a/regression-tests/tests/direct-nsec3param/command b/regression-tests/tests/direct-nsec3param/command new file mode 100755 index 0000000000..e03b139e17 --- /dev/null +++ b/regression-tests/tests/direct-nsec3param/command @@ -0,0 +1,2 @@ +#!/bin/sh +cleandig example.com NSEC3PARAM dnssec diff --git a/regression-tests/tests/direct-nsec3param/description b/regression-tests/tests/direct-nsec3param/description new file mode 100644 index 0000000000..f42ad49c3b --- /dev/null +++ b/regression-tests/tests/direct-nsec3param/description @@ -0,0 +1 @@ +Direct NSEC3PARAM query. diff --git a/regression-tests/tests/direct-nsec3param/expected_result b/regression-tests/tests/direct-nsec3param/expected_result new file mode 100644 index 0000000000..6f4bef5154 --- /dev/null +++ b/regression-tests/tests/direct-nsec3param/expected_result @@ -0,0 +1,4 @@ +1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2847484148 28800 7200 604800 86400 +2 . IN OPT 32768 +Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='example.com.', qtype=NSEC3PARAM diff --git a/regression-tests/tests/direct-nsec3param/expected_result.dnssec b/regression-tests/tests/direct-nsec3param/expected_result.dnssec new file mode 100644 index 0000000000..368bf82230 --- /dev/null +++ b/regression-tests/tests/direct-nsec3param/expected_result.dnssec @@ -0,0 +1,7 @@ +1 example.com. IN NSEC 86400 _imap._tcp.example.com. NS SOA MX RRSIG NSEC DNSKEY +1 example.com. IN RRSIG 86400 NSEC 13 2 86400 [expiry] [inception] [keytag] example.com. ... +1 example.com. IN RRSIG 86400 SOA 13 2 100000 [expiry] [inception] [keytag] example.com. ... +1 example.com. IN SOA 86400 ns1.example.com. ahu.example.com. 2847484148 28800 7200 604800 86400 +2 . IN OPT 32768 +Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='example.com.', qtype=NSEC3PARAM diff --git a/regression-tests/tests/direct-nsec3param/expected_result.narrow b/regression-tests/tests/direct-nsec3param/expected_result.narrow new file mode 100644 index 0000000000..3b601e08d2 --- /dev/null +++ b/regression-tests/tests/direct-nsec3param/expected_result.narrow @@ -0,0 +1,5 @@ +0 example.com. IN NSEC3PARAM 86400 1 0 1 abcd +0 example.com. IN RRSIG 86400 NSEC3PARAM 13 2 86400 [expiry] [inception] [keytag] example.com. ... +2 . IN OPT 32768 +Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='example.com.', qtype=NSEC3PARAM diff --git a/regression-tests/tests/direct-nsec3param/expected_result.nsec3 b/regression-tests/tests/direct-nsec3param/expected_result.nsec3 new file mode 100644 index 0000000000..3b601e08d2 --- /dev/null +++ b/regression-tests/tests/direct-nsec3param/expected_result.nsec3 @@ -0,0 +1,5 @@ +0 example.com. IN NSEC3PARAM 86400 1 0 1 abcd +0 example.com. IN RRSIG 86400 NSEC3PARAM 13 2 86400 [expiry] [inception] [keytag] example.com. ... +2 . IN OPT 32768 +Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0 +Reply to question for qname='example.com.', qtype=NSEC3PARAM -- 2.47.2