--- /dev/null
+#!/bin/sh
+cleandig minimal.com TXT dnssec | egrep 'IN[[:space:]]+NSEC'
--- /dev/null
+Minimal zone (only NS records) Make sure existent hosts without proper type
+generates a correct NSEC(3) denial.
--- /dev/null
+1 minimal.com. IN NSEC 120 minimal.com. NS SOA RRSIG NSEC DNSKEY
--- /dev/null
+1 09lo11rs63u9b3d538a86ijvqcqt9312.minimal.com. IN NSEC3 120 1 1 1 abcd 09LO11RS63U9B3D538A86IJVQCQT9313 NS SOA RRSIG DNSKEY NSEC3PARAM
--- /dev/null
+1 09lo11rs63u9b3d538a86ijvqcqt9312.minimal.com. IN NSEC3 120 1 1 1 abcd 09LO11RS63U9B3D538A86IJVQCQT9312 NS SOA RRSIG DNSKEY NSEC3PARAM
--- /dev/null
+#!/bin/sh
+cleandig a.minimal.com A dnssec | egrep 'IN[[:space:]]+NSEC'
--- /dev/null
+Minimal zone (only NS records) Make sure non-existent hosts generates a correct
+NSEC(3) denial.
\ No newline at end of file
--- /dev/null
+1 minimal.com. IN NSEC 120 minimal.com. NS SOA RRSIG NSEC DNSKEY
--- /dev/null
+1 09lo11rs63u9b3d538a86ijvqcqt9312.minimal.com. IN NSEC3 120 1 1 1 abcd 09LO11RS63U9B3D538A86IJVQCQT9313 NS SOA RRSIG DNSKEY NSEC3PARAM
+1 8hki26qt36v6qs8cll4e4nvjit38uhap.minimal.com. IN NSEC3 86400 1 1 1 abcd 8HKI26QT36V6QS8CLL4E4NVJIT38UHAR RRSIG
+1 9oadfe8c55evko75kb06spdl23p4fmrh.minimal.com. IN NSEC3 86400 1 1 1 abcd 9OADFE8C55EVKO75KB06SPDL23P4FMRJ RRSIG
--- /dev/null
+1 09lo11rs63u9b3d538a86ijvqcqt9312.minimal.com. IN NSEC3 120 1 1 1 abcd 09LO11RS63U9B3D538A86IJVQCQT9312 NS SOA RRSIG DNSKEY NSEC3PARAM
--- /dev/null
+$TTL 120
+$ORIGIN minimal.com.
+@ IN SOA ns1.example.com. ahu.example.com. (
+ 2000081501
+ 8H ; refresh
+ 2H ; retry
+ 1W ; expire
+ 1D ; default_ttl
+ )
+
+@ IN NS ns1.example.com.
+@ IN NS ns2.example.com.
file "./delegated.dnssec-parent.com";
};
+zone "minimal.com"{
+ type master;
+ file "./minimal.com";
+};