From f76203f2e6883dc3f3fb4c397cf9c26aafa8a7d6 Mon Sep 17 00:00:00 2001 From: Peter van Dijk Date: Tue, 14 Aug 2012 07:16:22 +0000 Subject: [PATCH] add NSEC tests for a zone with just one name, submitted by Kees Monshouwer git-svn-id: svn://svn.powerdns.com/pdns/trunk/pdns@2691 d19b8d6e-7fed-0310-83ef-9ca221ded41b --- regression-tests/minimal-noerror/command | 2 ++ regression-tests/minimal-noerror/description | 2 ++ regression-tests/minimal-noerror/expected_result | 1 + .../minimal-noerror/expected_result.narrow | 1 + .../minimal-noerror/expected_result.nsec3 | 1 + regression-tests/minimal-noerror/skip.nodnssec | 0 regression-tests/minimal-nxdomain/command | 2 ++ regression-tests/minimal-nxdomain/description | 2 ++ regression-tests/minimal-nxdomain/expected_result | 1 + .../minimal-nxdomain/expected_result.narrow | 3 +++ .../minimal-nxdomain/expected_result.nsec3 | 1 + regression-tests/minimal-nxdomain/skip.nodnssec | 0 regression-tests/minimal.com | 12 ++++++++++++ regression-tests/named.conf | 4 ++++ 14 files changed, 32 insertions(+) create mode 100755 regression-tests/minimal-noerror/command create mode 100644 regression-tests/minimal-noerror/description create mode 100644 regression-tests/minimal-noerror/expected_result create mode 100644 regression-tests/minimal-noerror/expected_result.narrow create mode 100644 regression-tests/minimal-noerror/expected_result.nsec3 create mode 100644 regression-tests/minimal-noerror/skip.nodnssec create mode 100755 regression-tests/minimal-nxdomain/command create mode 100644 regression-tests/minimal-nxdomain/description create mode 100644 regression-tests/minimal-nxdomain/expected_result create mode 100644 regression-tests/minimal-nxdomain/expected_result.narrow create mode 100644 regression-tests/minimal-nxdomain/expected_result.nsec3 create mode 100644 regression-tests/minimal-nxdomain/skip.nodnssec create mode 100644 regression-tests/minimal.com diff --git a/regression-tests/minimal-noerror/command b/regression-tests/minimal-noerror/command new file mode 100755 index 0000000000..d5e734c340 --- /dev/null +++ b/regression-tests/minimal-noerror/command @@ -0,0 +1,2 @@ +#!/bin/sh +cleandig minimal.com TXT dnssec | egrep 'IN[[:space:]]+NSEC' diff --git a/regression-tests/minimal-noerror/description b/regression-tests/minimal-noerror/description new file mode 100644 index 0000000000..88d5f5d44a --- /dev/null +++ b/regression-tests/minimal-noerror/description @@ -0,0 +1,2 @@ +Minimal zone (only NS records) Make sure existent hosts without proper type +generates a correct NSEC(3) denial. diff --git a/regression-tests/minimal-noerror/expected_result b/regression-tests/minimal-noerror/expected_result new file mode 100644 index 0000000000..b6b65ba3ed --- /dev/null +++ b/regression-tests/minimal-noerror/expected_result @@ -0,0 +1 @@ +1 minimal.com. IN NSEC 120 minimal.com. NS SOA RRSIG NSEC DNSKEY diff --git a/regression-tests/minimal-noerror/expected_result.narrow b/regression-tests/minimal-noerror/expected_result.narrow new file mode 100644 index 0000000000..ab9bcf73b1 --- /dev/null +++ b/regression-tests/minimal-noerror/expected_result.narrow @@ -0,0 +1 @@ +1 09lo11rs63u9b3d538a86ijvqcqt9312.minimal.com. IN NSEC3 120 1 1 1 abcd 09LO11RS63U9B3D538A86IJVQCQT9313 NS SOA RRSIG DNSKEY NSEC3PARAM diff --git a/regression-tests/minimal-noerror/expected_result.nsec3 b/regression-tests/minimal-noerror/expected_result.nsec3 new file mode 100644 index 0000000000..d00f89355b --- /dev/null +++ b/regression-tests/minimal-noerror/expected_result.nsec3 @@ -0,0 +1 @@ +1 09lo11rs63u9b3d538a86ijvqcqt9312.minimal.com. IN NSEC3 120 1 1 1 abcd 09LO11RS63U9B3D538A86IJVQCQT9312 NS SOA RRSIG DNSKEY NSEC3PARAM diff --git a/regression-tests/minimal-noerror/skip.nodnssec b/regression-tests/minimal-noerror/skip.nodnssec new file mode 100644 index 0000000000..e69de29bb2 diff --git a/regression-tests/minimal-nxdomain/command b/regression-tests/minimal-nxdomain/command new file mode 100755 index 0000000000..d6b3036734 --- /dev/null +++ b/regression-tests/minimal-nxdomain/command @@ -0,0 +1,2 @@ +#!/bin/sh +cleandig a.minimal.com A dnssec | egrep 'IN[[:space:]]+NSEC' diff --git a/regression-tests/minimal-nxdomain/description b/regression-tests/minimal-nxdomain/description new file mode 100644 index 0000000000..7a2790e71e --- /dev/null +++ b/regression-tests/minimal-nxdomain/description @@ -0,0 +1,2 @@ +Minimal zone (only NS records) Make sure non-existent hosts generates a correct +NSEC(3) denial. \ No newline at end of file diff --git a/regression-tests/minimal-nxdomain/expected_result b/regression-tests/minimal-nxdomain/expected_result new file mode 100644 index 0000000000..b6b65ba3ed --- /dev/null +++ b/regression-tests/minimal-nxdomain/expected_result @@ -0,0 +1 @@ +1 minimal.com. IN NSEC 120 minimal.com. NS SOA RRSIG NSEC DNSKEY diff --git a/regression-tests/minimal-nxdomain/expected_result.narrow b/regression-tests/minimal-nxdomain/expected_result.narrow new file mode 100644 index 0000000000..fd35b6446d --- /dev/null +++ b/regression-tests/minimal-nxdomain/expected_result.narrow @@ -0,0 +1,3 @@ +1 09lo11rs63u9b3d538a86ijvqcqt9312.minimal.com. IN NSEC3 120 1 1 1 abcd 09LO11RS63U9B3D538A86IJVQCQT9313 NS SOA RRSIG DNSKEY NSEC3PARAM +1 8hki26qt36v6qs8cll4e4nvjit38uhap.minimal.com. IN NSEC3 86400 1 1 1 abcd 8HKI26QT36V6QS8CLL4E4NVJIT38UHAR RRSIG +1 9oadfe8c55evko75kb06spdl23p4fmrh.minimal.com. IN NSEC3 86400 1 1 1 abcd 9OADFE8C55EVKO75KB06SPDL23P4FMRJ RRSIG diff --git a/regression-tests/minimal-nxdomain/expected_result.nsec3 b/regression-tests/minimal-nxdomain/expected_result.nsec3 new file mode 100644 index 0000000000..d00f89355b --- /dev/null +++ b/regression-tests/minimal-nxdomain/expected_result.nsec3 @@ -0,0 +1 @@ +1 09lo11rs63u9b3d538a86ijvqcqt9312.minimal.com. IN NSEC3 120 1 1 1 abcd 09LO11RS63U9B3D538A86IJVQCQT9312 NS SOA RRSIG DNSKEY NSEC3PARAM diff --git a/regression-tests/minimal-nxdomain/skip.nodnssec b/regression-tests/minimal-nxdomain/skip.nodnssec new file mode 100644 index 0000000000..e69de29bb2 diff --git a/regression-tests/minimal.com b/regression-tests/minimal.com new file mode 100644 index 0000000000..d46f7beffd --- /dev/null +++ b/regression-tests/minimal.com @@ -0,0 +1,12 @@ +$TTL 120 +$ORIGIN minimal.com. +@ IN SOA ns1.example.com. ahu.example.com. ( + 2000081501 + 8H ; refresh + 2H ; retry + 1W ; expire + 1D ; default_ttl + ) + +@ IN NS ns1.example.com. +@ IN NS ns2.example.com. diff --git a/regression-tests/named.conf b/regression-tests/named.conf index 54e2c902c2..b98d6c2e73 100644 --- a/regression-tests/named.conf +++ b/regression-tests/named.conf @@ -33,3 +33,7 @@ zone "delegated.dnssec-parent.com"{ file "./delegated.dnssec-parent.com"; }; +zone "minimal.com"{ + type master; + file "./minimal.com"; +}; -- 2.47.3