Extend the 'doth' system test with Strict/Mutual TLS checks

This commit extends the 'doth' system test with a set of Strict/Mutual
TLS related checks.

This commit also makes each doth NS instance use its own TLS
certificate that includes FQDN, IPv4, and IPv6 addresses, issued using
a common Certificate Authority, instead of ad-hoc certs.

Extend servers initialisation timeout to 60 seconds to improve the
tests stability in the CI as certain configurations could fail to
initialise on time under load.

diff --git a/.reuse/dep5 b/.reuse/dep5
index 999ccff4a26cf2f86fe90dd01bfb0c9cda74475b..4c8c613c062fc10cad80ea3ff50c2ee410b56b27 100644 (file)
--- a/.reuse/dep5
+++ b/.reuse/dep5
@@ -33,6 +33,11 @@ Files: **/*.after*
        bin/tests/system/checkzone/zones/bad1.db
        bin/tests/system/checkzone/zones/crashzone.db
        bin/tests/system/dnstap/large-answer.fstrm
+       bin/tests/system/doth/CA/CA.cfg
+       bin/tests/system/doth/CA/README
+       bin/tests/system/doth/CA/index.txt
+       bin/tests/system/doth/CA/index.txt.attr
+       bin/tests/system/doth/CA/serial
        bin/tests/system/notify/ns4/named.port.in
        bin/tests/system/formerr/nametoolong
        bin/tests/system/formerr/noquestions

diff --git a/bin/tests/system/doth/.gitignore b/bin/tests/system/doth/.gitignore
index 0cf207945bf37b931d9b46733b25bd335bf589c0..c33e4785f1631efbd2e9ae0c55a737fd08537db1 100644 (file)
--- a/bin/tests/system/doth/.gitignore
+++ b/bin/tests/system/doth/.gitignore
@@ -2,3 +2,8 @@ gnutls-cli.*
 headers.*
 ns*/example.db
 ns*/named.conf
+# temporary files generated by "openssl ca"
+/CA/*.old
+# there is little point in keeping the certificate requests
+# for the issued certificates
+/CA/certs/*.csr

diff --git a/bin/tests/system/doth/CA/CA.cfg b/bin/tests/system/doth/CA/CA.cfg
new file mode 100644 (file)
index 0000000..97ea088
--- /dev/null
+++ b/bin/tests/system/doth/CA/CA.cfg
@@ -0,0 +1,121 @@
+## How To
+# To issue a certificate:
+#
+# 1. Generate the next certificate serial (if the file does not exist):
+# xxd -l 8 -u -ps /dev/urandom > ./serial
+# 2. Create the new certificate request (e.g. for foo.example.com):
+#  openssl req -config ./CA.cfg -new -subj "/CN=foo.example.com" \
+#                  -addext "subjectAltName=DNS:foo.example.com,IP=X.X.X.X" \
+#                  -newkey rsa -keyout ./certs/foo.example.com.key \
+#                  -out ./certs/foo.example.com.csr
+#
+# The above will generate request for an RSA-based certificate. One
+# can issue an ECDSA-based certificate by replacing "-newkey rsa" with
+# "-newkey ec -pkeyopt ec_paramgen_curve:secp384r1".
+#
+# 3. Issue the certificate:
+# openssl ca -config ./CA.cfg -in ./certs/foo.example.com.csr \
+#                             -out ./certs/foo.example.com.pem
+#
+# To cleanup the internal database from expired certificates:
+#
+# 1.  openssl ca -config ./CA.cfg -updatedb
+#
+# To revoke a certificate:
+#
+# 1. Revoke the certificate via file  (e.g. for foo.example.com):
+# openssl ca -config ./CA.cfg -revoke ./certs/foo.example.com.pem
+# 2. Optionally remove the certificate file if you do not need it anymore:
+# rm ./certs/foo.example.com.pem
+# 3. Generate the certificate revocation list file: CRL (e.g. revoked.crl):
+# openssl ca -config ./CA.cfg -gencrl > ./revoked.crl
+#
+# The key for CA was generated like follows
+# openssl genrsa -out ./CA.key 3072
+# openssl req -x509 -new -key ./CA.key -days 10950 -out ./CA.pem
+#
+# See also:
+#
+# - https://jamielinux.com/docs/openssl-certificate-authority/index.html
+# - https://www.openssl.org/docs/man1.1.1/man1/ca.html
+# - https://www.openssl.org/docs/man1.1.1/man1/openssl-req.html
+# - https://security.stackexchange.com/questions/74345/provide-subjectaltname-to-openssl-directly-on-the-command-line
+# - https://security.stackexchange.com/a/190646 - for ECDSA certificates
+# - https://gist.github.com/Soarez/9688998
+# - https://habr.com/ru/post/192446/ - Beware, your screen might "go Cyrillic"!
+
+# certificate authority configuration
+[ca]
+default_ca      = CA_default               # The default ca section
+
+[CA_default]
+dir            = .
+new_certs_dir  = $dir/newcerts         # new certs dir (must be created)
+certificate    = $dir/CA.pem           # The CA cert
+private_key    = $dir/private/CA.key   # CA private key
+
+serial         = $dir/serial           # serial number file for the next certificate
+                                       # Update before issuing it:
+                                       # xxd -l 8 -u -ps /dev/urandom > ./serial
+database = $dir/index.txt                 # (must be created manually: touch ./index.txt)
+
+default_days   = 10950                 # how long to certify for
+
+#default_crl_days = 30                 # the number of days before the
+default_crl_days = 10950               # next CRL is due. That is the
+                                       # days from now to place in the
+                                       # CRL nextUpdate field.  If CRL
+                                       # is expired, certificate
+                                       # verifications will fail even
+                                       # for otherwise valid
+                                       # certificates. Clients might
+                                       # cache the CRL, so the expiry
+                                       # period should normally be
+                                       # relatively short (default:
+                                       # 30) for production CAs.
+
+default_md     = sha256                # digest to use
+
+policy         = policy_default        # default policy
+email_in_dn    = no                    # Don't add the email into cert DN
+
+name_opt       = ca_default            # Subject name display option
+cert_opt       = ca_default            # Certificate display option
+
+# We need the following in order to copy Subject Alt Name(s) from a
+# request to the certificate.
+copy_extensions = copy                 # copy extensions from request
+
+[policy_default]
+countryName            = optional
+stateOrProvinceName    = optional
+organizationalUnitName = optional
+commonName             = supplied
+emailAddress           = optional
+
+# default certificate requests settings
+[req]
+# Options for the `req` tool (`man req`).
+default_bits        = 3072 # for RSA only
+distinguished_name  = req_default
+string_mask         = utf8only
+# SHA-1 is deprecated, so use SHA-256 instead.
+default_md          = sha256
+# do not encrypt the private key file
+encrypt_key         = no
+
+[req_default]
+# See <https://en.wikipedia.org/wiki/Certificate_signing_request>.
+countryName                     = Country Name (2 letter code)
+stateOrProvinceName             = State or Province Name (full name)
+localityName                    = Locality Name (e.g., city)
+0.organizationName              = Organization Name (e.g., company)
+organizationalUnitName          = Organizational Unit Name (e.g. department)
+commonName                      = Common Name (e.g. server FQDN or YOUR name)
+emailAddress                    = Email Address
+# defaults
+countryName_default                     = UA
+stateOrProvinceName_default             = Kharkiv Oblast
+localityName_default                    = Kharkiv
+0.organizationName_default              = ISC
+organizationalUnitName_default          = Software Engeneering (BIND 9)

diff --git a/bin/tests/system/doth/CA/CA.pem b/bin/tests/system/doth/CA/CA.pem
new file mode 100644 (file)
index 0000000..1f725db
--- /dev/null
+++ b/bin/tests/system/doth/CA/CA.pem
@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----
+MIIE3TCCA0WgAwIBAgIUeZPKrvbGEBZaRc2jNczlIsJXyPYwDQYJKoZIhvcNAQEL
+BQAwfTELMAkGA1UEBhMCVUExGDAWBgNVBAgMD0toYXJraXYgT2JsYXN0JzEQMA4G
+A1UEBwwHS2hhcmtpdjEkMCIGA1UECgwbSW50ZXJuZXQgU3lzdGVtcyBDb25zb3J0
+aXVtMRwwGgYDVQQDDBNjYS50ZXN0LmV4YW1wbGUuY29tMCAXDTIyMDEyNDEyNDA1
+NFoYDzIwNTIwMTE3MTI0MDU0WjB9MQswCQYDVQQGEwJVQTEYMBYGA1UECAwPS2hh
+cmtpdiBPYmxhc3QnMRAwDgYDVQQHDAdLaGFya2l2MSQwIgYDVQQKDBtJbnRlcm5l
+dCBTeXN0ZW1zIENvbnNvcnRpdW0xHDAaBgNVBAMME2NhLnRlc3QuZXhhbXBsZS5j
+b20wggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCi6hEegBzpUKbE1NTo
+Z7uz7EMUY7TBckkiw/7ydTLKNa8YI4JpBguFvWQsDY0dGFJIoVwyHyNx3seW/LoI
+B5zWPZ2xbOvLLceA+t2NZpbc98E7jUOVS123yED+nqlfZjCq9Zt0r/ezwnQtjnFF
+ko1mcU4H9Jvg8aIgnU2AxE78zciU9CY8799pFFNThIjbooI8oVbfjbzbpmLzxjA5
+3rDmZBTh+ySTlMa2U2oT4WPjRltZWnJVegRRLpG95GnTbQ1fkJAbj1Iu10XTkCee
+wBOqaA1UJem0a6pby5odE414Y7c0ETKcmaJtYENQyO0IJwZWDKtVe5OTIAklakia
+eyFTCAw1h5tHCYLaJW/Yu2wlLl5RNQcRZ9+cWXnldTY+TI1iBjfmADjLdKJYUlhX
+z7kWJtTi63Sdv6WYcEXxaWpxT+R3e2kaR/R7GOo4gdkWpX1siGlRteHHH2/36CSQ
+ZD2etcTUpGW+KDHFR4grnEfL1rt9UgvCjpa4KcssmZtWSSUCAwEAAaNTMFEwHQYD
+VR0OBBYEFHyJ6Fzr5R9ySATFj/uSCJz1YCY5MB8GA1UdIwQYMBaAFHyJ6Fzr5R9y
+SATFj/uSCJz1YCY5MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggGB
+AF3y0hvzyZWtmuG1JwIcOcc1aPl1KdRy8bao/5iHYGYYrsdDgcO5/e+y9S/izalc
+TdW7SKB5iBOCiE8fBNtToCvGP+fxNxHijpAmTr37G5sWuSo1T1VYFizHWL+df/Ig
+TcSvDrEjSnAwaEdNJUWtjoIC4VzNKTLtZf16QIATTzTZa3bfgSetpWS7LhLQbHod
+CSGI2QB1LRbqGC+a1Y85QxHv81jWzPWPzXYvnOLrDdQyBMOBcxDzrN4b6zg+5Itz
+qGYt+IS71jAH0IhxAyD/U5n1jGJv02BnSq0ynLEOD6gsnZjqAwPbt/PM9pGbtbXO
+70Q9rxr+vQc1IISKAEiH3txaEPi10wU98d6LbInJvQrmgHo/ntet8skWNYuxlEzS
+wvynuE9KvvQtOTodWt5AePtKrhHdxu527a4CHVp59nYUjKSdMKjvmhMRXM1cNjFE
+rA/pyyhozR47w3RzHMJVHw2GJ2B/HeqmxpXr1CmJjoRP38QCR7N+mqiZy85Fq2j2
+8Q==
+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/README b/bin/tests/system/doth/CA/README
new file mode 100644 (file)
index 0000000..13069ca
--- /dev/null
+++ b/bin/tests/system/doth/CA/README
@@ -0,0 +1,2 @@
+Please take a look at the contents of the CA.cfg file for further
+instructions and configurations options.

diff --git a/bin/tests/system/doth/CA/certs/srv01.client01.example.com.key b/bin/tests/system/doth/CA/certs/srv01.client01.example.com.key
new file mode 100644 (file)
index 0000000..9da02dd
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.client01.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDCq9Z95YLiCPSevj5Xm
+lB/ijFFlZb8AT2bHUyL1fmivBm8JfjSa/j3pZePAF7rltyChZANiAARek2p62nXM
+ZAjk+PkvK4U27uHf+s1MYPFEtRZ7+QPPoAhnb64no5WKaB5jq88uIGJS54w+Hu/e
+DWlkZbbk3/4aSPhodYSDEfuBWQ7Blkh/JNoR3azLCsUJeCQxOt835rM=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.client01.example.com.pem b/bin/tests/system/doth/CA/certs/srv01.client01.example.com.pem
new file mode 100644 (file)
index 0000000..4eb45dd
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.client01.example.com.pem
@@ -0,0 +1,68 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207431 (0x6bb3183cdef52007)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb 10 17:44:20 2022 GMT
+            Not After : Feb  3 17:44:20 2052 GMT
+        Subject: CN=srv01.client01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:5e:93:6a:7a:da:75:cc:64:08:e4:f8:f9:2f:2b:
+                    85:36:ee:e1:df:fa:cd:4c:60:f1:44:b5:16:7b:f9:
+                    03:cf:a0:08:67:6f:ae:27:a3:95:8a:68:1e:63:ab:
+                    cf:2e:20:62:52:e7:8c:3e:1e:ef:de:0d:69:64:65:
+                    b6:e4:df:fe:1a:48:f8:68:75:84:83:11:fb:81:59:
+                    0e:c1:96:48:7f:24:da:11:dd:ac:cb:0a:c5:09:78:
+                    24:31:3a:df:37:e6:b3
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.client01.example.com
+    Signature Algorithm: sha256WithRSAEncryption
+         82:bd:eb:8f:4e:a5:d2:46:c7:d8:70:3c:34:1d:58:43:1b:81:
+         16:5d:c2:b0:76:4b:a9:f2:10:14:23:e4:ef:dc:59:03:b6:7f:
+         b0:40:34:e5:d0:82:4b:95:a6:07:9a:45:51:94:cf:08:c2:4e:
+         c9:44:d5:f3:b6:ed:f2:a0:01:94:ad:e0:0e:0f:ab:85:6f:35:
+         4b:07:c8:97:25:fb:69:ff:a1:99:bc:ec:70:6c:51:b5:32:95:
+         e9:c9:45:cf:45:e2:c5:5e:b1:59:a2:e1:f2:83:c8:87:68:c4:
+         60:e2:db:50:6c:18:64:1b:9a:9a:cc:7c:e7:fd:d9:f2:b7:d1:
+         de:1d:ec:29:c9:58:db:7b:9a:a1:06:9a:ce:36:a0:45:10:dc:
+         7d:81:24:21:34:30:4c:71:f9:fc:96:37:d6:cf:0d:9d:11:12:
+         c7:62:bc:19:5b:79:e5:e0:37:e8:17:36:4b:13:af:fa:2c:2e:
+         36:d9:be:53:e1:c3:f9:bc:94:a6:7a:97:14:99:36:f9:14:38:
+         11:20:3a:2a:9d:fd:64:63:d0:a2:8f:f0:99:a9:02:ca:57:48:
+         d2:7d:65:44:b6:85:a0:38:ec:e8:19:7e:c2:48:e3:1d:22:53:
+         cf:3b:d4:0a:98:e1:72:62:ec:8b:01:3f:5a:ea:26:2c:8c:16:
+         c3:80:5a:c2:5d:40:c5:65:1c:e2:9a:e3:d6:65:16:ee:dc:17:
+         30:d8:26:87:92:d0:ef:c7:72:07:99:86:05:9e:49:35:41:33:
+         b9:bb:cb:1b:25:50:70:85:e3:0f:c7:b9:b2:37:00:1b:87:a2:
+         47:97:34:5b:cd:dc:66:22:e5:de:25:ec:57:fe:37:75:2c:03:
+         10:f4:d4:a7:cc:f5:4b:0b:ff:eb:d3:a6:78:2e:cd:8f:65:51:
+         a7:8c:ef:83:67:ec:94:13:c2:1f:74:74:55:7c:a3:0b:b7:2f:
+         80:5a:62:04:1d:a2:c0:c1:de:b2:7d:31:3b:a1:fa:f7:40:a7:
+         bd:12:25:95:5b:8b
+-----BEGIN CERTIFICATE-----
+MIIDITCCAYmgAwIBAgIIa7MYPN71IAcwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE
+BhMCVUExGDAWBgNVBAgMD0toYXJraXYgT2JsYXN0JzEQMA4GA1UEBwwHS2hhcmtp
+djEkMCIGA1UECgwbSW50ZXJuZXQgU3lzdGVtcyBDb25zb3J0aXVtMRwwGgYDVQQD
+DBNjYS50ZXN0LmV4YW1wbGUuY29tMCAXDTIyMDIxMDE3NDQyMFoYDzIwNTIwMjAz
+MTc0NDIwWjAlMSMwIQYDVQQDDBpzcnYwMS5jbGllbnQwMS5leGFtcGxlLmNvbTB2
+MBAGByqGSM49AgEGBSuBBAAiA2IABF6TanradcxkCOT4+S8rhTbu4d/6zUxg8US1
+Fnv5A8+gCGdvriejlYpoHmOrzy4gYlLnjD4e794NaWRltuTf/hpI+Gh1hIMR+4FZ
+DsGWSH8k2hHdrMsKxQl4JDE63zfms6MpMCcwJQYDVR0RBB4wHIIac3J2MDEuY2xp
+ZW50MDEuZXhhbXBsZS5jb20wDQYJKoZIhvcNAQELBQADggGBAIK9649OpdJGx9hw
+PDQdWEMbgRZdwrB2S6nyEBQj5O/cWQO2f7BANOXQgkuVpgeaRVGUzwjCTslE1fO2
+7fKgAZSt4A4Pq4VvNUsHyJcl+2n/oZm87HBsUbUylenJRc9F4sVesVmi4fKDyIdo
+xGDi21BsGGQbmprMfOf92fK30d4d7CnJWNt7mqEGms42oEUQ3H2BJCE0MExx+fyW
+N9bPDZ0REsdivBlbeeXgN+gXNksTr/osLjbZvlPhw/m8lKZ6lxSZNvkUOBEgOiqd
+/WRj0KKP8JmpAspXSNJ9ZUS2haA47OgZfsJI4x0iU8871AqY4XJi7IsBP1rqJiyM
+FsOAWsJdQMVlHOKa49ZlFu7cFzDYJoeS0O/HcgeZhgWeSTVBM7m7yxslUHCF4w/H
+ubI3ABuHokeXNFvN3GYi5d4l7Ff+N3UsAxD01KfM9UsL/+vTpnguzY9lUaeM74Nn
+7JQTwh90dFV8owu3L4BaYgQdosDB3rJ9MTuh+vdAp70SJZVbiw==
+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.client02-ns2.example.com.key b/bin/tests/system/doth/CA/certs/srv01.client02-ns2.example.com.key
new file mode 100644 (file)
index 0000000..91cb6ca
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.client02-ns2.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDD1/sp/yNsAc9Z6TPhm
+0xT0ZhSf/9XJD6daSpdUDJ/nEJKa+sBXDWJHuXrbNRqUK2qhZANiAATmRfpXEmxZ
+ECOLelx2M+s7Qfq3HJCzLzMtRXvj5baloqKkFPRQnbDGOLrpRWWkZbkQMi+Tm9XY
+z7QpW9xOyOymn1h2JPTF0UhVUutdsIWThe4+uMSxzQhZlRL/e5vuark=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.client02-ns2.example.com.pem b/bin/tests/system/doth/CA/certs/srv01.client02-ns2.example.com.pem
new file mode 100644 (file)
index 0000000..36728e0
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.client02-ns2.example.com.pem
@@ -0,0 +1,68 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207432 (0x6bb3183cdef52008)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb 11 13:21:12 2022 GMT
+            Not After : Feb  4 13:21:12 2052 GMT
+        Subject: CN=srv01.client02-ns2.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:e6:45:fa:57:12:6c:59:10:23:8b:7a:5c:76:33:
+                    eb:3b:41:fa:b7:1c:90:b3:2f:33:2d:45:7b:e3:e5:
+                    b6:a5:a2:a2:a4:14:f4:50:9d:b0:c6:38:ba:e9:45:
+                    65:a4:65:b9:10:32:2f:93:9b:d5:d8:cf:b4:29:5b:
+                    dc:4e:c8:ec:a6:9f:58:76:24:f4:c5:d1:48:55:52:
+                    eb:5d:b0:85:93:85:ee:3e:b8:c4:b1:cd:08:59:95:
+                    12:ff:7b:9b:ee:6a:b9
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.client02-ns2.example.com
+    Signature Algorithm: sha256WithRSAEncryption
+         43:ec:0f:62:17:f6:f4:90:3b:7c:36:21:f2:18:94:a6:42:51:
+         1e:1d:2a:43:8f:05:b7:8d:3c:ca:f0:20:2f:65:4b:be:48:ad:
+         6a:0a:cc:2d:1f:d6:27:1d:af:4a:36:86:ed:0d:03:75:c5:71:
+         ec:58:9b:ec:f9:0f:e4:83:ef:6f:91:da:20:73:47:ac:e7:c7:
+         8b:22:b2:d1:6e:a0:b0:d6:1c:4c:70:1e:74:08:1d:7f:61:06:
+         e5:be:f3:e8:c4:15:60:e2:b0:02:9b:f0:13:af:76:5b:a8:c7:
+         91:2c:10:5f:0d:32:89:51:5a:7f:17:1b:7c:c6:46:97:ee:e7:
+         bb:8a:48:38:a2:52:d4:ff:3b:1c:ec:4a:a9:8c:a5:23:3a:04:
+         bb:d7:b8:ad:5b:69:7f:1d:be:ca:96:e0:eb:56:05:43:ee:c8:
+         ff:2c:48:03:00:c6:c2:ac:fc:4e:15:47:86:c5:33:ed:70:f6:
+         98:bc:0b:07:b9:5b:1a:ec:fd:3c:bf:26:61:68:fc:db:02:55:
+         07:ae:76:0e:be:ff:c5:b8:56:fb:52:54:a4:b1:2d:64:b4:1d:
+         55:02:4f:da:06:bd:26:e4:22:d2:94:1f:7e:29:c4:97:10:d1:
+         75:7d:41:53:be:46:52:70:b1:d9:ff:bb:9f:96:19:e3:a0:ba:
+         d0:4a:5a:8d:da:22:73:89:f0:4c:e6:18:80:53:be:bd:64:56:
+         6a:c9:58:71:40:66:9e:4a:3e:31:3b:74:9e:6e:6a:f5:65:ca:
+         93:06:52:00:74:65:a0:3a:eb:2e:56:56:d2:a5:4b:0e:85:17:
+         25:78:cb:f3:f9:53:7b:85:f9:82:15:87:bc:36:70:b5:69:64:
+         48:11:79:b9:2c:2e:cc:09:fd:0f:b0:b7:cd:97:3b:c7:0f:49:
+         1a:fc:15:49:d6:1c:a9:dc:14:ff:44:d2:be:5a:36:00:66:0c:
+         d5:b8:bf:16:9e:60:27:79:c0:f5:b4:ff:2f:af:8c:b2:49:75:
+         61:44:05:1a:e8:cd
+-----BEGIN CERTIFICATE-----
+MIIDKTCCAZGgAwIBAgIIa7MYPN71IAgwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE
+BhMCVUExGDAWBgNVBAgMD0toYXJraXYgT2JsYXN0JzEQMA4GA1UEBwwHS2hhcmtp
+djEkMCIGA1UECgwbSW50ZXJuZXQgU3lzdGVtcyBDb25zb3J0aXVtMRwwGgYDVQQD
+DBNjYS50ZXN0LmV4YW1wbGUuY29tMCAXDTIyMDIxMTEzMjExMloYDzIwNTIwMjA0
+MTMyMTEyWjApMScwJQYDVQQDDB5zcnYwMS5jbGllbnQwMi1uczIuZXhhbXBsZS5j
+b20wdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATmRfpXEmxZECOLelx2M+s7Qfq3HJCz
+LzMtRXvj5baloqKkFPRQnbDGOLrpRWWkZbkQMi+Tm9XYz7QpW9xOyOymn1h2JPTF
+0UhVUutdsIWThe4+uMSxzQhZlRL/e5vuarmjLTArMCkGA1UdEQQiMCCCHnNydjAx
+LmNsaWVudDAyLW5zMi5leGFtcGxlLmNvbTANBgkqhkiG9w0BAQsFAAOCAYEAQ+wP
+Yhf29JA7fDYh8hiUpkJRHh0qQ48Ft408yvAgL2VLvkitagrMLR/WJx2vSjaG7Q0D
+dcVx7Fib7PkP5IPvb5HaIHNHrOfHiyKy0W6gsNYcTHAedAgdf2EG5b7z6MQVYOKw
+ApvwE692W6jHkSwQXw0yiVFafxcbfMZGl+7nu4pIOKJS1P87HOxKqYylIzoEu9e4
+rVtpfx2+ypbg61YFQ+7I/yxIAwDGwqz8ThVHhsUz7XD2mLwLB7lbGuz9PL8mYWj8
+2wJVB652Dr7/xbhW+1JUpLEtZLQdVQJP2ga9JuQi0pQffinElxDRdX1BU75GUnCx
+2f+7n5YZ46C60Epajdoic4nwTOYYgFO+vWRWaslYcUBmnko+MTt0nm5q9WXKkwZS
+AHRloDrrLlZW0qVLDoUXJXjL8/lTe4X5ghWHvDZwtWlkSBF5uSwuzAn9D7C3zZc7
+xw9JGvwVSdYcqdwU/0TSvlo2AGYM1bi/Fp5gJ3nA9bT/L6+Mskl1YUQFGujN
+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.client03-ns2-expired.example.com.key b/bin/tests/system/doth/CA/certs/srv01.client03-ns2-expired.example.com.key
new file mode 100644 (file)
index 0000000..5d3d283
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.client03-ns2-expired.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDCQvnl9FD/mrb+KQaC8
+VMhKW2sxrYFHhZnUYBc3Luz/X3vECNVqLVc5asLu+NrkioyhZANiAAQ4mpvCaoKm
+0VCKeHrRvmG+1LbT1qICl6RIUMDFHdgtIxklbpECHWnCd9bxqE9Kmh08aVqJQQry
+4GRXGw6e359MezxC3CHILJWrs0xfVsRw7oqk5EbEnpj1yHuyc9dFk/A=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.client03-ns2-expired.example.com.pem b/bin/tests/system/doth/CA/certs/srv01.client03-ns2-expired.example.com.pem
new file mode 100644 (file)
index 0000000..8248191
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.client03-ns2-expired.example.com.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207433 (0x6bb3183cdef52009)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Aug 14 05:00:00 2012 GMT
+            Not After : Aug 14 06:00:00 2012 GMT
+        Subject: CN=srv01.client03-ns2-expired.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:38:9a:9b:c2:6a:82:a6:d1:50:8a:78:7a:d1:be:
+                    61:be:d4:b6:d3:d6:a2:02:97:a4:48:50:c0:c5:1d:
+                    d8:2d:23:19:25:6e:91:02:1d:69:c2:77:d6:f1:a8:
+                    4f:4a:9a:1d:3c:69:5a:89:41:0a:f2:e0:64:57:1b:
+                    0e:9e:df:9f:4c:7b:3c:42:dc:21:c8:2c:95:ab:b3:
+                    4c:5f:56:c4:70:ee:8a:a4:e4:46:c4:9e:98:f5:c8:
+                    7b:b2:73:d7:45:93:f0
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.client03-ns2-expired.example.com
+    Signature Algorithm: sha256WithRSAEncryption
+         38:12:1f:5f:26:b6:8e:9b:3f:77:89:5a:b8:e8:46:78:c3:d6:
+         f0:0c:67:5f:d5:a3:9c:f6:f2:0a:ae:9c:87:74:9f:a3:5b:8a:
+         27:58:47:e5:78:1a:e9:db:b5:cc:28:a7:f8:18:e3:e7:20:43:
+         cf:82:06:5d:a1:d0:82:ab:15:be:86:46:1e:e6:4d:ad:78:a4:
+         16:6c:99:41:3d:29:21:c8:6b:9d:3d:4a:cd:93:37:1f:1c:88:
+         c7:ae:b6:7c:73:42:57:57:32:9d:e8:c6:e2:3e:da:12:57:3e:
+         c8:56:4a:bb:d4:01:fc:8e:30:8d:19:fe:61:3d:5e:02:64:65:
+         a2:46:b3:6e:ea:f9:cb:4e:f0:b9:f6:bc:6b:38:10:19:d0:93:
+         f8:f7:d9:4c:d2:87:2c:7f:dc:f5:00:c6:29:dd:00:5e:d2:f4:
+         df:52:fb:7a:5a:ad:98:36:77:72:1f:01:ed:48:91:48:16:2d:
+         35:a5:15:21:98:ff:7e:5d:a1:45:c9:5f:9d:c2:3e:e5:98:e2:
+         ee:ce:4d:18:76:3d:8a:0a:64:9b:f1:19:9d:b6:82:af:1b:15:
+         d3:48:69:f1:9b:67:76:1b:41:8e:1d:69:d5:31:64:95:01:41:
+         73:c1:a9:29:53:6b:f3:29:ad:e0:96:52:8e:3e:8d:c1:8e:d8:
+         b5:0c:94:5f:a2:6c:3c:0f:3e:5b:10:af:21:00:74:d0:b7:30:
+         6c:44:fb:3d:09:46:8d:1d:e6:c2:e4:0a:5b:f4:eb:e1:71:c7:
+         d5:36:13:90:05:fe:65:16:61:24:b5:41:f2:10:bd:2c:c3:34:
+         69:15:25:d1:32:f2:b3:d7:da:23:1b:e9:5b:33:63:43:c8:dc:
+         68:f2:31:b5:93:0e:64:ea:9a:45:36:9f:96:44:38:1e:4e:d8:
+         45:ba:37:68:06:4d:da:d4:16:d3:3e:77:86:4e:8d:58:d6:06:
+         a8:60:11:4d:d9:81:f3:85:2b:ee:58:50:6e:ea:2b:f7:84:00:
+         9c:ec:a1:90:d4:94
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.crt01.example.com.key b/bin/tests/system/doth/CA/certs/srv01.crt01.example.com.key
new file mode 100644 (file)
index 0000000..a4194bd
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.crt01.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDB/BdYjkgkVy4gTuXX3
+20DWo80uWsQkKDwMeOoaQ2cYy5Cm2AdTALDdBihGKRfACPqhZANiAAQSoXsPefIp
+9Y9qBtAogxRDjxlMKZE2MA8GplbnV5tYLJ78nKNO9uNvkEDVCf2Ulo4UaHRv6Ken
+q4w1lvLWj12XXdG5IlvvMRWh4ettb6+xL4Dlpak48m/5ZRRwp6Ws4Ro=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.crt01.example.com.pem b/bin/tests/system/doth/CA/certs/srv01.crt01.example.com.pem
new file mode 100644 (file)
index 0000000..26f3870
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.crt01.example.com.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207425 (0x6bb3183cdef52001)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:18:52 2022 GMT
+            Not After : Feb  1 17:18:52 2052 GMT
+        Subject: CN=srv01.crt01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:12:a1:7b:0f:79:f2:29:f5:8f:6a:06:d0:28:83:
+                    14:43:8f:19:4c:29:91:36:30:0f:06:a6:56:e7:57:
+                    9b:58:2c:9e:fc:9c:a3:4e:f6:e3:6f:90:40:d5:09:
+                    fd:94:96:8e:14:68:74:6f:e8:a7:a7:ab:8c:35:96:
+                    f2:d6:8f:5d:97:5d:d1:b9:22:5b:ef:31:15:a1:e1:
+                    eb:6d:6f:af:b1:2f:80:e5:a5:a9:38:f2:6f:f9:65:
+                    14:70:a7:a5:ac:e1:1a
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.crt01.example.com, IP Address:10.53.0.1, IP Address:FD92:7065:B8E:FFFF:0:0:0:1
+    Signature Algorithm: sha256WithRSAEncryption
+         79:0f:08:ab:18:cc:f9:7a:bd:47:21:99:a1:a3:76:04:7f:d7:
+         08:33:91:49:3d:2d:fc:8d:ff:c5:c1:8d:b8:70:05:65:32:cd:
+         e2:26:21:49:19:66:a2:94:4f:42:7d:83:3c:4f:ed:c1:87:89:
+         5b:73:2c:64:64:67:29:f5:73:83:23:72:b7:a8:2e:d6:9a:de:
+         13:0c:ba:35:d3:38:b1:c4:51:7d:81:fc:25:ca:a6:d9:d2:fa:
+         bb:6d:1f:a4:61:90:50:2d:8a:ed:70:1a:eb:56:2f:fc:7b:f3:
+         76:df:68:8d:e8:a4:7d:82:b9:5c:c6:cb:d8:06:f7:78:dc:a7:
+         94:35:d4:83:98:28:51:36:1c:73:47:e4:5b:32:d2:cd:de:1c:
+         44:f6:de:37:8a:46:d0:14:8d:71:e5:10:22:b1:f9:73:f7:1b:
+         4f:82:e1:a1:00:73:18:17:71:a2:bf:a2:0c:59:aa:43:58:46:
+         82:f8:38:c4:5a:5a:9f:13:d7:a9:54:1f:58:9b:5d:52:16:d3:
+         a0:ba:6b:aa:cf:68:3a:d1:12:9c:94:ac:78:6b:7e:bc:69:6c:
+         75:07:5d:fb:68:cd:e8:8d:bb:8c:b0:7c:6c:9e:f6:a5:7c:32:
+         74:ef:c5:b1:1f:1d:ec:7b:2f:79:c0:3b:52:60:9b:48:89:09:
+         b4:46:34:69:d3:7b:1b:15:ef:0c:dd:64:1d:58:fe:a7:0b:b1:
+         9d:28:1f:1e:9e:3c:c0:b1:a6:38:ab:9d:54:24:0e:75:6c:9e:
+         90:13:b9:39:dc:43:fe:37:e3:14:0f:78:7e:2b:56:a2:d2:60:
+         51:57:88:3b:4c:cf:24:67:36:77:21:bb:c8:07:eb:48:f7:b0:
+         1e:e4:99:61:84:15:bb:61:3a:21:55:df:31:43:67:73:8f:6b:
+         e9:04:83:be:2d:8b:94:39:89:cf:40:d5:04:f7:6b:c9:c6:8c:
+         6e:36:0f:5d:7a:9b:57:86:36:76:2c:75:35:47:50:ed:9a:84:
+         7e:37:83:b5:21:a2
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.crt02-no-san.example.com.key b/bin/tests/system/doth/CA/certs/srv01.crt02-no-san.example.com.key
new file mode 100644 (file)
index 0000000..db770c1
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.crt02-no-san.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDC3sc7RaI9GyH5Z1e0D
+WcccNjr43zpavmMqA8bcS9dBBjkiEdvGH47r3EIXTjp0f46hZANiAASjLTP9kpDc
+A+82+aSokPFHab7ojmUI2uWzgmMcr5o3tHV8zkb7GRe8kHJPdLZFOfeWs0SFHK1q
+26R2hu6OJz33YXjf4QSK65GLAWe2aTJUUBxWhtov7+Q9lLr3WwIUtRM=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.crt02-no-san.example.com.pem b/bin/tests/system/doth/CA/certs/srv01.crt02-no-san.example.com.pem
new file mode 100644 (file)
index 0000000..65f0f9f
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.crt02-no-san.example.com.pem
@@ -0,0 +1,64 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 7760573232607207426 (0x6bb3183cdef52002)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:21:43 2022 GMT
+            Not After : Feb  1 17:21:43 2052 GMT
+        Subject: CN=srv01.crt02-no-san.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:a3:2d:33:fd:92:90:dc:03:ef:36:f9:a4:a8:90:
+                    f1:47:69:be:e8:8e:65:08:da:e5:b3:82:63:1c:af:
+                    9a:37:b4:75:7c:ce:46:fb:19:17:bc:90:72:4f:74:
+                    b6:45:39:f7:96:b3:44:85:1c:ad:6a:db:a4:76:86:
+                    ee:8e:27:3d:f7:61:78:df:e1:04:8a:eb:91:8b:01:
+                    67:b6:69:32:54:50:1c:56:86:da:2f:ef:e4:3d:94:
+                    ba:f7:5b:02:14:b5:13
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+    Signature Algorithm: sha256WithRSAEncryption
+         07:20:2a:a6:7a:52:52:ba:1e:b7:79:cf:e6:11:9c:ca:3f:43:
+         2b:f3:d7:2e:74:74:57:81:a1:aa:e6:68:c9:fd:d1:a8:a6:5b:
+         a2:ff:ea:f7:f0:b7:46:dc:a0:5a:64:5f:ce:e7:0f:76:63:14:
+         6d:c2:51:4b:30:ea:51:7e:4a:1b:d3:b2:f8:c2:3d:3f:c1:bf:
+         ad:db:4d:f8:28:31:e7:75:ae:84:37:90:00:e5:0b:6b:dc:23:
+         98:69:d5:ef:ce:e2:0d:e7:19:f1:31:01:1f:2a:6c:23:a3:94:
+         62:7a:bf:b3:b0:13:d0:62:fc:a5:a6:0d:52:bb:f4:31:ff:f3:
+         ce:3a:74:66:30:7f:29:04:8d:34:90:7a:9b:8f:da:82:2e:5c:
+         81:dd:af:fa:3a:a1:4e:bb:0a:4c:62:01:40:39:67:9c:29:27:
+         6e:2f:76:81:2d:33:68:ee:ee:ed:00:7f:12:7a:af:43:00:7b:
+         2d:34:8a:26:9a:66:1c:e5:96:17:7c:f8:6d:1e:8c:17:39:ce:
+         4f:0b:9e:40:72:e1:5e:33:3f:9e:84:b5:07:f5:ab:58:d7:37:
+         ed:d0:29:ad:ce:02:0d:fa:6f:96:a9:0e:6c:6e:32:d2:dc:11:
+         23:a3:4a:60:54:b4:98:31:db:8f:4b:4c:58:64:39:4f:ff:27:
+         d0:02:e5:cc:b2:17:e8:46:dc:aa:cb:dc:3d:ed:14:52:ec:6d:
+         a6:cd:04:2f:fd:54:16:6c:7e:63:34:17:f1:1d:b8:37:dd:20:
+         6c:f6:21:19:6f:bb:62:dd:bc:6c:41:34:ad:b1:90:eb:2a:e0:
+         63:ea:70:60:6a:02:e8:fe:46:51:b1:9d:3c:54:54:73:25:b7:
+         41:d1:4c:34:aa:88:48:b8:01:21:ae:d8:d3:06:38:05:65:78:
+         e7:38:f0:f6:e6:2e:61:c0:42:5e:3b:09:59:eb:09:48:4d:55:
+         7c:af:f4:de:c1:09:a0:b4:60:f7:9e:a2:d5:46:fc:05:61:69:
+         e0:c1:2d:26:dc:42
+-----BEGIN CERTIFICATE-----
+MIIC9TCCAV0CCGuzGDze9SACMA0GCSqGSIb3DQEBCwUAMH0xCzAJBgNVBAYTAlVB
+MRgwFgYDVQQIDA9LaGFya2l2IE9ibGFzdCcxEDAOBgNVBAcMB0toYXJraXYxJDAi
+BgNVBAoMG0ludGVybmV0IFN5c3RlbXMgQ29uc29ydGl1bTEcMBoGA1UEAwwTY2Eu
+dGVzdC5leGFtcGxlLmNvbTAgFw0yMjAyMDgxNzIxNDNaGA8yMDUyMDIwMTE3MjE0
+M1owKTEnMCUGA1UEAwwec3J2MDEuY3J0MDItbm8tc2FuLmV4YW1wbGUuY29tMHYw
+EAYHKoZIzj0CAQYFK4EEACIDYgAEoy0z/ZKQ3APvNvmkqJDxR2m+6I5lCNrls4Jj
+HK+aN7R1fM5G+xkXvJByT3S2RTn3lrNEhRytatukdobujic992F43+EEiuuRiwFn
+tmkyVFAcVobaL+/kPZS691sCFLUTMA0GCSqGSIb3DQEBCwUAA4IBgQAHICqmelJS
+uh63ec/mEZzKP0Mr89cudHRXgaGq5mjJ/dGoplui/+r38LdG3KBaZF/O5w92YxRt
+wlFLMOpRfkob07L4wj0/wb+t2034KDHnda6EN5AA5Qtr3COYadXvzuIN5xnxMQEf
+Kmwjo5Rier+zsBPQYvylpg1Su/Qx//POOnRmMH8pBI00kHqbj9qCLlyB3a/6OqFO
+uwpMYgFAOWecKSduL3aBLTNo7u7tAH8Seq9DAHstNIommmYc5ZYXfPhtHowXOc5P
+C55AcuFeMz+ehLUH9atY1zft0CmtzgIN+m+WqQ5sbjLS3BEjo0pgVLSYMduPS0xY
+ZDlP/yfQAuXMshfoRtyqy9w97RRS7G2mzQQv/VQWbH5jNBfxHbg33SBs9iEZb7ti
+3bxsQTStsZDrKuBj6nBgagLo/kZRsZ08VFRzJbdB0Uw0qohIuAEhrtjTBjgFZXjn
+OPD25i5hwEJeOwlZ6wlITVV8r/TewQmgtGD3nqLVRvwFYWngwS0m3EI=
+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.crt03-expired.example.com.key b/bin/tests/system/doth/CA/certs/srv01.crt03-expired.example.com.key
new file mode 100644 (file)
index 0000000..caef1f0
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.crt03-expired.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDAtAQNSdzyxR3sm6gyx
+2Ob3SNCsYvdsE6+gobSUJWYbdus0CCFBIN6Qpms9oc0hAgqhZANiAAQf1Xurc7Jw
+Ff0zJgJcdhaADHB9V4N1rDy3SgJGNcEbwXq9vvIEmn9pg39UmhsQYtdwve8mkFFQ
+EHdWtxovRF6RRjbhLqRMZy5iqH8aFRBEaIsY6s+4lgm/tTrR7xCPn7s=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv01.crt03-expired.example.com.pem b/bin/tests/system/doth/CA/certs/srv01.crt03-expired.example.com.pem
new file mode 100644 (file)
index 0000000..db981c9
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv01.crt03-expired.example.com.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207430 (0x6bb3183cdef52006)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Aug 15 08:00:00 2012 GMT
+            Not After : Aug 15 09:00:00 2012 GMT
+        Subject: CN=srv01.crt03-expired.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:1f:d5:7b:ab:73:b2:70:15:fd:33:26:02:5c:76:
+                    16:80:0c:70:7d:57:83:75:ac:3c:b7:4a:02:46:35:
+                    c1:1b:c1:7a:bd:be:f2:04:9a:7f:69:83:7f:54:9a:
+                    1b:10:62:d7:70:bd:ef:26:90:51:50:10:77:56:b7:
+                    1a:2f:44:5e:91:46:36:e1:2e:a4:4c:67:2e:62:a8:
+                    7f:1a:15:10:44:68:8b:18:ea:cf:b8:96:09:bf:b5:
+                    3a:d1:ef:10:8f:9f:bb
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.crt03-expired.example.com, IP Address:10.53.0.1, IP Address:FD92:7065:B8E:FFFF:0:0:0:1
+    Signature Algorithm: sha256WithRSAEncryption
+         25:35:08:f6:e7:f0:83:81:be:65:31:1b:78:a8:04:84:fe:6a:
+         2a:1a:5d:c1:73:20:88:08:11:d8:27:be:a5:8e:3c:df:e2:a6:
+         19:c5:41:40:ea:01:91:85:99:8d:17:4e:4d:9a:3c:03:f9:78:
+         4c:8a:20:41:5e:96:d6:64:83:2f:b2:fe:e7:77:09:f9:91:bd:
+         22:1a:57:8b:f6:24:bc:7b:48:2b:2e:14:b7:32:bd:46:91:99:
+         5e:21:9a:d3:15:a7:27:e1:c0:3a:c7:f5:f9:94:3f:6d:14:7e:
+         0b:02:bf:05:d9:ac:10:8a:7e:b0:37:36:cd:cb:4a:b4:e1:01:
+         c7:04:8d:83:f3:c6:79:ff:ff:6c:f0:a4:bf:3c:12:61:ea:15:
+         ac:30:62:26:e3:c3:4e:7d:5c:68:d8:88:de:35:8d:44:75:8c:
+         a8:c1:0d:07:67:b5:d0:42:43:41:1f:39:a0:47:35:46:d7:0f:
+         89:aa:e8:d3:86:45:9a:fb:33:01:06:23:64:53:24:48:5b:69:
+         fa:cf:d9:81:fb:5e:7e:7b:82:65:56:c6:46:65:5c:e1:4f:f2:
+         3c:09:3c:28:5f:c9:e3:a5:24:e3:7b:aa:b5:b1:8a:6a:b2:02:
+         32:5f:24:05:f1:67:c8:54:17:0c:cd:ca:3d:e4:44:3e:23:3a:
+         7c:63:b6:f9:61:3a:21:e7:8f:27:ad:c3:26:86:39:49:6c:41:
+         40:7f:1d:48:69:8d:db:6f:42:e4:09:fe:24:62:bd:8e:2e:54:
+         25:f0:14:c2:d8:43:95:09:2e:5f:72:4f:43:b5:9a:8b:bb:8c:
+         44:c6:77:c9:05:fb:1a:9f:d7:b6:a6:42:d9:5c:3d:a5:09:0f:
+         9e:e0:c7:06:32:f1:ff:c9:53:5e:42:d4:2a:33:ad:06:ea:ec:
+         b0:26:d3:3c:ef:65:af:15:8e:7b:20:49:ad:f1:56:ef:17:6b:
+         fc:f4:d8:7c:82:9f:30:19:d0:bc:9c:79:e2:dc:9d:a7:f9:6b:
+         6f:65:ae:21:a0:94
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/certs/srv02.crt01.example.com.key b/bin/tests/system/doth/CA/certs/srv02.crt01.example.com.key
new file mode 100644 (file)
index 0000000..cf495c1
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv02.crt01.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDC/rdGBnhOuZ8hc7fUO
+6v0LO2xd2LMjTS0TCb0pVwsccYN/f6OxWJtu0uGSt0DaN6ihZANiAARD1PvMuIhg
+lRaqKtAxlss+qFzkdqzBv807ZYW7LMv6w0g8g8gI7txZFZciuEIXjHUJ+T62nPLF
+2122impDSAqi3RPCNuRzs2RUebv41H5I9AW+DHdjAf5PMLCqYrzy7fk=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv02.crt01.example.com.pem b/bin/tests/system/doth/CA/certs/srv02.crt01.example.com.pem
new file mode 100644 (file)
index 0000000..ddac0db
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv02.crt01.example.com.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207427 (0x6bb3183cdef52003)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:57:59 2022 GMT
+            Not After : Feb  1 17:57:59 2052 GMT
+        Subject: CN=srv02.crt01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:43:d4:fb:cc:b8:88:60:95:16:aa:2a:d0:31:96:
+                    cb:3e:a8:5c:e4:76:ac:c1:bf:cd:3b:65:85:bb:2c:
+                    cb:fa:c3:48:3c:83:c8:08:ee:dc:59:15:97:22:b8:
+                    42:17:8c:75:09:f9:3e:b6:9c:f2:c5:db:5d:b6:8a:
+                    6a:43:48:0a:a2:dd:13:c2:36:e4:73:b3:64:54:79:
+                    bb:f8:d4:7e:48:f4:05:be:0c:77:63:01:fe:4f:30:
+                    b0:aa:62:bc:f2:ed:f9
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv02.crt01.example.com, IP Address:10.53.0.2, IP Address:FD92:7065:B8E:FFFF:0:0:0:2
+    Signature Algorithm: sha256WithRSAEncryption
+         89:ba:ae:4f:f8:3e:da:48:1f:5c:8f:ff:ee:d8:42:b0:0b:9b:
+         f1:b5:e2:90:c9:76:40:09:77:a3:31:d5:73:8f:eb:7d:69:94:
+         1c:2b:10:31:da:d4:0c:29:e7:80:4e:61:53:ba:15:9d:e1:e8:
+         0c:0d:19:77:2b:a8:74:46:e3:03:ae:ab:96:ea:af:80:c3:18:
+         e0:93:8e:e9:58:0e:79:47:98:a4:06:95:6b:8f:2c:d1:f7:29:
+         b1:98:85:e8:a4:9c:45:52:ad:c8:60:20:dc:3a:6a:40:78:15:
+         d1:b4:d0:c3:c5:f3:ac:fe:ec:d3:94:ef:66:0b:d7:8c:46:f3:
+         62:30:c4:c2:78:65:de:40:4e:d8:26:84:8e:18:a7:71:f2:b7:
+         65:d8:d0:c2:c8:e6:a0:fb:ea:01:de:2f:03:8a:50:3d:f6:6c:
+         0b:ef:ce:f5:25:1f:80:54:3e:c2:6d:2c:d3:2b:bd:23:b7:3b:
+         82:6b:91:7f:ea:ff:e6:11:37:d3:f0:d4:db:9f:32:ac:12:cc:
+         ec:25:25:81:58:16:18:90:73:c3:ad:7c:09:a7:08:99:16:ce:
+         e8:6c:4b:9a:e6:09:96:11:c2:f1:cf:19:43:a6:a6:81:f2:57:
+         21:fa:b1:91:58:39:76:17:89:32:4c:4b:df:fa:59:03:b2:32:
+         b4:b3:95:89:af:f4:5e:94:b1:df:e9:bf:21:73:14:06:5d:08:
+         1e:0f:d2:84:14:44:20:91:19:72:b9:38:0b:3c:2e:4f:ea:3a:
+         9b:ef:93:61:e7:36:82:df:49:e2:d7:45:ea:87:45:1d:74:36:
+         18:f4:aa:30:d5:65:da:1f:c7:98:61:ab:64:2a:49:98:64:a1:
+         8c:33:3a:a5:97:4a:69:a6:9d:6f:00:b9:6b:81:8d:09:0f:98:
+         63:0f:85:ae:e4:21:70:a3:da:5a:27:eb:df:6d:82:ac:bb:48:
+         6b:01:4e:36:95:5a:d3:f0:b9:30:43:72:87:af:41:7a:30:13:
+         f2:92:15:f1:69:e7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/certs/srv03.crt01.example.com.key b/bin/tests/system/doth/CA/certs/srv03.crt01.example.com.key
new file mode 100644 (file)
index 0000000..72f8a40
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv03.crt01.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDBMJxQaJB76ywjBuhZI
+LUz05LQuwmDBAFeZFqe10HG+r0cZvVw4Cr5M7jr2RVLqKRChZANiAARF27kbN2W/
+saGKWjkAjUoVO0OauC//qH2Zg6ic3LbCqp/4UaEOLpcPkBMiTIvx/zxr65EpfUzf
+fAXdrepKTK0K1m+OUbCIWEKILBbURx24j7NODRLfTBT2JyA/lJojgUg=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv03.crt01.example.com.pem b/bin/tests/system/doth/CA/certs/srv03.crt01.example.com.pem
new file mode 100644 (file)
index 0000000..1698989
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv03.crt01.example.com.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207428 (0x6bb3183cdef52004)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:58:15 2022 GMT
+            Not After : Feb  1 17:58:15 2052 GMT
+        Subject: CN=srv03.crt01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:45:db:b9:1b:37:65:bf:b1:a1:8a:5a:39:00:8d:
+                    4a:15:3b:43:9a:b8:2f:ff:a8:7d:99:83:a8:9c:dc:
+                    b6:c2:aa:9f:f8:51:a1:0e:2e:97:0f:90:13:22:4c:
+                    8b:f1:ff:3c:6b:eb:91:29:7d:4c:df:7c:05:dd:ad:
+                    ea:4a:4c:ad:0a:d6:6f:8e:51:b0:88:58:42:88:2c:
+                    16:d4:47:1d:b8:8f:b3:4e:0d:12:df:4c:14:f6:27:
+                    20:3f:94:9a:23:81:48
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv03.crt01.example.com, IP Address:10.53.0.3, IP Address:FD92:7065:B8E:FFFF:0:0:0:3
+    Signature Algorithm: sha256WithRSAEncryption
+         8f:96:88:82:94:76:8e:97:b6:75:8b:e9:2b:4f:f3:8f:14:5c:
+         50:00:ca:67:96:9e:2e:bd:53:25:25:40:6d:c5:56:e6:1a:f6:
+         cb:fb:58:fc:b3:56:9d:fc:0b:e2:8e:99:7e:e8:e6:ad:b6:e7:
+         e6:3e:8a:59:ef:3e:76:a4:ed:7b:58:fd:a3:4b:aa:4e:11:e1:
+         57:bf:b1:23:a5:a1:00:f8:95:07:c8:7d:ee:ac:a7:c8:24:ee:
+         cf:e8:c5:a4:9f:96:27:c9:47:c1:7d:11:de:66:d0:6d:d1:8d:
+         e7:8f:a0:0f:46:d9:2e:70:f3:9f:ac:6a:b0:3f:5a:dc:70:d4:
+         b9:a5:f3:ff:5c:21:50:5d:c2:a2:46:26:25:2a:2f:8a:aa:7a:
+         fd:76:31:5f:e0:25:a3:ee:df:36:f0:ab:05:a1:5d:0d:3c:6b:
+         2c:1d:d5:c5:73:9c:a0:57:1f:c4:26:e6:dc:a1:7c:25:08:21:
+         61:28:e2:b3:f5:51:83:20:73:14:19:8f:47:79:69:bc:2b:22:
+         f2:17:62:1d:83:f7:4f:a9:c4:51:68:e0:a9:d7:9f:17:6a:d2:
+         fd:f7:04:ce:a4:f5:8e:eb:31:b4:bf:c6:2d:da:0c:70:6e:0c:
+         a5:75:21:54:3c:f6:3d:36:b8:8a:d8:b6:7b:77:7e:54:1d:9f:
+         91:8f:02:a6:d1:2c:a7:30:d1:cc:e6:d9:6b:76:80:15:4b:ba:
+         fd:55:20:cc:b2:99:85:57:60:11:97:c5:e7:28:50:a6:17:af:
+         d2:bd:1b:7e:06:48:7f:63:dc:70:f8:3f:22:9f:41:a1:66:f5:
+         a7:81:99:cb:07:0e:8a:9a:bb:12:f6:c0:fe:59:0c:00:37:15:
+         b2:9d:f0:f9:93:d1:1a:b6:f8:0a:6b:bd:9e:92:32:45:f5:a2:
+         44:f0:45:8d:1a:d0:10:b2:db:98:c4:c7:5e:c1:e8:f3:94:33:
+         6c:06:f5:1a:cc:51:23:72:ae:37:2f:57:d4:f8:ac:1f:25:b4:
+         d3:bf:99:9b:ac:fc
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/certs/srv04.crt01.example.com.key b/bin/tests/system/doth/CA/certs/srv04.crt01.example.com.key
new file mode 100644 (file)
index 0000000..5356fc1
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv04.crt01.example.com.key
@@ -0,0 +1,6 @@
+-----BEGIN PRIVATE KEY-----
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDDq5a0oiMxJiOdwaSmk
+U2NPPJXOWPZVWpIGxB0kczGcCS6Xq0VinNqLe5YI9M1YwXehZANiAASeQ9fMKeGO
+SzWhj7ePMA9Ws1t/wGKbIyFwsSvnc/nqOAFmS1JDMc8QaRW/awjzaQc/mbu4cNA7
+iSId8iVCWj5VkcP8tL7HLYZRFMSr/nxUNGfHXtuGhMxm61SvnX3czhg=
+-----END PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/certs/srv04.crt01.example.com.pem b/bin/tests/system/doth/CA/certs/srv04.crt01.example.com.pem
new file mode 100644 (file)
index 0000000..2731f32
--- /dev/null
+++ b/bin/tests/system/doth/CA/certs/srv04.crt01.example.com.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207429 (0x6bb3183cdef52005)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:59:14 2022 GMT
+            Not After : Feb  1 17:59:14 2052 GMT
+        Subject: CN=srv04.crt01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:9e:43:d7:cc:29:e1:8e:4b:35:a1:8f:b7:8f:30:
+                    0f:56:b3:5b:7f:c0:62:9b:23:21:70:b1:2b:e7:73:
+                    f9:ea:38:01:66:4b:52:43:31:cf:10:69:15:bf:6b:
+                    08:f3:69:07:3f:99:bb:b8:70:d0:3b:89:22:1d:f2:
+                    25:42:5a:3e:55:91:c3:fc:b4:be:c7:2d:86:51:14:
+                    c4:ab:fe:7c:54:34:67:c7:5e:db:86:84:cc:66:eb:
+                    54:af:9d:7d:dc:ce:18
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv04.crt01.example.com, IP Address:10.53.0.4, IP Address:FD92:7065:B8E:FFFF:0:0:0:4
+    Signature Algorithm: sha256WithRSAEncryption
+         48:b5:38:59:79:e6:51:a6:ea:80:d7:d1:3c:29:03:70:31:e4:
+         43:b4:e3:09:e7:e1:37:8c:d0:0f:2a:19:7a:f2:5a:6d:76:cd:
+         17:7a:66:1c:3e:74:56:24:b8:29:06:55:b2:1c:af:9a:42:05:
+         93:a4:70:cb:a5:68:85:ab:71:53:da:d9:29:a3:f4:2a:1e:df:
+         0c:ec:7d:52:55:fa:9b:e6:a0:18:d5:4c:da:e6:d2:60:da:bc:
+         09:5b:13:53:6d:c7:d2:30:b9:a8:a5:02:7f:a3:66:28:34:93:
+         de:55:a0:de:b5:c8:dc:43:7b:b9:03:06:1f:ce:8c:5f:82:d8:
+         af:40:56:ce:f8:b9:d4:73:1c:ae:c9:cb:1d:0f:a2:52:71:9b:
+         8b:05:f4:d6:0b:1e:a8:db:0f:29:a0:43:b5:2f:56:09:d8:68:
+         58:9c:e5:6a:df:38:91:56:9d:44:e5:d2:ca:9a:b1:41:a1:01:
+         0c:68:a0:f5:0a:f7:98:4f:d5:a0:6f:99:59:a0:e0:cb:49:57:
+         26:20:09:5a:fa:c2:75:40:f6:1b:6a:ac:55:47:50:8d:38:81:
+         61:79:44:e7:d5:d1:b3:c7:3b:db:ec:44:59:ef:e1:82:31:a3:
+         38:4c:de:40:11:31:52:8b:bb:1c:af:be:ce:c5:2b:f5:0d:c0:
+         60:13:fb:7e:da:22:41:d4:85:5e:4d:ba:db:f8:f7:26:61:32:
+         26:fe:fe:9e:37:a3:cc:25:3b:3c:c8:b5:a7:a5:5c:d9:4d:8f:
+         a8:f2:86:98:79:b3:00:08:0f:f2:c9:1f:c6:3f:07:ad:e4:a7:
+         8d:86:3d:15:fa:5b:1a:0f:96:67:b6:0a:78:0a:bb:6e:05:a6:
+         54:29:48:b4:f9:48:0d:7f:f0:13:65:32:2f:c5:ee:ab:b8:e8:
+         0d:b2:f9:c9:96:d2:cf:51:a2:64:3c:58:0f:65:6f:c6:99:93:
+         76:2c:42:08:d9:f3:f3:13:cd:41:b6:67:8f:1d:9a:2f:da:93:
+         3d:26:4c:9a:11:c1
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/index.txt b/bin/tests/system/doth/CA/index.txt
new file mode 100644 (file)
index 0000000..230127d
--- /dev/null
+++ b/bin/tests/system/doth/CA/index.txt
@@ -0,0 +1,9 @@
+V      20520201171852Z         6BB3183CDEF52001        unknown /CN=srv01.crt01.example.com
+V      20520201172143Z         6BB3183CDEF52002        unknown /CN=srv01.crt02-no-san.example.com
+V      20520201175759Z         6BB3183CDEF52003        unknown /CN=srv02.crt01.example.com
+V      20520201175815Z         6BB3183CDEF52004        unknown /CN=srv03.crt01.example.com
+V      20520201175914Z         6BB3183CDEF52005        unknown /CN=srv04.crt01.example.com
+V      120815090000Z           6BB3183CDEF52006        unknown /CN=srv01.crt03-expired.example.com
+V      20520203174420Z         6BB3183CDEF52007        unknown /CN=srv01.client01.example.com
+V      20520204132112Z         6BB3183CDEF52008        unknown /CN=srv01.client02-ns2.example.com
+V      120814060000Z           6BB3183CDEF52009        unknown /CN=srv01.client03-ns2-expired.example.com

diff --git a/bin/tests/system/doth/CA/index.txt.attr b/bin/tests/system/doth/CA/index.txt.attr
new file mode 100644 (file)
index 0000000..8f7e63a
--- /dev/null
+++ b/bin/tests/system/doth/CA/index.txt.attr
@@ -0,0 +1 @@
+unique_subject = yes

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52001.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52001.pem
new file mode 100644 (file)
index 0000000..26f3870
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52001.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207425 (0x6bb3183cdef52001)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:18:52 2022 GMT
+            Not After : Feb  1 17:18:52 2052 GMT
+        Subject: CN=srv01.crt01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:12:a1:7b:0f:79:f2:29:f5:8f:6a:06:d0:28:83:
+                    14:43:8f:19:4c:29:91:36:30:0f:06:a6:56:e7:57:
+                    9b:58:2c:9e:fc:9c:a3:4e:f6:e3:6f:90:40:d5:09:
+                    fd:94:96:8e:14:68:74:6f:e8:a7:a7:ab:8c:35:96:
+                    f2:d6:8f:5d:97:5d:d1:b9:22:5b:ef:31:15:a1:e1:
+                    eb:6d:6f:af:b1:2f:80:e5:a5:a9:38:f2:6f:f9:65:
+                    14:70:a7:a5:ac:e1:1a
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.crt01.example.com, IP Address:10.53.0.1, IP Address:FD92:7065:B8E:FFFF:0:0:0:1
+    Signature Algorithm: sha256WithRSAEncryption
+         79:0f:08:ab:18:cc:f9:7a:bd:47:21:99:a1:a3:76:04:7f:d7:
+         08:33:91:49:3d:2d:fc:8d:ff:c5:c1:8d:b8:70:05:65:32:cd:
+         e2:26:21:49:19:66:a2:94:4f:42:7d:83:3c:4f:ed:c1:87:89:
+         5b:73:2c:64:64:67:29:f5:73:83:23:72:b7:a8:2e:d6:9a:de:
+         13:0c:ba:35:d3:38:b1:c4:51:7d:81:fc:25:ca:a6:d9:d2:fa:
+         bb:6d:1f:a4:61:90:50:2d:8a:ed:70:1a:eb:56:2f:fc:7b:f3:
+         76:df:68:8d:e8:a4:7d:82:b9:5c:c6:cb:d8:06:f7:78:dc:a7:
+         94:35:d4:83:98:28:51:36:1c:73:47:e4:5b:32:d2:cd:de:1c:
+         44:f6:de:37:8a:46:d0:14:8d:71:e5:10:22:b1:f9:73:f7:1b:
+         4f:82:e1:a1:00:73:18:17:71:a2:bf:a2:0c:59:aa:43:58:46:
+         82:f8:38:c4:5a:5a:9f:13:d7:a9:54:1f:58:9b:5d:52:16:d3:
+         a0:ba:6b:aa:cf:68:3a:d1:12:9c:94:ac:78:6b:7e:bc:69:6c:
+         75:07:5d:fb:68:cd:e8:8d:bb:8c:b0:7c:6c:9e:f6:a5:7c:32:
+         74:ef:c5:b1:1f:1d:ec:7b:2f:79:c0:3b:52:60:9b:48:89:09:
+         b4:46:34:69:d3:7b:1b:15:ef:0c:dd:64:1d:58:fe:a7:0b:b1:
+         9d:28:1f:1e:9e:3c:c0:b1:a6:38:ab:9d:54:24:0e:75:6c:9e:
+         90:13:b9:39:dc:43:fe:37:e3:14:0f:78:7e:2b:56:a2:d2:60:
+         51:57:88:3b:4c:cf:24:67:36:77:21:bb:c8:07:eb:48:f7:b0:
+         1e:e4:99:61:84:15:bb:61:3a:21:55:df:31:43:67:73:8f:6b:
+         e9:04:83:be:2d:8b:94:39:89:cf:40:d5:04:f7:6b:c9:c6:8c:
+         6e:36:0f:5d:7a:9b:57:86:36:76:2c:75:35:47:50:ed:9a:84:
+         7e:37:83:b5:21:a2
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52002.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52002.pem
new file mode 100644 (file)
index 0000000..65f0f9f
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52002.pem
@@ -0,0 +1,64 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 7760573232607207426 (0x6bb3183cdef52002)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:21:43 2022 GMT
+            Not After : Feb  1 17:21:43 2052 GMT
+        Subject: CN=srv01.crt02-no-san.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:a3:2d:33:fd:92:90:dc:03:ef:36:f9:a4:a8:90:
+                    f1:47:69:be:e8:8e:65:08:da:e5:b3:82:63:1c:af:
+                    9a:37:b4:75:7c:ce:46:fb:19:17:bc:90:72:4f:74:
+                    b6:45:39:f7:96:b3:44:85:1c:ad:6a:db:a4:76:86:
+                    ee:8e:27:3d:f7:61:78:df:e1:04:8a:eb:91:8b:01:
+                    67:b6:69:32:54:50:1c:56:86:da:2f:ef:e4:3d:94:
+                    ba:f7:5b:02:14:b5:13
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+    Signature Algorithm: sha256WithRSAEncryption
+         07:20:2a:a6:7a:52:52:ba:1e:b7:79:cf:e6:11:9c:ca:3f:43:
+         2b:f3:d7:2e:74:74:57:81:a1:aa:e6:68:c9:fd:d1:a8:a6:5b:
+         a2:ff:ea:f7:f0:b7:46:dc:a0:5a:64:5f:ce:e7:0f:76:63:14:
+         6d:c2:51:4b:30:ea:51:7e:4a:1b:d3:b2:f8:c2:3d:3f:c1:bf:
+         ad:db:4d:f8:28:31:e7:75:ae:84:37:90:00:e5:0b:6b:dc:23:
+         98:69:d5:ef:ce:e2:0d:e7:19:f1:31:01:1f:2a:6c:23:a3:94:
+         62:7a:bf:b3:b0:13:d0:62:fc:a5:a6:0d:52:bb:f4:31:ff:f3:
+         ce:3a:74:66:30:7f:29:04:8d:34:90:7a:9b:8f:da:82:2e:5c:
+         81:dd:af:fa:3a:a1:4e:bb:0a:4c:62:01:40:39:67:9c:29:27:
+         6e:2f:76:81:2d:33:68:ee:ee:ed:00:7f:12:7a:af:43:00:7b:
+         2d:34:8a:26:9a:66:1c:e5:96:17:7c:f8:6d:1e:8c:17:39:ce:
+         4f:0b:9e:40:72:e1:5e:33:3f:9e:84:b5:07:f5:ab:58:d7:37:
+         ed:d0:29:ad:ce:02:0d:fa:6f:96:a9:0e:6c:6e:32:d2:dc:11:
+         23:a3:4a:60:54:b4:98:31:db:8f:4b:4c:58:64:39:4f:ff:27:
+         d0:02:e5:cc:b2:17:e8:46:dc:aa:cb:dc:3d:ed:14:52:ec:6d:
+         a6:cd:04:2f:fd:54:16:6c:7e:63:34:17:f1:1d:b8:37:dd:20:
+         6c:f6:21:19:6f:bb:62:dd:bc:6c:41:34:ad:b1:90:eb:2a:e0:
+         63:ea:70:60:6a:02:e8:fe:46:51:b1:9d:3c:54:54:73:25:b7:
+         41:d1:4c:34:aa:88:48:b8:01:21:ae:d8:d3:06:38:05:65:78:
+         e7:38:f0:f6:e6:2e:61:c0:42:5e:3b:09:59:eb:09:48:4d:55:
+         7c:af:f4:de:c1:09:a0:b4:60:f7:9e:a2:d5:46:fc:05:61:69:
+         e0:c1:2d:26:dc:42
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52003.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52003.pem
new file mode 100644 (file)
index 0000000..ddac0db
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52003.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207427 (0x6bb3183cdef52003)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:57:59 2022 GMT
+            Not After : Feb  1 17:57:59 2052 GMT
+        Subject: CN=srv02.crt01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:43:d4:fb:cc:b8:88:60:95:16:aa:2a:d0:31:96:
+                    cb:3e:a8:5c:e4:76:ac:c1:bf:cd:3b:65:85:bb:2c:
+                    cb:fa:c3:48:3c:83:c8:08:ee:dc:59:15:97:22:b8:
+                    42:17:8c:75:09:f9:3e:b6:9c:f2:c5:db:5d:b6:8a:
+                    6a:43:48:0a:a2:dd:13:c2:36:e4:73:b3:64:54:79:
+                    bb:f8:d4:7e:48:f4:05:be:0c:77:63:01:fe:4f:30:
+                    b0:aa:62:bc:f2:ed:f9
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv02.crt01.example.com, IP Address:10.53.0.2, IP Address:FD92:7065:B8E:FFFF:0:0:0:2
+    Signature Algorithm: sha256WithRSAEncryption
+         89:ba:ae:4f:f8:3e:da:48:1f:5c:8f:ff:ee:d8:42:b0:0b:9b:
+         f1:b5:e2:90:c9:76:40:09:77:a3:31:d5:73:8f:eb:7d:69:94:
+         1c:2b:10:31:da:d4:0c:29:e7:80:4e:61:53:ba:15:9d:e1:e8:
+         0c:0d:19:77:2b:a8:74:46:e3:03:ae:ab:96:ea:af:80:c3:18:
+         e0:93:8e:e9:58:0e:79:47:98:a4:06:95:6b:8f:2c:d1:f7:29:
+         b1:98:85:e8:a4:9c:45:52:ad:c8:60:20:dc:3a:6a:40:78:15:
+         d1:b4:d0:c3:c5:f3:ac:fe:ec:d3:94:ef:66:0b:d7:8c:46:f3:
+         62:30:c4:c2:78:65:de:40:4e:d8:26:84:8e:18:a7:71:f2:b7:
+         65:d8:d0:c2:c8:e6:a0:fb:ea:01:de:2f:03:8a:50:3d:f6:6c:
+         0b:ef:ce:f5:25:1f:80:54:3e:c2:6d:2c:d3:2b:bd:23:b7:3b:
+         82:6b:91:7f:ea:ff:e6:11:37:d3:f0:d4:db:9f:32:ac:12:cc:
+         ec:25:25:81:58:16:18:90:73:c3:ad:7c:09:a7:08:99:16:ce:
+         e8:6c:4b:9a:e6:09:96:11:c2:f1:cf:19:43:a6:a6:81:f2:57:
+         21:fa:b1:91:58:39:76:17:89:32:4c:4b:df:fa:59:03:b2:32:
+         b4:b3:95:89:af:f4:5e:94:b1:df:e9:bf:21:73:14:06:5d:08:
+         1e:0f:d2:84:14:44:20:91:19:72:b9:38:0b:3c:2e:4f:ea:3a:
+         9b:ef:93:61:e7:36:82:df:49:e2:d7:45:ea:87:45:1d:74:36:
+         18:f4:aa:30:d5:65:da:1f:c7:98:61:ab:64:2a:49:98:64:a1:
+         8c:33:3a:a5:97:4a:69:a6:9d:6f:00:b9:6b:81:8d:09:0f:98:
+         63:0f:85:ae:e4:21:70:a3:da:5a:27:eb:df:6d:82:ac:bb:48:
+         6b:01:4e:36:95:5a:d3:f0:b9:30:43:72:87:af:41:7a:30:13:
+         f2:92:15:f1:69:e7
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52004.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52004.pem
new file mode 100644 (file)
index 0000000..1698989
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52004.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207428 (0x6bb3183cdef52004)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:58:15 2022 GMT
+            Not After : Feb  1 17:58:15 2052 GMT
+        Subject: CN=srv03.crt01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:45:db:b9:1b:37:65:bf:b1:a1:8a:5a:39:00:8d:
+                    4a:15:3b:43:9a:b8:2f:ff:a8:7d:99:83:a8:9c:dc:
+                    b6:c2:aa:9f:f8:51:a1:0e:2e:97:0f:90:13:22:4c:
+                    8b:f1:ff:3c:6b:eb:91:29:7d:4c:df:7c:05:dd:ad:
+                    ea:4a:4c:ad:0a:d6:6f:8e:51:b0:88:58:42:88:2c:
+                    16:d4:47:1d:b8:8f:b3:4e:0d:12:df:4c:14:f6:27:
+                    20:3f:94:9a:23:81:48
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv03.crt01.example.com, IP Address:10.53.0.3, IP Address:FD92:7065:B8E:FFFF:0:0:0:3
+    Signature Algorithm: sha256WithRSAEncryption
+         8f:96:88:82:94:76:8e:97:b6:75:8b:e9:2b:4f:f3:8f:14:5c:
+         50:00:ca:67:96:9e:2e:bd:53:25:25:40:6d:c5:56:e6:1a:f6:
+         cb:fb:58:fc:b3:56:9d:fc:0b:e2:8e:99:7e:e8:e6:ad:b6:e7:
+         e6:3e:8a:59:ef:3e:76:a4:ed:7b:58:fd:a3:4b:aa:4e:11:e1:
+         57:bf:b1:23:a5:a1:00:f8:95:07:c8:7d:ee:ac:a7:c8:24:ee:
+         cf:e8:c5:a4:9f:96:27:c9:47:c1:7d:11:de:66:d0:6d:d1:8d:
+         e7:8f:a0:0f:46:d9:2e:70:f3:9f:ac:6a:b0:3f:5a:dc:70:d4:
+         b9:a5:f3:ff:5c:21:50:5d:c2:a2:46:26:25:2a:2f:8a:aa:7a:
+         fd:76:31:5f:e0:25:a3:ee:df:36:f0:ab:05:a1:5d:0d:3c:6b:
+         2c:1d:d5:c5:73:9c:a0:57:1f:c4:26:e6:dc:a1:7c:25:08:21:
+         61:28:e2:b3:f5:51:83:20:73:14:19:8f:47:79:69:bc:2b:22:
+         f2:17:62:1d:83:f7:4f:a9:c4:51:68:e0:a9:d7:9f:17:6a:d2:
+         fd:f7:04:ce:a4:f5:8e:eb:31:b4:bf:c6:2d:da:0c:70:6e:0c:
+         a5:75:21:54:3c:f6:3d:36:b8:8a:d8:b6:7b:77:7e:54:1d:9f:
+         91:8f:02:a6:d1:2c:a7:30:d1:cc:e6:d9:6b:76:80:15:4b:ba:
+         fd:55:20:cc:b2:99:85:57:60:11:97:c5:e7:28:50:a6:17:af:
+         d2:bd:1b:7e:06:48:7f:63:dc:70:f8:3f:22:9f:41:a1:66:f5:
+         a7:81:99:cb:07:0e:8a:9a:bb:12:f6:c0:fe:59:0c:00:37:15:
+         b2:9d:f0:f9:93:d1:1a:b6:f8:0a:6b:bd:9e:92:32:45:f5:a2:
+         44:f0:45:8d:1a:d0:10:b2:db:98:c4:c7:5e:c1:e8:f3:94:33:
+         6c:06:f5:1a:cc:51:23:72:ae:37:2f:57:d4:f8:ac:1f:25:b4:
+         d3:bf:99:9b:ac:fc
+-----BEGIN CERTIFICATE-----
+MIIDMzCCAZugAwIBAgIIa7MYPN71IAQwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE
+BhMCVUExGDAWBgNVBAgMD0toYXJraXYgT2JsYXN0JzEQMA4GA1UEBwwHS2hhcmtp
+djEkMCIGA1UECgwbSW50ZXJuZXQgU3lzdGVtcyBDb25zb3J0aXVtMRwwGgYDVQQD
+DBNjYS50ZXN0LmV4YW1wbGUuY29tMCAXDTIyMDIwODE3NTgxNVoYDzIwNTIwMjAx
+MTc1ODE1WjAiMSAwHgYDVQQDDBdzcnYwMy5jcnQwMS5leGFtcGxlLmNvbTB2MBAG
+ByqGSM49AgEGBSuBBAAiA2IABEXbuRs3Zb+xoYpaOQCNShU7Q5q4L/+ofZmDqJzc
+tsKqn/hRoQ4ulw+QEyJMi/H/PGvrkSl9TN98Bd2t6kpMrQrWb45RsIhYQogsFtRH
+HbiPs04NEt9MFPYnID+UmiOBSKM+MDwwOgYDVR0RBDMwMYIXc3J2MDMuY3J0MDEu
+ZXhhbXBsZS5jb22HBAo1AAOHEP2ScGULjv//AAAAAAAAAAMwDQYJKoZIhvcNAQEL
+BQADggGBAI+WiIKUdo6XtnWL6StP848UXFAAymeWni69UyUlQG3FVuYa9sv7WPyz
+Vp38C+KOmX7o5q225+Y+ilnvPnak7XtY/aNLqk4R4Ve/sSOloQD4lQfIfe6sp8gk
+7s/oxaSflifJR8F9Ed5m0G3RjeePoA9G2S5w85+sarA/Wtxw1Lml8/9cIVBdwqJG
+JiUqL4qqev12MV/gJaPu3zbwqwWhXQ08aywd1cVznKBXH8Qm5tyhfCUIIWEo4rP1
+UYMgcxQZj0d5abwrIvIXYh2D90+pxFFo4KnXnxdq0v33BM6k9Y7rMbS/xi3aDHBu
+DKV1IVQ89j02uIrYtnt3flQdn5GPAqbRLKcw0czm2Wt2gBVLuv1VIMyymYVXYBGX
+xecoUKYXr9K9G34GSH9j3HD4PyKfQaFm9aeBmcsHDoqauxL2wP5ZDAA3FbKd8PmT
+0Rq2+AprvZ6SMkX1okTwRY0a0BCy25jEx17B6POUM2wG9RrMUSNyrjcvV9T4rB8l
+tNO/mZus/A==
+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52005.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52005.pem
new file mode 100644 (file)
index 0000000..2731f32
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52005.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207429 (0x6bb3183cdef52005)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb  8 17:59:14 2022 GMT
+            Not After : Feb  1 17:59:14 2052 GMT
+        Subject: CN=srv04.crt01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:9e:43:d7:cc:29:e1:8e:4b:35:a1:8f:b7:8f:30:
+                    0f:56:b3:5b:7f:c0:62:9b:23:21:70:b1:2b:e7:73:
+                    f9:ea:38:01:66:4b:52:43:31:cf:10:69:15:bf:6b:
+                    08:f3:69:07:3f:99:bb:b8:70:d0:3b:89:22:1d:f2:
+                    25:42:5a:3e:55:91:c3:fc:b4:be:c7:2d:86:51:14:
+                    c4:ab:fe:7c:54:34:67:c7:5e:db:86:84:cc:66:eb:
+                    54:af:9d:7d:dc:ce:18
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv04.crt01.example.com, IP Address:10.53.0.4, IP Address:FD92:7065:B8E:FFFF:0:0:0:4
+    Signature Algorithm: sha256WithRSAEncryption
+         48:b5:38:59:79:e6:51:a6:ea:80:d7:d1:3c:29:03:70:31:e4:
+         43:b4:e3:09:e7:e1:37:8c:d0:0f:2a:19:7a:f2:5a:6d:76:cd:
+         17:7a:66:1c:3e:74:56:24:b8:29:06:55:b2:1c:af:9a:42:05:
+         93:a4:70:cb:a5:68:85:ab:71:53:da:d9:29:a3:f4:2a:1e:df:
+         0c:ec:7d:52:55:fa:9b:e6:a0:18:d5:4c:da:e6:d2:60:da:bc:
+         09:5b:13:53:6d:c7:d2:30:b9:a8:a5:02:7f:a3:66:28:34:93:
+         de:55:a0:de:b5:c8:dc:43:7b:b9:03:06:1f:ce:8c:5f:82:d8:
+         af:40:56:ce:f8:b9:d4:73:1c:ae:c9:cb:1d:0f:a2:52:71:9b:
+         8b:05:f4:d6:0b:1e:a8:db:0f:29:a0:43:b5:2f:56:09:d8:68:
+         58:9c:e5:6a:df:38:91:56:9d:44:e5:d2:ca:9a:b1:41:a1:01:
+         0c:68:a0:f5:0a:f7:98:4f:d5:a0:6f:99:59:a0:e0:cb:49:57:
+         26:20:09:5a:fa:c2:75:40:f6:1b:6a:ac:55:47:50:8d:38:81:
+         61:79:44:e7:d5:d1:b3:c7:3b:db:ec:44:59:ef:e1:82:31:a3:
+         38:4c:de:40:11:31:52:8b:bb:1c:af:be:ce:c5:2b:f5:0d:c0:
+         60:13:fb:7e:da:22:41:d4:85:5e:4d:ba:db:f8:f7:26:61:32:
+         26:fe:fe:9e:37:a3:cc:25:3b:3c:c8:b5:a7:a5:5c:d9:4d:8f:
+         a8:f2:86:98:79:b3:00:08:0f:f2:c9:1f:c6:3f:07:ad:e4:a7:
+         8d:86:3d:15:fa:5b:1a:0f:96:67:b6:0a:78:0a:bb:6e:05:a6:
+         54:29:48:b4:f9:48:0d:7f:f0:13:65:32:2f:c5:ee:ab:b8:e8:
+         0d:b2:f9:c9:96:d2:cf:51:a2:64:3c:58:0f:65:6f:c6:99:93:
+         76:2c:42:08:d9:f3:f3:13:cd:41:b6:67:8f:1d:9a:2f:da:93:
+         3d:26:4c:9a:11:c1
+-----BEGIN CERTIFICATE-----
+MIIDMzCCAZugAwIBAgIIa7MYPN71IAUwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE
+BhMCVUExGDAWBgNVBAgMD0toYXJraXYgT2JsYXN0JzEQMA4GA1UEBwwHS2hhcmtp
+djEkMCIGA1UECgwbSW50ZXJuZXQgU3lzdGVtcyBDb25zb3J0aXVtMRwwGgYDVQQD
+DBNjYS50ZXN0LmV4YW1wbGUuY29tMCAXDTIyMDIwODE3NTkxNFoYDzIwNTIwMjAx
+MTc1OTE0WjAiMSAwHgYDVQQDDBdzcnYwNC5jcnQwMS5leGFtcGxlLmNvbTB2MBAG
+ByqGSM49AgEGBSuBBAAiA2IABJ5D18wp4Y5LNaGPt48wD1azW3/AYpsjIXCxK+dz
++eo4AWZLUkMxzxBpFb9rCPNpBz+Zu7hw0DuJIh3yJUJaPlWRw/y0vscthlEUxKv+
+fFQ0Z8de24aEzGbrVK+dfdzOGKM+MDwwOgYDVR0RBDMwMYIXc3J2MDQuY3J0MDEu
+ZXhhbXBsZS5jb22HBAo1AASHEP2ScGULjv//AAAAAAAAAAQwDQYJKoZIhvcNAQEL
+BQADggGBAEi1OFl55lGm6oDX0TwpA3Ax5EO04wnn4TeM0A8qGXryWm12zRd6Zhw+
+dFYkuCkGVbIcr5pCBZOkcMulaIWrcVPa2Smj9Coe3wzsfVJV+pvmoBjVTNrm0mDa
+vAlbE1Ntx9IwuailAn+jZig0k95VoN61yNxDe7kDBh/OjF+C2K9AVs74udRzHK7J
+yx0PolJxm4sF9NYLHqjbDymgQ7UvVgnYaFic5WrfOJFWnUTl0sqasUGhAQxooPUK
+95hP1aBvmVmg4MtJVyYgCVr6wnVA9htqrFVHUI04gWF5ROfV0bPHO9vsRFnv4YIx
+ozhM3kARMVKLuxyvvs7FK/UNwGAT+37aIkHUhV5Nutv49yZhMib+/p43o8wlOzzI
+taelXNlNj6jyhph5swAID/LJH8Y/B63kp42GPRX6WxoPlme2CngKu24FplQpSLT5
+SA1/8BNlMi/F7qu46A2y+cmW0s9RomQ8WA9lb8aZk3YsQgjZ8/MTzUG2Z48dmi/a
+kz0mTJoRwQ==
+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52006.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52006.pem
new file mode 100644 (file)
index 0000000..db981c9
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52006.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207430 (0x6bb3183cdef52006)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Aug 15 08:00:00 2012 GMT
+            Not After : Aug 15 09:00:00 2012 GMT
+        Subject: CN=srv01.crt03-expired.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:1f:d5:7b:ab:73:b2:70:15:fd:33:26:02:5c:76:
+                    16:80:0c:70:7d:57:83:75:ac:3c:b7:4a:02:46:35:
+                    c1:1b:c1:7a:bd:be:f2:04:9a:7f:69:83:7f:54:9a:
+                    1b:10:62:d7:70:bd:ef:26:90:51:50:10:77:56:b7:
+                    1a:2f:44:5e:91:46:36:e1:2e:a4:4c:67:2e:62:a8:
+                    7f:1a:15:10:44:68:8b:18:ea:cf:b8:96:09:bf:b5:
+                    3a:d1:ef:10:8f:9f:bb
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.crt03-expired.example.com, IP Address:10.53.0.1, IP Address:FD92:7065:B8E:FFFF:0:0:0:1
+    Signature Algorithm: sha256WithRSAEncryption
+         25:35:08:f6:e7:f0:83:81:be:65:31:1b:78:a8:04:84:fe:6a:
+         2a:1a:5d:c1:73:20:88:08:11:d8:27:be:a5:8e:3c:df:e2:a6:
+         19:c5:41:40:ea:01:91:85:99:8d:17:4e:4d:9a:3c:03:f9:78:
+         4c:8a:20:41:5e:96:d6:64:83:2f:b2:fe:e7:77:09:f9:91:bd:
+         22:1a:57:8b:f6:24:bc:7b:48:2b:2e:14:b7:32:bd:46:91:99:
+         5e:21:9a:d3:15:a7:27:e1:c0:3a:c7:f5:f9:94:3f:6d:14:7e:
+         0b:02:bf:05:d9:ac:10:8a:7e:b0:37:36:cd:cb:4a:b4:e1:01:
+         c7:04:8d:83:f3:c6:79:ff:ff:6c:f0:a4:bf:3c:12:61:ea:15:
+         ac:30:62:26:e3:c3:4e:7d:5c:68:d8:88:de:35:8d:44:75:8c:
+         a8:c1:0d:07:67:b5:d0:42:43:41:1f:39:a0:47:35:46:d7:0f:
+         89:aa:e8:d3:86:45:9a:fb:33:01:06:23:64:53:24:48:5b:69:
+         fa:cf:d9:81:fb:5e:7e:7b:82:65:56:c6:46:65:5c:e1:4f:f2:
+         3c:09:3c:28:5f:c9:e3:a5:24:e3:7b:aa:b5:b1:8a:6a:b2:02:
+         32:5f:24:05:f1:67:c8:54:17:0c:cd:ca:3d:e4:44:3e:23:3a:
+         7c:63:b6:f9:61:3a:21:e7:8f:27:ad:c3:26:86:39:49:6c:41:
+         40:7f:1d:48:69:8d:db:6f:42:e4:09:fe:24:62:bd:8e:2e:54:
+         25:f0:14:c2:d8:43:95:09:2e:5f:72:4f:43:b5:9a:8b:bb:8c:
+         44:c6:77:c9:05:fb:1a:9f:d7:b6:a6:42:d9:5c:3d:a5:09:0f:
+         9e:e0:c7:06:32:f1:ff:c9:53:5e:42:d4:2a:33:ad:06:ea:ec:
+         b0:26:d3:3c:ef:65:af:15:8e:7b:20:49:ad:f1:56:ef:17:6b:
+         fc:f4:d8:7c:82:9f:30:19:d0:bc:9c:79:e2:dc:9d:a7:f9:6b:
+         6f:65:ae:21:a0:94
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52007.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52007.pem
new file mode 100644 (file)
index 0000000..4eb45dd
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52007.pem
@@ -0,0 +1,68 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207431 (0x6bb3183cdef52007)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb 10 17:44:20 2022 GMT
+            Not After : Feb  3 17:44:20 2052 GMT
+        Subject: CN=srv01.client01.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:5e:93:6a:7a:da:75:cc:64:08:e4:f8:f9:2f:2b:
+                    85:36:ee:e1:df:fa:cd:4c:60:f1:44:b5:16:7b:f9:
+                    03:cf:a0:08:67:6f:ae:27:a3:95:8a:68:1e:63:ab:
+                    cf:2e:20:62:52:e7:8c:3e:1e:ef:de:0d:69:64:65:
+                    b6:e4:df:fe:1a:48:f8:68:75:84:83:11:fb:81:59:
+                    0e:c1:96:48:7f:24:da:11:dd:ac:cb:0a:c5:09:78:
+                    24:31:3a:df:37:e6:b3
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.client01.example.com
+    Signature Algorithm: sha256WithRSAEncryption
+         82:bd:eb:8f:4e:a5:d2:46:c7:d8:70:3c:34:1d:58:43:1b:81:
+         16:5d:c2:b0:76:4b:a9:f2:10:14:23:e4:ef:dc:59:03:b6:7f:
+         b0:40:34:e5:d0:82:4b:95:a6:07:9a:45:51:94:cf:08:c2:4e:
+         c9:44:d5:f3:b6:ed:f2:a0:01:94:ad:e0:0e:0f:ab:85:6f:35:
+         4b:07:c8:97:25:fb:69:ff:a1:99:bc:ec:70:6c:51:b5:32:95:
+         e9:c9:45:cf:45:e2:c5:5e:b1:59:a2:e1:f2:83:c8:87:68:c4:
+         60:e2:db:50:6c:18:64:1b:9a:9a:cc:7c:e7:fd:d9:f2:b7:d1:
+         de:1d:ec:29:c9:58:db:7b:9a:a1:06:9a:ce:36:a0:45:10:dc:
+         7d:81:24:21:34:30:4c:71:f9:fc:96:37:d6:cf:0d:9d:11:12:
+         c7:62:bc:19:5b:79:e5:e0:37:e8:17:36:4b:13:af:fa:2c:2e:
+         36:d9:be:53:e1:c3:f9:bc:94:a6:7a:97:14:99:36:f9:14:38:
+         11:20:3a:2a:9d:fd:64:63:d0:a2:8f:f0:99:a9:02:ca:57:48:
+         d2:7d:65:44:b6:85:a0:38:ec:e8:19:7e:c2:48:e3:1d:22:53:
+         cf:3b:d4:0a:98:e1:72:62:ec:8b:01:3f:5a:ea:26:2c:8c:16:
+         c3:80:5a:c2:5d:40:c5:65:1c:e2:9a:e3:d6:65:16:ee:dc:17:
+         30:d8:26:87:92:d0:ef:c7:72:07:99:86:05:9e:49:35:41:33:
+         b9:bb:cb:1b:25:50:70:85:e3:0f:c7:b9:b2:37:00:1b:87:a2:
+         47:97:34:5b:cd:dc:66:22:e5:de:25:ec:57:fe:37:75:2c:03:
+         10:f4:d4:a7:cc:f5:4b:0b:ff:eb:d3:a6:78:2e:cd:8f:65:51:
+         a7:8c:ef:83:67:ec:94:13:c2:1f:74:74:55:7c:a3:0b:b7:2f:
+         80:5a:62:04:1d:a2:c0:c1:de:b2:7d:31:3b:a1:fa:f7:40:a7:
+         bd:12:25:95:5b:8b
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52008.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52008.pem
new file mode 100644 (file)
index 0000000..36728e0
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52008.pem
@@ -0,0 +1,68 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207432 (0x6bb3183cdef52008)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Feb 11 13:21:12 2022 GMT
+            Not After : Feb  4 13:21:12 2052 GMT
+        Subject: CN=srv01.client02-ns2.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:e6:45:fa:57:12:6c:59:10:23:8b:7a:5c:76:33:
+                    eb:3b:41:fa:b7:1c:90:b3:2f:33:2d:45:7b:e3:e5:
+                    b6:a5:a2:a2:a4:14:f4:50:9d:b0:c6:38:ba:e9:45:
+                    65:a4:65:b9:10:32:2f:93:9b:d5:d8:cf:b4:29:5b:
+                    dc:4e:c8:ec:a6:9f:58:76:24:f4:c5:d1:48:55:52:
+                    eb:5d:b0:85:93:85:ee:3e:b8:c4:b1:cd:08:59:95:
+                    12:ff:7b:9b:ee:6a:b9
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.client02-ns2.example.com
+    Signature Algorithm: sha256WithRSAEncryption
+         43:ec:0f:62:17:f6:f4:90:3b:7c:36:21:f2:18:94:a6:42:51:
+         1e:1d:2a:43:8f:05:b7:8d:3c:ca:f0:20:2f:65:4b:be:48:ad:
+         6a:0a:cc:2d:1f:d6:27:1d:af:4a:36:86:ed:0d:03:75:c5:71:
+         ec:58:9b:ec:f9:0f:e4:83:ef:6f:91:da:20:73:47:ac:e7:c7:
+         8b:22:b2:d1:6e:a0:b0:d6:1c:4c:70:1e:74:08:1d:7f:61:06:
+         e5:be:f3:e8:c4:15:60:e2:b0:02:9b:f0:13:af:76:5b:a8:c7:
+         91:2c:10:5f:0d:32:89:51:5a:7f:17:1b:7c:c6:46:97:ee:e7:
+         bb:8a:48:38:a2:52:d4:ff:3b:1c:ec:4a:a9:8c:a5:23:3a:04:
+         bb:d7:b8:ad:5b:69:7f:1d:be:ca:96:e0:eb:56:05:43:ee:c8:
+         ff:2c:48:03:00:c6:c2:ac:fc:4e:15:47:86:c5:33:ed:70:f6:
+         98:bc:0b:07:b9:5b:1a:ec:fd:3c:bf:26:61:68:fc:db:02:55:
+         07:ae:76:0e:be:ff:c5:b8:56:fb:52:54:a4:b1:2d:64:b4:1d:
+         55:02:4f:da:06:bd:26:e4:22:d2:94:1f:7e:29:c4:97:10:d1:
+         75:7d:41:53:be:46:52:70:b1:d9:ff:bb:9f:96:19:e3:a0:ba:
+         d0:4a:5a:8d:da:22:73:89:f0:4c:e6:18:80:53:be:bd:64:56:
+         6a:c9:58:71:40:66:9e:4a:3e:31:3b:74:9e:6e:6a:f5:65:ca:
+         93:06:52:00:74:65:a0:3a:eb:2e:56:56:d2:a5:4b:0e:85:17:
+         25:78:cb:f3:f9:53:7b:85:f9:82:15:87:bc:36:70:b5:69:64:
+         48:11:79:b9:2c:2e:cc:09:fd:0f:b0:b7:cd:97:3b:c7:0f:49:
+         1a:fc:15:49:d6:1c:a9:dc:14:ff:44:d2:be:5a:36:00:66:0c:
+         d5:b8:bf:16:9e:60:27:79:c0:f5:b4:ff:2f:af:8c:b2:49:75:
+         61:44:05:1a:e8:cd
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52009.pem b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52009.pem
new file mode 100644 (file)
index 0000000..8248191
--- /dev/null
+++ b/bin/tests/system/doth/CA/newcerts/6BB3183CDEF52009.pem
@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 7760573232607207433 (0x6bb3183cdef52009)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=UA, ST=Kharkiv Oblast', L=Kharkiv, O=Internet Systems Consortium, CN=ca.test.example.com
+        Validity
+            Not Before: Aug 14 05:00:00 2012 GMT
+            Not After : Aug 14 06:00:00 2012 GMT
+        Subject: CN=srv01.client03-ns2-expired.example.com
+        Subject Public Key Info:
+            Public Key Algorithm: id-ecPublicKey
+                Public-Key: (384 bit)
+                pub:
+                    04:38:9a:9b:c2:6a:82:a6:d1:50:8a:78:7a:d1:be:
+                    61:be:d4:b6:d3:d6:a2:02:97:a4:48:50:c0:c5:1d:
+                    d8:2d:23:19:25:6e:91:02:1d:69:c2:77:d6:f1:a8:
+                    4f:4a:9a:1d:3c:69:5a:89:41:0a:f2:e0:64:57:1b:
+                    0e:9e:df:9f:4c:7b:3c:42:dc:21:c8:2c:95:ab:b3:
+                    4c:5f:56:c4:70:ee:8a:a4:e4:46:c4:9e:98:f5:c8:
+                    7b:b2:73:d7:45:93:f0
+                ASN1 OID: secp384r1
+                NIST CURVE: P-384
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:srv01.client03-ns2-expired.example.com
+    Signature Algorithm: sha256WithRSAEncryption
+         38:12:1f:5f:26:b6:8e:9b:3f:77:89:5a:b8:e8:46:78:c3:d6:
+         f0:0c:67:5f:d5:a3:9c:f6:f2:0a:ae:9c:87:74:9f:a3:5b:8a:
+         27:58:47:e5:78:1a:e9:db:b5:cc:28:a7:f8:18:e3:e7:20:43:
+         cf:82:06:5d:a1:d0:82:ab:15:be:86:46:1e:e6:4d:ad:78:a4:
+         16:6c:99:41:3d:29:21:c8:6b:9d:3d:4a:cd:93:37:1f:1c:88:
+         c7:ae:b6:7c:73:42:57:57:32:9d:e8:c6:e2:3e:da:12:57:3e:
+         c8:56:4a:bb:d4:01:fc:8e:30:8d:19:fe:61:3d:5e:02:64:65:
+         a2:46:b3:6e:ea:f9:cb:4e:f0:b9:f6:bc:6b:38:10:19:d0:93:
+         f8:f7:d9:4c:d2:87:2c:7f:dc:f5:00:c6:29:dd:00:5e:d2:f4:
+         df:52:fb:7a:5a:ad:98:36:77:72:1f:01:ed:48:91:48:16:2d:
+         35:a5:15:21:98:ff:7e:5d:a1:45:c9:5f:9d:c2:3e:e5:98:e2:
+         ee:ce:4d:18:76:3d:8a:0a:64:9b:f1:19:9d:b6:82:af:1b:15:
+         d3:48:69:f1:9b:67:76:1b:41:8e:1d:69:d5:31:64:95:01:41:
+         73:c1:a9:29:53:6b:f3:29:ad:e0:96:52:8e:3e:8d:c1:8e:d8:
+         b5:0c:94:5f:a2:6c:3c:0f:3e:5b:10:af:21:00:74:d0:b7:30:
+         6c:44:fb:3d:09:46:8d:1d:e6:c2:e4:0a:5b:f4:eb:e1:71:c7:
+         d5:36:13:90:05:fe:65:16:61:24:b5:41:f2:10:bd:2c:c3:34:
+         69:15:25:d1:32:f2:b3:d7:da:23:1b:e9:5b:33:63:43:c8:dc:
+         68:f2:31:b5:93:0e:64:ea:9a:45:36:9f:96:44:38:1e:4e:d8:
+         45:ba:37:68:06:4d:da:d4:16:d3:3e:77:86:4e:8d:58:d6:06:
+         a8:60:11:4d:d9:81:f3:85:2b:ee:58:50:6e:ea:2b:f7:84:00:
+         9c:ec:a1:90:d4:94
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/bin/tests/system/doth/CA/private/CA.key b/bin/tests/system/doth/CA/private/CA.key
new file mode 100644 (file)
index 0000000..2d5419d
--- /dev/null
+++ b/bin/tests/system/doth/CA/private/CA.key
@@ -0,0 +1,39 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIG5AIBAAKCAYEAouoRHoAc6VCmxNTU6Ge7s+xDFGO0wXJJIsP+8nUyyjWvGCOC
+aQYLhb1kLA2NHRhSSKFcMh8jcd7Hlvy6CAec1j2dsWzryy3HgPrdjWaW3PfBO41D
+lUtdt8hA/p6pX2YwqvWbdK/3s8J0LY5xRZKNZnFOB/Sb4PGiIJ1NgMRO/M3IlPQm
+PO/faRRTU4SI26KCPKFW342826Zi88YwOd6w5mQU4fskk5TGtlNqE+Fj40ZbWVpy
+VXoEUS6RveRp020NX5CQG49SLtdF05AnnsATqmgNVCXptGuqW8uaHRONeGO3NBEy
+nJmibWBDUMjtCCcGVgyrVXuTkyAJJWpImnshUwgMNYebRwmC2iVv2LtsJS5eUTUH
+EWffnFl55XU2PkyNYgY35gA4y3SiWFJYV8+5FibU4ut0nb+lmHBF8WlqcU/kd3tp
+Gkf0exjqOIHZFqV9bIhpUbXhxx9v9+gkkGQ9nrXE1KRlvigxxUeIK5xHy9a7fVIL
+wo6WuCnLLJmbVkklAgMBAAECggGBAI5ZV3v/FUQIZK+4CBDKEwizeClotZgR9DWc
+bDgOj8KABe5hmKGL1qWVRuH3NUYm6j7sP1LMQnxM3LjhOuupOzE3xYIyWhW+eoQI
+r23OJiQNl5ohZNweblUXdTMGD5h8AipfUOY0m4tGbZ0gyXixBTxt5HCvG0UB3VgC
+GqZY4Wujo5ADhSXZsqxuRiDDvZGr/YBcuTu87Tg/ulam5ZyrKIcnC9gpSVxqsva9
+DAMy/cSoxUjd7ukhJISK3G3AF3fV4GSslQcJTlyJ2D3+LnqPuHJKYTI4hc46lN3x
+E2g24GdSCPYf6SoEPwACXtbavV8TXwQPJrHN+f+0/ePCI4jkYe5NoA3gwVgMb/WB
+wFchxzVh3V4e8tPGiG+ofKl81DSAW8VZCJLUIbTEce9oxafPT78WJxdC0wWbh5S8
+V/qN6sW/yWnK3oY9SilWhJGRwKOZ+8xtStaDeCzyCaOqEcWi8ZR0QfC33UozlhdC
+SrMKnOXmn/rUuXGrVR56IzIl0M7YAQKBwQDM3GJDdlFuHn6L0syKYdHDS8gXD9ke
+s+ochIP6jvkEPcayaEoZGl8s7RT3iztqXod7wLaZdotktxfDAZnJfeuOcVrCu+Bx
+HLytnBvV6czMfp3REGgQAJQeusSgtlBCTHHVOsDzIjdnkY3WBa7IiFYWO5wnYrGx
+r3ucnwnHaUVDMj1r4YI7mYIpCuYQl6eGyW7mhWewyhVwoQXKbifdrXxjvOigL0Cp
+tgsoU9pql3hpphOaYMX6hLOincTfaMxfnCECgcEAy5UXp3dA0OwK+4iDGKr+cUpk
+AtGTheiE+8zEVh2KYFLt921mW/QZiB1+xtnkknp3c7u07Ugk8jAEXzCkwMnN5ZCx
+LrJ72fC+cLIAbRm6/vMMP8iz83wyttao4qNMeoOBBfE9rEiP+lrugpv282V3ZHYa
+IUZWTeugJbckUHTbD3RZQExmQcRVG3m/TzonBfoZ8HoRj/n3d7V2T911cHUhi8Xn
+RQIi2m63VofOIep86LgartlKneMWnL0oOPq4RKyFAoHAZUzpDkD4nUJZAx025Yrf
+ZfoYNEcy7vq6XmWsuX5vZoiBs4DcezNOMvH9NzdTJxMdXbV61cIHxcK/7j7hZABv
+NZ2Z6sdqgaRbLGIQZaPaEJjfwxygyKDwnY1vY6UjZNVWSMFn3hJiYUVZZKakuiao
+ow/Q9KzZ/2ot7tG5zTCh/ktekfUOKBiNg2wPPc8wGPeMblMzZflXxrzpFyOHdRev
+dcZZJbSX/hO1yrhEPgculNd5xBHsdCegiF4JlwvEW9bhAoHAZQQiy5bx03j8bhkr
+q6bVQFPAUmG5iL16lxLg7TYVPnyH1bk0DDaQIKk6CeN+dmxML2IZgY/FvWK0GKOj
+bIH2J43nTRuFNvwtEvBQI9KbpfvlvRSSriOXaoATJvoObdAoylEM4BrVTk2mgapw
+HA/h8Thk+NPU6S8ctPouC7ogJIf/7Va7erC35j0//0kEqgOSsW9wnXdUItMo1LI3
+nsiQD7Hwcp5/utErKcWTM+MNfdA0dUQesT9ILhfyCGvn2TOdAoHBAKldZkDyRcu9
+r9uDF1bhUEnpV2k4hgvTuCvQ3rzyx3WrVT8ChEmePC8Ke5A54ffu/YdbpDLbdf2c
+j4n5CQhHbMIZs3P2hB3WqDCImApCfMbXaltfBbaT0j7uLJPMp+2+f/wWYpc3R+bn
+HVnaRI2PoXXmG9OjQSQdVZ5gNpkEuemAo3dJOSS6BMqQaSxUynGy7o/a/d4izBjd
+B58Fwq3sZI/Xv90Se9+b6ICST3YJ3p0vn8RKzmlCQjLg/xynpCByiw==
+-----END RSA PRIVATE KEY-----

diff --git a/bin/tests/system/doth/CA/serial b/bin/tests/system/doth/CA/serial
new file mode 100644 (file)
index 0000000..a20b068
--- /dev/null
+++ b/bin/tests/system/doth/CA/serial
@@ -0,0 +1 @@
+6BB3183CDEF5200A

diff --git a/bin/tests/system/doth/ns2/dhparam3072.pem b/bin/tests/system/doth/dhparam3072.pem
similarity index 100%
rename from bin/tests/system/doth/ns2/dhparam3072.pem
rename to bin/tests/system/doth/dhparam3072.pem

diff --git a/bin/tests/system/doth/example8.axfr.good b/bin/tests/system/doth/example8.axfr.good
new file mode 100644 (file)
index 0000000..b5d4cd6
--- /dev/null
+++ b/bin/tests/system/doth/example8.axfr.good
@@ -0,0 +1,2676 @@
+example8.              86400   IN      SOA     ns2.example8. hostmaster.example8. 1397051952 5 5 1814400 3600
+example8.              3600    IN      NS      ns2.example8.
+a01.example8.          3600    IN      A       0.0.0.0
+a02.example8.          3600    IN      A       255.255.255.255
+a601.example8.         3600    IN      A6      0 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
+a601.example8.         3600    IN      A6      64 ::ffff:ffff:ffff:ffff foo.
+a601.example8.         3600    IN      A6      127 ::1 foo.
+a601.example8.         3600    IN      A6      128  .
+aaaa01.example8.       3600    IN      AAAA    ::1
+aaaa02.example8.       3600    IN      AAAA    fd92:7065:b8e:ffff::5
+afsdb01.example8.      3600    IN      AFSDB   0 hostname.example8.
+afsdb02.example8.      3600    IN      AFSDB   65535 .
+amtrelay01.example8.   3600    IN      AMTRELAY 0 0 0
+amtrelay02.example8.   3600    IN      AMTRELAY 0 1 0
+amtrelay03.example8.   3600    IN      AMTRELAY 0 0 1 0.0.0.0
+amtrelay04.example8.   3600    IN      AMTRELAY 0 0 2 ::
+amtrelay05.example8.   3600    IN      AMTRELAY 0 0 3 example.net.
+amtrelay06.example8.   3600    IN      AMTRELAY \# 2 0004
+apl01.example8.                3600    IN      APL     !1:10.0.0.1/32 1:10.0.0.0/24
+apl02.example8.                3600    IN      APL     
+atma01.example8.       3600    IN      ATMA    +61200000000
+atma02.example8.       3600    IN      ATMA    +61200000000
+atma03.example8.       3600    IN      ATMA    1234567890abcdef
+atma04.example8.       3600    IN      ATMA    fedcba0987654321
+avc.example8.          3600    IN      AVC     "foo:bar"
+biganswer.example8.    3600    IN      A       10.10.1.1
+biganswer.example8.    3600    IN      A       10.10.1.2
+biganswer.example8.    3600    IN      A       10.10.1.3
+biganswer.example8.    3600    IN      A       10.10.1.4
+biganswer.example8.    3600    IN      A       10.10.1.5
+biganswer.example8.    3600    IN      A       10.10.1.6
+biganswer.example8.    3600    IN      A       10.10.1.7
+biganswer.example8.    3600    IN      A       10.10.1.8
+biganswer.example8.    3600    IN      A       10.10.1.9
+biganswer.example8.    3600    IN      A       10.10.1.10
+biganswer.example8.    3600    IN      A       10.10.1.11
+biganswer.example8.    3600    IN      A       10.10.1.12
+biganswer.example8.    3600    IN      A       10.10.1.13
+biganswer.example8.    3600    IN      A       10.10.1.14
+biganswer.example8.    3600    IN      A       10.10.1.15
+biganswer.example8.    3600    IN      A       10.10.1.16
+biganswer.example8.    3600    IN      A       10.10.1.17
+biganswer.example8.    3600    IN      A       10.10.1.18
+biganswer.example8.    3600    IN      A       10.10.1.19
+biganswer.example8.    3600    IN      A       10.10.1.20
+biganswer.example8.    3600    IN      A       10.10.1.21
+biganswer.example8.    3600    IN      A       10.10.1.22
+biganswer.example8.    3600    IN      A       10.10.1.23
+biganswer.example8.    3600    IN      A       10.10.1.24
+biganswer.example8.    3600    IN      A       10.10.1.25
+biganswer.example8.    3600    IN      A       10.10.1.26
+biganswer.example8.    3600    IN      A       10.10.1.27
+biganswer.example8.    3600    IN      A       10.10.1.28
+biganswer.example8.    3600    IN      A       10.10.1.29
+biganswer.example8.    3600    IN      A       10.10.1.30
+biganswer.example8.    3600    IN      A       10.10.1.31
+biganswer.example8.    3600    IN      A       10.10.1.32
+biganswer.example8.    3600    IN      A       10.10.1.33
+biganswer.example8.    3600    IN      A       10.10.1.34
+biganswer.example8.    3600    IN      A       10.10.1.35
+biganswer.example8.    3600    IN      A       10.10.1.36
+biganswer.example8.    3600    IN      A       10.10.1.37
+biganswer.example8.    3600    IN      A       10.10.1.38
+biganswer.example8.    3600    IN      A       10.10.1.39
+biganswer.example8.    3600    IN      A       10.10.1.40
+biganswer.example8.    3600    IN      A       10.10.1.41
+biganswer.example8.    3600    IN      A       10.10.1.42
+biganswer.example8.    3600    IN      A       10.10.1.43
+biganswer.example8.    3600    IN      A       10.10.1.44
+biganswer.example8.    3600    IN      A       10.10.1.45
+biganswer.example8.    3600    IN      A       10.10.1.46
+biganswer.example8.    3600    IN      A       10.10.1.47
+biganswer.example8.    3600    IN      A       10.10.1.48
+biganswer.example8.    3600    IN      A       10.10.1.49
+biganswer.example8.    3600    IN      A       10.10.1.50
+biganswer.example8.    3600    IN      A       10.10.2.1
+biganswer.example8.    3600    IN      A       10.10.2.2
+biganswer.example8.    3600    IN      A       10.10.2.3
+biganswer.example8.    3600    IN      A       10.10.2.4
+biganswer.example8.    3600    IN      A       10.10.2.5
+biganswer.example8.    3600    IN      A       10.10.2.6
+biganswer.example8.    3600    IN      A       10.10.2.7
+biganswer.example8.    3600    IN      A       10.10.2.8
+biganswer.example8.    3600    IN      A       10.10.2.9
+biganswer.example8.    3600    IN      A       10.10.2.10
+biganswer.example8.    3600    IN      A       10.10.2.11
+biganswer.example8.    3600    IN      A       10.10.2.12
+biganswer.example8.    3600    IN      A       10.10.2.13
+biganswer.example8.    3600    IN      A       10.10.2.14
+biganswer.example8.    3600    IN      A       10.10.2.15
+biganswer.example8.    3600    IN      A       10.10.2.16
+biganswer.example8.    3600    IN      A       10.10.2.17
+biganswer.example8.    3600    IN      A       10.10.2.18
+biganswer.example8.    3600    IN      A       10.10.2.19
+biganswer.example8.    3600    IN      A       10.10.2.20
+biganswer.example8.    3600    IN      A       10.10.2.21
+biganswer.example8.    3600    IN      A       10.10.2.22
+biganswer.example8.    3600    IN      A       10.10.2.23
+biganswer.example8.    3600    IN      A       10.10.2.24
+biganswer.example8.    3600    IN      A       10.10.2.25
+biganswer.example8.    3600    IN      A       10.10.2.26
+biganswer.example8.    3600    IN      A       10.10.2.27
+biganswer.example8.    3600    IN      A       10.10.2.28
+biganswer.example8.    3600    IN      A       10.10.2.29
+biganswer.example8.    3600    IN      A       10.10.2.30
+biganswer.example8.    3600    IN      A       10.10.2.31
+biganswer.example8.    3600    IN      A       10.10.2.32
+biganswer.example8.    3600    IN      A       10.10.2.33
+biganswer.example8.    3600    IN      A       10.10.2.34
+biganswer.example8.    3600    IN      A       10.10.2.35
+biganswer.example8.    3600    IN      A       10.10.2.36
+biganswer.example8.    3600    IN      A       10.10.2.37
+biganswer.example8.    3600    IN      A       10.10.2.38
+biganswer.example8.    3600    IN      A       10.10.2.39
+biganswer.example8.    3600    IN      A       10.10.2.40
+biganswer.example8.    3600    IN      A       10.10.2.41
+biganswer.example8.    3600    IN      A       10.10.2.42
+biganswer.example8.    3600    IN      A       10.10.2.43
+biganswer.example8.    3600    IN      A       10.10.2.44
+biganswer.example8.    3600    IN      A       10.10.2.45
+biganswer.example8.    3600    IN      A       10.10.2.46
+biganswer.example8.    3600    IN      A       10.10.2.47
+biganswer.example8.    3600    IN      A       10.10.2.48
+biganswer.example8.    3600    IN      A       10.10.2.49
+biganswer.example8.    3600    IN      A       10.10.2.50
+biganswer.example8.    3600    IN      A       10.10.3.1
+biganswer.example8.    3600    IN      A       10.10.3.2
+biganswer.example8.    3600    IN      A       10.10.3.3
+biganswer.example8.    3600    IN      A       10.10.3.4
+biganswer.example8.    3600    IN      A       10.10.3.5
+biganswer.example8.    3600    IN      A       10.10.3.6
+biganswer.example8.    3600    IN      A       10.10.3.7
+biganswer.example8.    3600    IN      A       10.10.3.8
+biganswer.example8.    3600    IN      A       10.10.3.9
+biganswer.example8.    3600    IN      A       10.10.3.10
+biganswer.example8.    3600    IN      A       10.10.3.11
+biganswer.example8.    3600    IN      A       10.10.3.12
+biganswer.example8.    3600    IN      A       10.10.3.13
+biganswer.example8.    3600    IN      A       10.10.3.14
+biganswer.example8.    3600    IN      A       10.10.3.15
+biganswer.example8.    3600    IN      A       10.10.3.16
+biganswer.example8.    3600    IN      A       10.10.3.17
+biganswer.example8.    3600    IN      A       10.10.3.18
+biganswer.example8.    3600    IN      A       10.10.3.19
+biganswer.example8.    3600    IN      A       10.10.3.20
+biganswer.example8.    3600    IN      A       10.10.3.21
+biganswer.example8.    3600    IN      A       10.10.3.22
+biganswer.example8.    3600    IN      A       10.10.3.23
+biganswer.example8.    3600    IN      A       10.10.3.24
+biganswer.example8.    3600    IN      A       10.10.3.25
+biganswer.example8.    3600    IN      A       10.10.3.26
+biganswer.example8.    3600    IN      A       10.10.3.27
+biganswer.example8.    3600    IN      A       10.10.3.28
+biganswer.example8.    3600    IN      A       10.10.3.29
+biganswer.example8.    3600    IN      A       10.10.3.30
+biganswer.example8.    3600    IN      A       10.10.3.31
+biganswer.example8.    3600    IN      A       10.10.3.32
+biganswer.example8.    3600    IN      A       10.10.3.33
+biganswer.example8.    3600    IN      A       10.10.3.34
+biganswer.example8.    3600    IN      A       10.10.3.35
+biganswer.example8.    3600    IN      A       10.10.3.36
+biganswer.example8.    3600    IN      A       10.10.3.37
+biganswer.example8.    3600    IN      A       10.10.3.38
+biganswer.example8.    3600    IN      A       10.10.3.39
+biganswer.example8.    3600    IN      A       10.10.3.40
+biganswer.example8.    3600    IN      A       10.10.3.41
+biganswer.example8.    3600    IN      A       10.10.3.42
+biganswer.example8.    3600    IN      A       10.10.3.43
+biganswer.example8.    3600    IN      A       10.10.3.44
+biganswer.example8.    3600    IN      A       10.10.3.45
+biganswer.example8.    3600    IN      A       10.10.3.46
+biganswer.example8.    3600    IN      A       10.10.3.47
+biganswer.example8.    3600    IN      A       10.10.3.48
+biganswer.example8.    3600    IN      A       10.10.3.49
+biganswer.example8.    3600    IN      A       10.10.3.50
+biganswer.example8.    3600    IN      A       10.10.4.1
+biganswer.example8.    3600    IN      A       10.10.4.2
+biganswer.example8.    3600    IN      A       10.10.4.3
+biganswer.example8.    3600    IN      A       10.10.4.4
+biganswer.example8.    3600    IN      A       10.10.4.5
+biganswer.example8.    3600    IN      A       10.10.4.6
+biganswer.example8.    3600    IN      A       10.10.4.7
+biganswer.example8.    3600    IN      A       10.10.4.8
+biganswer.example8.    3600    IN      A       10.10.4.9
+biganswer.example8.    3600    IN      A       10.10.4.10
+biganswer.example8.    3600    IN      A       10.10.4.11
+biganswer.example8.    3600    IN      A       10.10.4.12
+biganswer.example8.    3600    IN      A       10.10.4.13
+biganswer.example8.    3600    IN      A       10.10.4.14
+biganswer.example8.    3600    IN      A       10.10.4.15
+biganswer.example8.    3600    IN      A       10.10.4.16
+biganswer.example8.    3600    IN      A       10.10.4.17
+biganswer.example8.    3600    IN      A       10.10.4.18
+biganswer.example8.    3600    IN      A       10.10.4.19
+biganswer.example8.    3600    IN      A       10.10.4.20
+biganswer.example8.    3600    IN      A       10.10.4.21
+biganswer.example8.    3600    IN      A       10.10.4.22
+biganswer.example8.    3600    IN      A       10.10.4.23
+biganswer.example8.    3600    IN      A       10.10.4.24
+biganswer.example8.    3600    IN      A       10.10.4.25
+biganswer.example8.    3600    IN      A       10.10.4.26
+biganswer.example8.    3600    IN      A       10.10.4.27
+biganswer.example8.    3600    IN      A       10.10.4.28
+biganswer.example8.    3600    IN      A       10.10.4.29
+biganswer.example8.    3600    IN      A       10.10.4.30
+biganswer.example8.    3600    IN      A       10.10.4.31
+biganswer.example8.    3600    IN      A       10.10.4.32
+biganswer.example8.    3600    IN      A       10.10.4.33
+biganswer.example8.    3600    IN      A       10.10.4.34
+biganswer.example8.    3600    IN      A       10.10.4.35
+biganswer.example8.    3600    IN      A       10.10.4.36
+biganswer.example8.    3600    IN      A       10.10.4.37
+biganswer.example8.    3600    IN      A       10.10.4.38
+biganswer.example8.    3600    IN      A       10.10.4.39
+biganswer.example8.    3600    IN      A       10.10.4.40
+biganswer.example8.    3600    IN      A       10.10.4.41
+biganswer.example8.    3600    IN      A       10.10.4.42
+biganswer.example8.    3600    IN      A       10.10.4.43
+biganswer.example8.    3600    IN      A       10.10.4.44
+biganswer.example8.    3600    IN      A       10.10.4.45
+biganswer.example8.    3600    IN      A       10.10.4.46
+biganswer.example8.    3600    IN      A       10.10.4.47
+biganswer.example8.    3600    IN      A       10.10.4.48
+biganswer.example8.    3600    IN      A       10.10.4.49
+biganswer.example8.    3600    IN      A       10.10.4.50
+biganswer.example8.    3600    IN      A       10.10.5.1
+biganswer.example8.    3600    IN      A       10.10.5.2
+biganswer.example8.    3600    IN      A       10.10.5.3
+biganswer.example8.    3600    IN      A       10.10.5.4
+biganswer.example8.    3600    IN      A       10.10.5.5
+biganswer.example8.    3600    IN      A       10.10.5.6
+biganswer.example8.    3600    IN      A       10.10.5.7
+biganswer.example8.    3600    IN      A       10.10.5.8
+biganswer.example8.    3600    IN      A       10.10.5.9
+biganswer.example8.    3600    IN      A       10.10.5.10
+biganswer.example8.    3600    IN      A       10.10.5.11
+biganswer.example8.    3600    IN      A       10.10.5.12
+biganswer.example8.    3600    IN      A       10.10.5.13
+biganswer.example8.    3600    IN      A       10.10.5.14
+biganswer.example8.    3600    IN      A       10.10.5.15
+biganswer.example8.    3600    IN      A       10.10.5.16
+biganswer.example8.    3600    IN      A       10.10.5.17
+biganswer.example8.    3600    IN      A       10.10.5.18
+biganswer.example8.    3600    IN      A       10.10.5.19
+biganswer.example8.    3600    IN      A       10.10.5.20
+biganswer.example8.    3600    IN      A       10.10.5.21
+biganswer.example8.    3600    IN      A       10.10.5.22
+biganswer.example8.    3600    IN      A       10.10.5.23
+biganswer.example8.    3600    IN      A       10.10.5.24
+biganswer.example8.    3600    IN      A       10.10.5.25
+biganswer.example8.    3600    IN      A       10.10.5.26
+biganswer.example8.    3600    IN      A       10.10.5.27
+biganswer.example8.    3600    IN      A       10.10.5.28
+biganswer.example8.    3600    IN      A       10.10.5.29
+biganswer.example8.    3600    IN      A       10.10.5.30
+biganswer.example8.    3600    IN      A       10.10.5.31
+biganswer.example8.    3600    IN      A       10.10.5.32
+biganswer.example8.    3600    IN      A       10.10.5.33
+biganswer.example8.    3600    IN      A       10.10.5.34
+biganswer.example8.    3600    IN      A       10.10.5.35
+biganswer.example8.    3600    IN      A       10.10.5.36
+biganswer.example8.    3600    IN      A       10.10.5.37
+biganswer.example8.    3600    IN      A       10.10.5.38
+biganswer.example8.    3600    IN      A       10.10.5.39
+biganswer.example8.    3600    IN      A       10.10.5.40
+biganswer.example8.    3600    IN      A       10.10.5.41
+biganswer.example8.    3600    IN      A       10.10.5.42
+biganswer.example8.    3600    IN      A       10.10.5.43
+biganswer.example8.    3600    IN      A       10.10.5.44
+biganswer.example8.    3600    IN      A       10.10.5.45
+biganswer.example8.    3600    IN      A       10.10.5.46
+biganswer.example8.    3600    IN      A       10.10.5.47
+biganswer.example8.    3600    IN      A       10.10.5.48
+biganswer.example8.    3600    IN      A       10.10.5.49
+biganswer.example8.    3600    IN      A       10.10.5.50
+biganswer.example8.    3600    IN      A       10.10.6.1
+biganswer.example8.    3600    IN      A       10.10.6.2
+biganswer.example8.    3600    IN      A       10.10.6.3
+biganswer.example8.    3600    IN      A       10.10.6.4
+biganswer.example8.    3600    IN      A       10.10.6.5
+biganswer.example8.    3600    IN      A       10.10.6.6
+biganswer.example8.    3600    IN      A       10.10.6.7
+biganswer.example8.    3600    IN      A       10.10.6.8
+biganswer.example8.    3600    IN      A       10.10.6.9
+biganswer.example8.    3600    IN      A       10.10.6.10
+biganswer.example8.    3600    IN      A       10.10.6.11
+biganswer.example8.    3600    IN      A       10.10.6.12
+biganswer.example8.    3600    IN      A       10.10.6.13
+biganswer.example8.    3600    IN      A       10.10.6.14
+biganswer.example8.    3600    IN      A       10.10.6.15
+biganswer.example8.    3600    IN      A       10.10.6.16
+biganswer.example8.    3600    IN      A       10.10.6.17
+biganswer.example8.    3600    IN      A       10.10.6.18
+biganswer.example8.    3600    IN      A       10.10.6.19
+biganswer.example8.    3600    IN      A       10.10.6.20
+biganswer.example8.    3600    IN      A       10.10.6.21
+biganswer.example8.    3600    IN      A       10.10.6.22
+biganswer.example8.    3600    IN      A       10.10.6.23
+biganswer.example8.    3600    IN      A       10.10.6.24
+biganswer.example8.    3600    IN      A       10.10.6.25
+biganswer.example8.    3600    IN      A       10.10.6.26
+biganswer.example8.    3600    IN      A       10.10.6.27
+biganswer.example8.    3600    IN      A       10.10.6.28
+biganswer.example8.    3600    IN      A       10.10.6.29
+biganswer.example8.    3600    IN      A       10.10.6.30
+biganswer.example8.    3600    IN      A       10.10.6.31
+biganswer.example8.    3600    IN      A       10.10.6.32
+biganswer.example8.    3600    IN      A       10.10.6.33
+biganswer.example8.    3600    IN      A       10.10.6.34
+biganswer.example8.    3600    IN      A       10.10.6.35
+biganswer.example8.    3600    IN      A       10.10.6.36
+biganswer.example8.    3600    IN      A       10.10.6.37
+biganswer.example8.    3600    IN      A       10.10.6.38
+biganswer.example8.    3600    IN      A       10.10.6.39
+biganswer.example8.    3600    IN      A       10.10.6.40
+biganswer.example8.    3600    IN      A       10.10.6.41
+biganswer.example8.    3600    IN      A       10.10.6.42
+biganswer.example8.    3600    IN      A       10.10.6.43
+biganswer.example8.    3600    IN      A       10.10.6.44
+biganswer.example8.    3600    IN      A       10.10.6.45
+biganswer.example8.    3600    IN      A       10.10.6.46
+biganswer.example8.    3600    IN      A       10.10.6.47
+biganswer.example8.    3600    IN      A       10.10.6.48
+biganswer.example8.    3600    IN      A       10.10.6.49
+biganswer.example8.    3600    IN      A       10.10.6.50
+biganswer.example8.    3600    IN      A       10.10.7.1
+biganswer.example8.    3600    IN      A       10.10.7.2
+biganswer.example8.    3600    IN      A       10.10.7.3
+biganswer.example8.    3600    IN      A       10.10.7.4
+biganswer.example8.    3600    IN      A       10.10.7.5
+biganswer.example8.    3600    IN      A       10.10.7.6
+biganswer.example8.    3600    IN      A       10.10.7.7
+biganswer.example8.    3600    IN      A       10.10.7.8
+biganswer.example8.    3600    IN      A       10.10.7.9
+biganswer.example8.    3600    IN      A       10.10.7.10
+biganswer.example8.    3600    IN      A       10.10.7.11
+biganswer.example8.    3600    IN      A       10.10.7.12
+biganswer.example8.    3600    IN      A       10.10.7.13
+biganswer.example8.    3600    IN      A       10.10.7.14
+biganswer.example8.    3600    IN      A       10.10.7.15
+biganswer.example8.    3600    IN      A       10.10.7.16
+biganswer.example8.    3600    IN      A       10.10.7.17
+biganswer.example8.    3600    IN      A       10.10.7.18
+biganswer.example8.    3600    IN      A       10.10.7.19
+biganswer.example8.    3600    IN      A       10.10.7.20
+biganswer.example8.    3600    IN      A       10.10.7.21
+biganswer.example8.    3600    IN      A       10.10.7.22
+biganswer.example8.    3600    IN      A       10.10.7.23
+biganswer.example8.    3600    IN      A       10.10.7.24
+biganswer.example8.    3600    IN      A       10.10.7.25
+biganswer.example8.    3600    IN      A       10.10.7.26
+biganswer.example8.    3600    IN      A       10.10.7.27
+biganswer.example8.    3600    IN      A       10.10.7.28
+biganswer.example8.    3600    IN      A       10.10.7.29
+biganswer.example8.    3600    IN      A       10.10.7.30
+biganswer.example8.    3600    IN      A       10.10.7.31
+biganswer.example8.    3600    IN      A       10.10.7.32
+biganswer.example8.    3600    IN      A       10.10.7.33
+biganswer.example8.    3600    IN      A       10.10.7.34
+biganswer.example8.    3600    IN      A       10.10.7.35
+biganswer.example8.    3600    IN      A       10.10.7.36
+biganswer.example8.    3600    IN      A       10.10.7.37
+biganswer.example8.    3600    IN      A       10.10.7.38
+biganswer.example8.    3600    IN      A       10.10.7.39
+biganswer.example8.    3600    IN      A       10.10.7.40
+biganswer.example8.    3600    IN      A       10.10.7.41
+biganswer.example8.    3600    IN      A       10.10.7.42
+biganswer.example8.    3600    IN      A       10.10.7.43
+biganswer.example8.    3600    IN      A       10.10.7.44
+biganswer.example8.    3600    IN      A       10.10.7.45
+biganswer.example8.    3600    IN      A       10.10.7.46
+biganswer.example8.    3600    IN      A       10.10.7.47
+biganswer.example8.    3600    IN      A       10.10.7.48
+biganswer.example8.    3600    IN      A       10.10.7.49
+biganswer.example8.    3600    IN      A       10.10.7.50
+biganswer.example8.    3600    IN      A       10.10.8.1
+biganswer.example8.    3600    IN      A       10.10.8.2
+biganswer.example8.    3600    IN      A       10.10.8.3
+biganswer.example8.    3600    IN      A       10.10.8.4
+biganswer.example8.    3600    IN      A       10.10.8.5
+biganswer.example8.    3600    IN      A       10.10.8.6
+biganswer.example8.    3600    IN      A       10.10.8.7
+biganswer.example8.    3600    IN      A       10.10.8.8
+biganswer.example8.    3600    IN      A       10.10.8.9
+biganswer.example8.    3600    IN      A       10.10.8.10
+biganswer.example8.    3600    IN      A       10.10.8.11
+biganswer.example8.    3600    IN      A       10.10.8.12
+biganswer.example8.    3600    IN      A       10.10.8.13
+biganswer.example8.    3600    IN      A       10.10.8.14
+biganswer.example8.    3600    IN      A       10.10.8.15
+biganswer.example8.    3600    IN      A       10.10.8.16
+biganswer.example8.    3600    IN      A       10.10.8.17
+biganswer.example8.    3600    IN      A       10.10.8.18
+biganswer.example8.    3600    IN      A       10.10.8.19
+biganswer.example8.    3600    IN      A       10.10.8.20
+biganswer.example8.    3600    IN      A       10.10.8.21
+biganswer.example8.    3600    IN      A       10.10.8.22
+biganswer.example8.    3600    IN      A       10.10.8.23
+biganswer.example8.    3600    IN      A       10.10.8.24
+biganswer.example8.    3600    IN      A       10.10.8.25
+biganswer.example8.    3600    IN      A       10.10.8.26
+biganswer.example8.    3600    IN      A       10.10.8.27
+biganswer.example8.    3600    IN      A       10.10.8.28
+biganswer.example8.    3600    IN      A       10.10.8.29
+biganswer.example8.    3600    IN      A       10.10.8.30
+biganswer.example8.    3600    IN      A       10.10.8.31
+biganswer.example8.    3600    IN      A       10.10.8.32
+biganswer.example8.    3600    IN      A       10.10.8.33
+biganswer.example8.    3600    IN      A       10.10.8.34
+biganswer.example8.    3600    IN      A       10.10.8.35
+biganswer.example8.    3600    IN      A       10.10.8.36
+biganswer.example8.    3600    IN      A       10.10.8.37
+biganswer.example8.    3600    IN      A       10.10.8.38
+biganswer.example8.    3600    IN      A       10.10.8.39
+biganswer.example8.    3600    IN      A       10.10.8.40
+biganswer.example8.    3600    IN      A       10.10.8.41
+biganswer.example8.    3600    IN      A       10.10.8.42
+biganswer.example8.    3600    IN      A       10.10.8.43
+biganswer.example8.    3600    IN      A       10.10.8.44
+biganswer.example8.    3600    IN      A       10.10.8.45
+biganswer.example8.    3600    IN      A       10.10.8.46
+biganswer.example8.    3600    IN      A       10.10.8.47
+biganswer.example8.    3600    IN      A       10.10.8.48
+biganswer.example8.    3600    IN      A       10.10.8.49
+biganswer.example8.    3600    IN      A       10.10.8.50
+biganswer.example8.    3600    IN      A       10.10.9.1
+biganswer.example8.    3600    IN      A       10.10.9.2
+biganswer.example8.    3600    IN      A       10.10.9.3
+biganswer.example8.    3600    IN      A       10.10.9.4
+biganswer.example8.    3600    IN      A       10.10.9.5
+biganswer.example8.    3600    IN      A       10.10.9.6
+biganswer.example8.    3600    IN      A       10.10.9.7
+biganswer.example8.    3600    IN      A       10.10.9.8
+biganswer.example8.    3600    IN      A       10.10.9.9
+biganswer.example8.    3600    IN      A       10.10.9.10
+biganswer.example8.    3600    IN      A       10.10.9.11
+biganswer.example8.    3600    IN      A       10.10.9.12
+biganswer.example8.    3600    IN      A       10.10.9.13
+biganswer.example8.    3600    IN      A       10.10.9.14
+biganswer.example8.    3600    IN      A       10.10.9.15
+biganswer.example8.    3600    IN      A       10.10.9.16
+biganswer.example8.    3600    IN      A       10.10.9.17
+biganswer.example8.    3600    IN      A       10.10.9.18
+biganswer.example8.    3600    IN      A       10.10.9.19
+biganswer.example8.    3600    IN      A       10.10.9.20
+biganswer.example8.    3600    IN      A       10.10.9.21
+biganswer.example8.    3600    IN      A       10.10.9.22
+biganswer.example8.    3600    IN      A       10.10.9.23
+biganswer.example8.    3600    IN      A       10.10.9.24
+biganswer.example8.    3600    IN      A       10.10.9.25
+biganswer.example8.    3600    IN      A       10.10.9.26
+biganswer.example8.    3600    IN      A       10.10.9.27
+biganswer.example8.    3600    IN      A       10.10.9.28
+biganswer.example8.    3600    IN      A       10.10.9.29
+biganswer.example8.    3600    IN      A       10.10.9.30
+biganswer.example8.    3600    IN      A       10.10.9.31
+biganswer.example8.    3600    IN      A       10.10.9.32
+biganswer.example8.    3600    IN      A       10.10.9.33
+biganswer.example8.    3600    IN      A       10.10.9.34
+biganswer.example8.    3600    IN      A       10.10.9.35
+biganswer.example8.    3600    IN      A       10.10.9.36
+biganswer.example8.    3600    IN      A       10.10.9.37
+biganswer.example8.    3600    IN      A       10.10.9.38
+biganswer.example8.    3600    IN      A       10.10.9.39
+biganswer.example8.    3600    IN      A       10.10.9.40
+biganswer.example8.    3600    IN      A       10.10.9.41
+biganswer.example8.    3600    IN      A       10.10.9.42
+biganswer.example8.    3600    IN      A       10.10.9.43
+biganswer.example8.    3600    IN      A       10.10.9.44
+biganswer.example8.    3600    IN      A       10.10.9.45
+biganswer.example8.    3600    IN      A       10.10.9.46
+biganswer.example8.    3600    IN      A       10.10.9.47
+biganswer.example8.    3600    IN      A       10.10.9.48
+biganswer.example8.    3600    IN      A       10.10.9.49
+biganswer.example8.    3600    IN      A       10.10.9.50
+biganswer.example8.    3600    IN      A       10.10.10.1
+biganswer.example8.    3600    IN      A       10.10.10.2
+biganswer.example8.    3600    IN      A       10.10.10.3
+biganswer.example8.    3600    IN      A       10.10.10.4
+biganswer.example8.    3600    IN      A       10.10.10.5
+biganswer.example8.    3600    IN      A       10.10.10.6
+biganswer.example8.    3600    IN      A       10.10.10.7
+biganswer.example8.    3600    IN      A       10.10.10.8
+biganswer.example8.    3600    IN      A       10.10.10.9
+biganswer.example8.    3600    IN      A       10.10.10.10
+biganswer.example8.    3600    IN      A       10.10.10.11
+biganswer.example8.    3600    IN      A       10.10.10.12
+biganswer.example8.    3600    IN      A       10.10.10.13
+biganswer.example8.    3600    IN      A       10.10.10.14
+biganswer.example8.    3600    IN      A       10.10.10.15
+biganswer.example8.    3600    IN      A       10.10.10.16
+biganswer.example8.    3600    IN      A       10.10.10.17
+biganswer.example8.    3600    IN      A       10.10.10.18
+biganswer.example8.    3600    IN      A       10.10.10.19
+biganswer.example8.    3600    IN      A       10.10.10.20
+biganswer.example8.    3600    IN      A       10.10.10.21
+biganswer.example8.    3600    IN      A       10.10.10.22
+biganswer.example8.    3600    IN      A       10.10.10.23
+biganswer.example8.    3600    IN      A       10.10.10.24
+biganswer.example8.    3600    IN      A       10.10.10.25
+biganswer.example8.    3600    IN      A       10.10.10.26
+biganswer.example8.    3600    IN      A       10.10.10.27
+biganswer.example8.    3600    IN      A       10.10.10.28
+biganswer.example8.    3600    IN      A       10.10.10.29
+biganswer.example8.    3600    IN      A       10.10.10.30
+biganswer.example8.    3600    IN      A       10.10.10.31
+biganswer.example8.    3600    IN      A       10.10.10.32
+biganswer.example8.    3600    IN      A       10.10.10.33
+biganswer.example8.    3600    IN      A       10.10.10.34
+biganswer.example8.    3600    IN      A       10.10.10.35
+biganswer.example8.    3600    IN      A       10.10.10.36
+biganswer.example8.    3600    IN      A       10.10.10.37
+biganswer.example8.    3600    IN      A       10.10.10.38
+biganswer.example8.    3600    IN      A       10.10.10.39
+biganswer.example8.    3600    IN      A       10.10.10.40
+biganswer.example8.    3600    IN      A       10.10.10.41
+biganswer.example8.    3600    IN      A       10.10.10.42
+biganswer.example8.    3600    IN      A       10.10.10.43
+biganswer.example8.    3600    IN      A       10.10.10.44
+biganswer.example8.    3600    IN      A       10.10.10.45
+biganswer.example8.    3600    IN      A       10.10.10.46
+biganswer.example8.    3600    IN      A       10.10.10.47
+biganswer.example8.    3600    IN      A       10.10.10.48
+biganswer.example8.    3600    IN      A       10.10.10.49
+biganswer.example8.    3600    IN      A       10.10.10.50
+biganswer.example8.    3600    IN      A       10.10.11.1
+biganswer.example8.    3600    IN      A       10.10.11.2
+biganswer.example8.    3600    IN      A       10.10.11.3
+biganswer.example8.    3600    IN      A       10.10.11.4
+biganswer.example8.    3600    IN      A       10.10.11.5
+biganswer.example8.    3600    IN      A       10.10.11.6
+biganswer.example8.    3600    IN      A       10.10.11.7
+biganswer.example8.    3600    IN      A       10.10.11.8
+biganswer.example8.    3600    IN      A       10.10.11.9
+biganswer.example8.    3600    IN      A       10.10.11.10
+biganswer.example8.    3600    IN      A       10.10.11.11
+biganswer.example8.    3600    IN      A       10.10.11.12
+biganswer.example8.    3600    IN      A       10.10.11.13
+biganswer.example8.    3600    IN      A       10.10.11.14
+biganswer.example8.    3600    IN      A       10.10.11.15
+biganswer.example8.    3600    IN      A       10.10.11.16
+biganswer.example8.    3600    IN      A       10.10.11.17
+biganswer.example8.    3600    IN      A       10.10.11.18
+biganswer.example8.    3600    IN      A       10.10.11.19
+biganswer.example8.    3600    IN      A       10.10.11.20
+biganswer.example8.    3600    IN      A       10.10.11.21
+biganswer.example8.    3600    IN      A       10.10.11.22
+biganswer.example8.    3600    IN      A       10.10.11.23
+biganswer.example8.    3600    IN      A       10.10.11.24
+biganswer.example8.    3600    IN      A       10.10.11.25
+biganswer.example8.    3600    IN      A       10.10.11.26
+biganswer.example8.    3600    IN      A       10.10.11.27
+biganswer.example8.    3600    IN      A       10.10.11.28
+biganswer.example8.    3600    IN      A       10.10.11.29
+biganswer.example8.    3600    IN      A       10.10.11.30
+biganswer.example8.    3600    IN      A       10.10.11.31
+biganswer.example8.    3600    IN      A       10.10.11.32
+biganswer.example8.    3600    IN      A       10.10.11.33
+biganswer.example8.    3600    IN      A       10.10.11.34
+biganswer.example8.    3600    IN      A       10.10.11.35
+biganswer.example8.    3600    IN      A       10.10.11.36
+biganswer.example8.    3600    IN      A       10.10.11.37
+biganswer.example8.    3600    IN      A       10.10.11.38
+biganswer.example8.    3600    IN      A       10.10.11.39
+biganswer.example8.    3600    IN      A       10.10.11.40
+biganswer.example8.    3600    IN      A       10.10.11.41
+biganswer.example8.    3600    IN      A       10.10.11.42
+biganswer.example8.    3600    IN      A       10.10.11.43
+biganswer.example8.    3600    IN      A       10.10.11.44
+biganswer.example8.    3600    IN      A       10.10.11.45
+biganswer.example8.    3600    IN      A       10.10.11.46
+biganswer.example8.    3600    IN      A       10.10.11.47
+biganswer.example8.    3600    IN      A       10.10.11.48
+biganswer.example8.    3600    IN      A       10.10.11.49
+biganswer.example8.    3600    IN      A       10.10.11.50
+biganswer.example8.    3600    IN      A       10.10.12.1
+biganswer.example8.    3600    IN      A       10.10.12.2
+biganswer.example8.    3600    IN      A       10.10.12.3
+biganswer.example8.    3600    IN      A       10.10.12.4
+biganswer.example8.    3600    IN      A       10.10.12.5
+biganswer.example8.    3600    IN      A       10.10.12.6
+biganswer.example8.    3600    IN      A       10.10.12.7
+biganswer.example8.    3600    IN      A       10.10.12.8
+biganswer.example8.    3600    IN      A       10.10.12.9
+biganswer.example8.    3600    IN      A       10.10.12.10
+biganswer.example8.    3600    IN      A       10.10.12.11
+biganswer.example8.    3600    IN      A       10.10.12.12
+biganswer.example8.    3600    IN      A       10.10.12.13
+biganswer.example8.    3600    IN      A       10.10.12.14
+biganswer.example8.    3600    IN      A       10.10.12.15
+biganswer.example8.    3600    IN      A       10.10.12.16
+biganswer.example8.    3600    IN      A       10.10.12.17
+biganswer.example8.    3600    IN      A       10.10.12.18
+biganswer.example8.    3600    IN      A       10.10.12.19
+biganswer.example8.    3600    IN      A       10.10.12.20
+biganswer.example8.    3600    IN      A       10.10.12.21
+biganswer.example8.    3600    IN      A       10.10.12.22
+biganswer.example8.    3600    IN      A       10.10.12.23
+biganswer.example8.    3600    IN      A       10.10.12.24
+biganswer.example8.    3600    IN      A       10.10.12.25
+biganswer.example8.    3600    IN      A       10.10.12.26
+biganswer.example8.    3600    IN      A       10.10.12.27
+biganswer.example8.    3600    IN      A       10.10.12.28
+biganswer.example8.    3600    IN      A       10.10.12.29
+biganswer.example8.    3600    IN      A       10.10.12.30
+biganswer.example8.    3600    IN      A       10.10.12.31
+biganswer.example8.    3600    IN      A       10.10.12.32
+biganswer.example8.    3600    IN      A       10.10.12.33
+biganswer.example8.    3600    IN      A       10.10.12.34
+biganswer.example8.    3600    IN      A       10.10.12.35
+biganswer.example8.    3600    IN      A       10.10.12.36
+biganswer.example8.    3600    IN      A       10.10.12.37
+biganswer.example8.    3600    IN      A       10.10.12.38
+biganswer.example8.    3600    IN      A       10.10.12.39
+biganswer.example8.    3600    IN      A       10.10.12.40
+biganswer.example8.    3600    IN      A       10.10.12.41
+biganswer.example8.    3600    IN      A       10.10.12.42
+biganswer.example8.    3600    IN      A       10.10.12.43
+biganswer.example8.    3600    IN      A       10.10.12.44
+biganswer.example8.    3600    IN      A       10.10.12.45
+biganswer.example8.    3600    IN      A       10.10.12.46
+biganswer.example8.    3600    IN      A       10.10.12.47
+biganswer.example8.    3600    IN      A       10.10.12.48
+biganswer.example8.    3600    IN      A       10.10.12.49
+biganswer.example8.    3600    IN      A       10.10.12.50
+biganswer.example8.    3600    IN      A       10.10.13.1
+biganswer.example8.    3600    IN      A       10.10.13.2
+biganswer.example8.    3600    IN      A       10.10.13.3
+biganswer.example8.    3600    IN      A       10.10.13.4
+biganswer.example8.    3600    IN      A       10.10.13.5
+biganswer.example8.    3600    IN      A       10.10.13.6
+biganswer.example8.    3600    IN      A       10.10.13.7
+biganswer.example8.    3600    IN      A       10.10.13.8
+biganswer.example8.    3600    IN      A       10.10.13.9
+biganswer.example8.    3600    IN      A       10.10.13.10
+biganswer.example8.    3600    IN      A       10.10.13.11
+biganswer.example8.    3600    IN      A       10.10.13.12
+biganswer.example8.    3600    IN      A       10.10.13.13
+biganswer.example8.    3600    IN      A       10.10.13.14
+biganswer.example8.    3600    IN      A       10.10.13.15
+biganswer.example8.    3600    IN      A       10.10.13.16
+biganswer.example8.    3600    IN      A       10.10.13.17
+biganswer.example8.    3600    IN      A       10.10.13.18
+biganswer.example8.    3600    IN      A       10.10.13.19
+biganswer.example8.    3600    IN      A       10.10.13.20
+biganswer.example8.    3600    IN      A       10.10.13.21
+biganswer.example8.    3600    IN      A       10.10.13.22
+biganswer.example8.    3600    IN      A       10.10.13.23
+biganswer.example8.    3600    IN      A       10.10.13.24
+biganswer.example8.    3600    IN      A       10.10.13.25
+biganswer.example8.    3600    IN      A       10.10.13.26
+biganswer.example8.    3600    IN      A       10.10.13.27
+biganswer.example8.    3600    IN      A       10.10.13.28
+biganswer.example8.    3600    IN      A       10.10.13.29
+biganswer.example8.    3600    IN      A       10.10.13.30
+biganswer.example8.    3600    IN      A       10.10.13.31
+biganswer.example8.    3600    IN      A       10.10.13.32
+biganswer.example8.    3600    IN      A       10.10.13.33
+biganswer.example8.    3600    IN      A       10.10.13.34
+biganswer.example8.    3600    IN      A       10.10.13.35
+biganswer.example8.    3600    IN      A       10.10.13.36
+biganswer.example8.    3600    IN      A       10.10.13.37
+biganswer.example8.    3600    IN      A       10.10.13.38
+biganswer.example8.    3600    IN      A       10.10.13.39
+biganswer.example8.    3600    IN      A       10.10.13.40
+biganswer.example8.    3600    IN      A       10.10.13.41
+biganswer.example8.    3600    IN      A       10.10.13.42
+biganswer.example8.    3600    IN      A       10.10.13.43
+biganswer.example8.    3600    IN      A       10.10.13.44
+biganswer.example8.    3600    IN      A       10.10.13.45
+biganswer.example8.    3600    IN      A       10.10.13.46
+biganswer.example8.    3600    IN      A       10.10.13.47
+biganswer.example8.    3600    IN      A       10.10.13.48
+biganswer.example8.    3600    IN      A       10.10.13.49
+biganswer.example8.    3600    IN      A       10.10.13.50
+biganswer.example8.    3600    IN      A       10.10.14.1
+biganswer.example8.    3600    IN      A       10.10.14.2
+biganswer.example8.    3600    IN      A       10.10.14.3
+biganswer.example8.    3600    IN      A       10.10.14.4
+biganswer.example8.    3600    IN      A       10.10.14.5
+biganswer.example8.    3600    IN      A       10.10.14.6
+biganswer.example8.    3600    IN      A       10.10.14.7
+biganswer.example8.    3600    IN      A       10.10.14.8
+biganswer.example8.    3600    IN      A       10.10.14.9
+biganswer.example8.    3600    IN      A       10.10.14.10
+biganswer.example8.    3600    IN      A       10.10.14.11
+biganswer.example8.    3600    IN      A       10.10.14.12
+biganswer.example8.    3600    IN      A       10.10.14.13
+biganswer.example8.    3600    IN      A       10.10.14.14
+biganswer.example8.    3600    IN      A       10.10.14.15
+biganswer.example8.    3600    IN      A       10.10.14.16
+biganswer.example8.    3600    IN      A       10.10.14.17
+biganswer.example8.    3600    IN      A       10.10.14.18
+biganswer.example8.    3600    IN      A       10.10.14.19
+biganswer.example8.    3600    IN      A       10.10.14.20
+biganswer.example8.    3600    IN      A       10.10.14.21
+biganswer.example8.    3600    IN      A       10.10.14.22
+biganswer.example8.    3600    IN      A       10.10.14.23
+biganswer.example8.    3600    IN      A       10.10.14.24
+biganswer.example8.    3600    IN      A       10.10.14.25
+biganswer.example8.    3600    IN      A       10.10.14.26
+biganswer.example8.    3600    IN      A       10.10.14.27
+biganswer.example8.    3600    IN      A       10.10.14.28
+biganswer.example8.    3600    IN      A       10.10.14.29
+biganswer.example8.    3600    IN      A       10.10.14.30
+biganswer.example8.    3600    IN      A       10.10.14.31
+biganswer.example8.    3600    IN      A       10.10.14.32
+biganswer.example8.    3600    IN      A       10.10.14.33
+biganswer.example8.    3600    IN      A       10.10.14.34
+biganswer.example8.    3600    IN      A       10.10.14.35
+biganswer.example8.    3600    IN      A       10.10.14.36
+biganswer.example8.    3600    IN      A       10.10.14.37
+biganswer.example8.    3600    IN      A       10.10.14.38
+biganswer.example8.    3600    IN      A       10.10.14.39
+biganswer.example8.    3600    IN      A       10.10.14.40
+biganswer.example8.    3600    IN      A       10.10.14.41
+biganswer.example8.    3600    IN      A       10.10.14.42
+biganswer.example8.    3600    IN      A       10.10.14.43
+biganswer.example8.    3600    IN      A       10.10.14.44
+biganswer.example8.    3600    IN      A       10.10.14.45
+biganswer.example8.    3600    IN      A       10.10.14.46
+biganswer.example8.    3600    IN      A       10.10.14.47
+biganswer.example8.    3600    IN      A       10.10.14.48
+biganswer.example8.    3600    IN      A       10.10.14.49
+biganswer.example8.    3600    IN      A       10.10.14.50
+biganswer.example8.    3600    IN      A       10.10.15.1
+biganswer.example8.    3600    IN      A       10.10.15.2
+biganswer.example8.    3600    IN      A       10.10.15.3
+biganswer.example8.    3600    IN      A       10.10.15.4
+biganswer.example8.    3600    IN      A       10.10.15.5
+biganswer.example8.    3600    IN      A       10.10.15.6
+biganswer.example8.    3600    IN      A       10.10.15.7
+biganswer.example8.    3600    IN      A       10.10.15.8
+biganswer.example8.    3600    IN      A       10.10.15.9
+biganswer.example8.    3600    IN      A       10.10.15.10
+biganswer.example8.    3600    IN      A       10.10.15.11
+biganswer.example8.    3600    IN      A       10.10.15.12
+biganswer.example8.    3600    IN      A       10.10.15.13
+biganswer.example8.    3600    IN      A       10.10.15.14
+biganswer.example8.    3600    IN      A       10.10.15.15
+biganswer.example8.    3600    IN      A       10.10.15.16
+biganswer.example8.    3600    IN      A       10.10.15.17
+biganswer.example8.    3600    IN      A       10.10.15.18
+biganswer.example8.    3600    IN      A       10.10.15.19
+biganswer.example8.    3600    IN      A       10.10.15.20
+biganswer.example8.    3600    IN      A       10.10.15.21
+biganswer.example8.    3600    IN      A       10.10.15.22
+biganswer.example8.    3600    IN      A       10.10.15.23
+biganswer.example8.    3600    IN      A       10.10.15.24
+biganswer.example8.    3600    IN      A       10.10.15.25
+biganswer.example8.    3600    IN      A       10.10.15.26
+biganswer.example8.    3600    IN      A       10.10.15.27
+biganswer.example8.    3600    IN      A       10.10.15.28
+biganswer.example8.    3600    IN      A       10.10.15.29
+biganswer.example8.    3600    IN      A       10.10.15.30
+biganswer.example8.    3600    IN      A       10.10.15.31
+biganswer.example8.    3600    IN      A       10.10.15.32
+biganswer.example8.    3600    IN      A       10.10.15.33
+biganswer.example8.    3600    IN      A       10.10.15.34
+biganswer.example8.    3600    IN      A       10.10.15.35
+biganswer.example8.    3600    IN      A       10.10.15.36
+biganswer.example8.    3600    IN      A       10.10.15.37
+biganswer.example8.    3600    IN      A       10.10.15.38
+biganswer.example8.    3600    IN      A       10.10.15.39
+biganswer.example8.    3600    IN      A       10.10.15.40
+biganswer.example8.    3600    IN      A       10.10.15.41
+biganswer.example8.    3600    IN      A       10.10.15.42
+biganswer.example8.    3600    IN      A       10.10.15.43
+biganswer.example8.    3600    IN      A       10.10.15.44
+biganswer.example8.    3600    IN      A       10.10.15.45
+biganswer.example8.    3600    IN      A       10.10.15.46
+biganswer.example8.    3600    IN      A       10.10.15.47
+biganswer.example8.    3600    IN      A       10.10.15.48
+biganswer.example8.    3600    IN      A       10.10.15.49
+biganswer.example8.    3600    IN      A       10.10.15.50
+biganswer.example8.    3600    IN      A       10.10.16.1
+biganswer.example8.    3600    IN      A       10.10.16.2
+biganswer.example8.    3600    IN      A       10.10.16.3
+biganswer.example8.    3600    IN      A       10.10.16.4
+biganswer.example8.    3600    IN      A       10.10.16.5
+biganswer.example8.    3600    IN      A       10.10.16.6
+biganswer.example8.    3600    IN      A       10.10.16.7
+biganswer.example8.    3600    IN      A       10.10.16.8
+biganswer.example8.    3600    IN      A       10.10.16.9
+biganswer.example8.    3600    IN      A       10.10.16.10
+biganswer.example8.    3600    IN      A       10.10.16.11
+biganswer.example8.    3600    IN      A       10.10.16.12
+biganswer.example8.    3600    IN      A       10.10.16.13
+biganswer.example8.    3600    IN      A       10.10.16.14
+biganswer.example8.    3600    IN      A       10.10.16.15
+biganswer.example8.    3600    IN      A       10.10.16.16
+biganswer.example8.    3600    IN      A       10.10.16.17
+biganswer.example8.    3600    IN      A       10.10.16.18
+biganswer.example8.    3600    IN      A       10.10.16.19
+biganswer.example8.    3600    IN      A       10.10.16.20
+biganswer.example8.    3600    IN      A       10.10.16.21
+biganswer.example8.    3600    IN      A       10.10.16.22
+biganswer.example8.    3600    IN      A       10.10.16.23
+biganswer.example8.    3600    IN      A       10.10.16.24
+biganswer.example8.    3600    IN      A       10.10.16.25
+biganswer.example8.    3600    IN      A       10.10.16.26
+biganswer.example8.    3600    IN      A       10.10.16.27
+biganswer.example8.    3600    IN      A       10.10.16.28
+biganswer.example8.    3600    IN      A       10.10.16.29
+biganswer.example8.    3600    IN      A       10.10.16.30
+biganswer.example8.    3600    IN      A       10.10.16.31
+biganswer.example8.    3600    IN      A       10.10.16.32
+biganswer.example8.    3600    IN      A       10.10.16.33
+biganswer.example8.    3600    IN      A       10.10.16.34
+biganswer.example8.    3600    IN      A       10.10.16.35
+biganswer.example8.    3600    IN      A       10.10.16.36
+biganswer.example8.    3600    IN      A       10.10.16.37
+biganswer.example8.    3600    IN      A       10.10.16.38
+biganswer.example8.    3600    IN      A       10.10.16.39
+biganswer.example8.    3600    IN      A       10.10.16.40
+biganswer.example8.    3600    IN      A       10.10.16.41
+biganswer.example8.    3600    IN      A       10.10.16.42
+biganswer.example8.    3600    IN      A       10.10.16.43
+biganswer.example8.    3600    IN      A       10.10.16.44
+biganswer.example8.    3600    IN      A       10.10.16.45
+biganswer.example8.    3600    IN      A       10.10.16.46
+biganswer.example8.    3600    IN      A       10.10.16.47
+biganswer.example8.    3600    IN      A       10.10.16.48
+biganswer.example8.    3600    IN      A       10.10.16.49
+biganswer.example8.    3600    IN      A       10.10.16.50
+biganswer.example8.    3600    IN      A       10.10.17.1
+biganswer.example8.    3600    IN      A       10.10.17.2
+biganswer.example8.    3600    IN      A       10.10.17.3
+biganswer.example8.    3600    IN      A       10.10.17.4
+biganswer.example8.    3600    IN      A       10.10.17.5
+biganswer.example8.    3600    IN      A       10.10.17.6
+biganswer.example8.    3600    IN      A       10.10.17.7
+biganswer.example8.    3600    IN      A       10.10.17.8
+biganswer.example8.    3600    IN      A       10.10.17.9
+biganswer.example8.    3600    IN      A       10.10.17.10
+biganswer.example8.    3600    IN      A       10.10.17.11
+biganswer.example8.    3600    IN      A       10.10.17.12
+biganswer.example8.    3600    IN      A       10.10.17.13
+biganswer.example8.    3600    IN      A       10.10.17.14
+biganswer.example8.    3600    IN      A       10.10.17.15
+biganswer.example8.    3600    IN      A       10.10.17.16
+biganswer.example8.    3600    IN      A       10.10.17.17
+biganswer.example8.    3600    IN      A       10.10.17.18
+biganswer.example8.    3600    IN      A       10.10.17.19
+biganswer.example8.    3600    IN      A       10.10.17.20
+biganswer.example8.    3600    IN      A       10.10.17.21
+biganswer.example8.    3600    IN      A       10.10.17.22
+biganswer.example8.    3600    IN      A       10.10.17.23
+biganswer.example8.    3600    IN      A       10.10.17.24
+biganswer.example8.    3600    IN      A       10.10.17.25
+biganswer.example8.    3600    IN      A       10.10.17.26
+biganswer.example8.    3600    IN      A       10.10.17.27
+biganswer.example8.    3600    IN      A       10.10.17.28
+biganswer.example8.    3600    IN      A       10.10.17.29
+biganswer.example8.    3600    IN      A       10.10.17.30
+biganswer.example8.    3600    IN      A       10.10.17.31
+biganswer.example8.    3600    IN      A       10.10.17.32
+biganswer.example8.    3600    IN      A       10.10.17.33
+biganswer.example8.    3600    IN      A       10.10.17.34
+biganswer.example8.    3600    IN      A       10.10.17.35
+biganswer.example8.    3600    IN      A       10.10.17.36
+biganswer.example8.    3600    IN      A       10.10.17.37
+biganswer.example8.    3600    IN      A       10.10.17.38
+biganswer.example8.    3600    IN      A       10.10.17.39
+biganswer.example8.    3600    IN      A       10.10.17.40
+biganswer.example8.    3600    IN      A       10.10.17.41
+biganswer.example8.    3600    IN      A       10.10.17.42
+biganswer.example8.    3600    IN      A       10.10.17.43
+biganswer.example8.    3600    IN      A       10.10.17.44
+biganswer.example8.    3600    IN      A       10.10.17.45
+biganswer.example8.    3600    IN      A       10.10.17.46
+biganswer.example8.    3600    IN      A       10.10.17.47
+biganswer.example8.    3600    IN      A       10.10.17.48
+biganswer.example8.    3600    IN      A       10.10.17.49
+biganswer.example8.    3600    IN      A       10.10.17.50
+biganswer.example8.    3600    IN      A       10.10.18.1
+biganswer.example8.    3600    IN      A       10.10.18.2
+biganswer.example8.    3600    IN      A       10.10.18.3
+biganswer.example8.    3600    IN      A       10.10.18.4
+biganswer.example8.    3600    IN      A       10.10.18.5
+biganswer.example8.    3600    IN      A       10.10.18.6
+biganswer.example8.    3600    IN      A       10.10.18.7
+biganswer.example8.    3600    IN      A       10.10.18.8
+biganswer.example8.    3600    IN      A       10.10.18.9
+biganswer.example8.    3600    IN      A       10.10.18.10
+biganswer.example8.    3600    IN      A       10.10.18.11
+biganswer.example8.    3600    IN      A       10.10.18.12
+biganswer.example8.    3600    IN      A       10.10.18.13
+biganswer.example8.    3600    IN      A       10.10.18.14
+biganswer.example8.    3600    IN      A       10.10.18.15
+biganswer.example8.    3600    IN      A       10.10.18.16
+biganswer.example8.    3600    IN      A       10.10.18.17
+biganswer.example8.    3600    IN      A       10.10.18.18
+biganswer.example8.    3600    IN      A       10.10.18.19
+biganswer.example8.    3600    IN      A       10.10.18.20
+biganswer.example8.    3600    IN      A       10.10.18.21
+biganswer.example8.    3600    IN      A       10.10.18.22
+biganswer.example8.    3600    IN      A       10.10.18.23
+biganswer.example8.    3600    IN      A       10.10.18.24
+biganswer.example8.    3600    IN      A       10.10.18.25
+biganswer.example8.    3600    IN      A       10.10.18.26
+biganswer.example8.    3600    IN      A       10.10.18.27
+biganswer.example8.    3600    IN      A       10.10.18.28
+biganswer.example8.    3600    IN      A       10.10.18.29
+biganswer.example8.    3600    IN      A       10.10.18.30
+biganswer.example8.    3600    IN      A       10.10.18.31
+biganswer.example8.    3600    IN      A       10.10.18.32
+biganswer.example8.    3600    IN      A       10.10.18.33
+biganswer.example8.    3600    IN      A       10.10.18.34
+biganswer.example8.    3600    IN      A       10.10.18.35
+biganswer.example8.    3600    IN      A       10.10.18.36
+biganswer.example8.    3600    IN      A       10.10.18.37
+biganswer.example8.    3600    IN      A       10.10.18.38
+biganswer.example8.    3600    IN      A       10.10.18.39
+biganswer.example8.    3600    IN      A       10.10.18.40
+biganswer.example8.    3600    IN      A       10.10.18.41
+biganswer.example8.    3600    IN      A       10.10.18.42
+biganswer.example8.    3600    IN      A       10.10.18.43
+biganswer.example8.    3600    IN      A       10.10.18.44
+biganswer.example8.    3600    IN      A       10.10.18.45
+biganswer.example8.    3600    IN      A       10.10.18.46
+biganswer.example8.    3600    IN      A       10.10.18.47
+biganswer.example8.    3600    IN      A       10.10.18.48
+biganswer.example8.    3600    IN      A       10.10.18.49
+biganswer.example8.    3600    IN      A       10.10.18.50
+biganswer.example8.    3600    IN      A       10.10.19.1
+biganswer.example8.    3600    IN      A       10.10.19.2
+biganswer.example8.    3600    IN      A       10.10.19.3
+biganswer.example8.    3600    IN      A       10.10.19.4
+biganswer.example8.    3600    IN      A       10.10.19.5
+biganswer.example8.    3600    IN      A       10.10.19.6
+biganswer.example8.    3600    IN      A       10.10.19.7
+biganswer.example8.    3600    IN      A       10.10.19.8
+biganswer.example8.    3600    IN      A       10.10.19.9
+biganswer.example8.    3600    IN      A       10.10.19.10
+biganswer.example8.    3600    IN      A       10.10.19.11
+biganswer.example8.    3600    IN      A       10.10.19.12
+biganswer.example8.    3600    IN      A       10.10.19.13
+biganswer.example8.    3600    IN      A       10.10.19.14
+biganswer.example8.    3600    IN      A       10.10.19.15
+biganswer.example8.    3600    IN      A       10.10.19.16
+biganswer.example8.    3600    IN      A       10.10.19.17
+biganswer.example8.    3600    IN      A       10.10.19.18
+biganswer.example8.    3600    IN      A       10.10.19.19
+biganswer.example8.    3600    IN      A       10.10.19.20
+biganswer.example8.    3600    IN      A       10.10.19.21
+biganswer.example8.    3600    IN      A       10.10.19.22
+biganswer.example8.    3600    IN      A       10.10.19.23
+biganswer.example8.    3600    IN      A       10.10.19.24
+biganswer.example8.    3600    IN      A       10.10.19.25
+biganswer.example8.    3600    IN      A       10.10.19.26
+biganswer.example8.    3600    IN      A       10.10.19.27
+biganswer.example8.    3600    IN      A       10.10.19.28
+biganswer.example8.    3600    IN      A       10.10.19.29
+biganswer.example8.    3600    IN      A       10.10.19.30
+biganswer.example8.    3600    IN      A       10.10.19.31
+biganswer.example8.    3600    IN      A       10.10.19.32
+biganswer.example8.    3600    IN      A       10.10.19.33
+biganswer.example8.    3600    IN      A       10.10.19.34
+biganswer.example8.    3600    IN      A       10.10.19.35
+biganswer.example8.    3600    IN      A       10.10.19.36
+biganswer.example8.    3600    IN      A       10.10.19.37
+biganswer.example8.    3600    IN      A       10.10.19.38
+biganswer.example8.    3600    IN      A       10.10.19.39
+biganswer.example8.    3600    IN      A       10.10.19.40
+biganswer.example8.    3600    IN      A       10.10.19.41
+biganswer.example8.    3600    IN      A       10.10.19.42
+biganswer.example8.    3600    IN      A       10.10.19.43
+biganswer.example8.    3600    IN      A       10.10.19.44
+biganswer.example8.    3600    IN      A       10.10.19.45
+biganswer.example8.    3600    IN      A       10.10.19.46
+biganswer.example8.    3600    IN      A       10.10.19.47
+biganswer.example8.    3600    IN      A       10.10.19.48
+biganswer.example8.    3600    IN      A       10.10.19.49
+biganswer.example8.    3600    IN      A       10.10.19.50
+biganswer.example8.    3600    IN      A       10.10.20.1
+biganswer.example8.    3600    IN      A       10.10.20.2
+biganswer.example8.    3600    IN      A       10.10.20.3
+biganswer.example8.    3600    IN      A       10.10.20.4
+biganswer.example8.    3600    IN      A       10.10.20.5
+biganswer.example8.    3600    IN      A       10.10.20.6
+biganswer.example8.    3600    IN      A       10.10.20.7
+biganswer.example8.    3600    IN      A       10.10.20.8
+biganswer.example8.    3600    IN      A       10.10.20.9
+biganswer.example8.    3600    IN      A       10.10.20.10
+biganswer.example8.    3600    IN      A       10.10.20.11
+biganswer.example8.    3600    IN      A       10.10.20.12
+biganswer.example8.    3600    IN      A       10.10.20.13
+biganswer.example8.    3600    IN      A       10.10.20.14
+biganswer.example8.    3600    IN      A       10.10.20.15
+biganswer.example8.    3600    IN      A       10.10.20.16
+biganswer.example8.    3600    IN      A       10.10.20.17
+biganswer.example8.    3600    IN      A       10.10.20.18
+biganswer.example8.    3600    IN      A       10.10.20.19
+biganswer.example8.    3600    IN      A       10.10.20.20
+biganswer.example8.    3600    IN      A       10.10.20.21
+biganswer.example8.    3600    IN      A       10.10.20.22
+biganswer.example8.    3600    IN      A       10.10.20.23
+biganswer.example8.    3600    IN      A       10.10.20.24
+biganswer.example8.    3600    IN      A       10.10.20.25
+biganswer.example8.    3600    IN      A       10.10.20.26
+biganswer.example8.    3600    IN      A       10.10.20.27
+biganswer.example8.    3600    IN      A       10.10.20.28
+biganswer.example8.    3600    IN      A       10.10.20.29
+biganswer.example8.    3600    IN      A       10.10.20.30
+biganswer.example8.    3600    IN      A       10.10.20.31
+biganswer.example8.    3600    IN      A       10.10.20.32
+biganswer.example8.    3600    IN      A       10.10.20.33
+biganswer.example8.    3600    IN      A       10.10.20.34
+biganswer.example8.    3600    IN      A       10.10.20.35
+biganswer.example8.    3600    IN      A       10.10.20.36
+biganswer.example8.    3600    IN      A       10.10.20.37
+biganswer.example8.    3600    IN      A       10.10.20.38
+biganswer.example8.    3600    IN      A       10.10.20.39
+biganswer.example8.    3600    IN      A       10.10.20.40
+biganswer.example8.    3600    IN      A       10.10.20.41
+biganswer.example8.    3600    IN      A       10.10.20.42
+biganswer.example8.    3600    IN      A       10.10.20.43
+biganswer.example8.    3600    IN      A       10.10.20.44
+biganswer.example8.    3600    IN      A       10.10.20.45
+biganswer.example8.    3600    IN      A       10.10.20.46
+biganswer.example8.    3600    IN      A       10.10.20.47
+biganswer.example8.    3600    IN      A       10.10.20.48
+biganswer.example8.    3600    IN      A       10.10.20.49
+biganswer.example8.    3600    IN      A       10.10.20.50
+biganswer.example8.    3600    IN      A       10.10.21.1
+biganswer.example8.    3600    IN      A       10.10.21.2
+biganswer.example8.    3600    IN      A       10.10.21.3
+biganswer.example8.    3600    IN      A       10.10.21.4
+biganswer.example8.    3600    IN      A       10.10.21.5
+biganswer.example8.    3600    IN      A       10.10.21.6
+biganswer.example8.    3600    IN      A       10.10.21.7
+biganswer.example8.    3600    IN      A       10.10.21.8
+biganswer.example8.    3600    IN      A       10.10.21.9
+biganswer.example8.    3600    IN      A       10.10.21.10
+biganswer.example8.    3600    IN      A       10.10.21.11
+biganswer.example8.    3600    IN      A       10.10.21.12
+biganswer.example8.    3600    IN      A       10.10.21.13
+biganswer.example8.    3600    IN      A       10.10.21.14
+biganswer.example8.    3600    IN      A       10.10.21.15
+biganswer.example8.    3600    IN      A       10.10.21.16
+biganswer.example8.    3600    IN      A       10.10.21.17
+biganswer.example8.    3600    IN      A       10.10.21.18
+biganswer.example8.    3600    IN      A       10.10.21.19
+biganswer.example8.    3600    IN      A       10.10.21.20
+biganswer.example8.    3600    IN      A       10.10.21.21
+biganswer.example8.    3600    IN      A       10.10.21.22
+biganswer.example8.    3600    IN      A       10.10.21.23
+biganswer.example8.    3600    IN      A       10.10.21.24
+biganswer.example8.    3600    IN      A       10.10.21.25
+biganswer.example8.    3600    IN      A       10.10.21.26
+biganswer.example8.    3600    IN      A       10.10.21.27
+biganswer.example8.    3600    IN      A       10.10.21.28
+biganswer.example8.    3600    IN      A       10.10.21.29
+biganswer.example8.    3600    IN      A       10.10.21.30
+biganswer.example8.    3600    IN      A       10.10.21.31
+biganswer.example8.    3600    IN      A       10.10.21.32
+biganswer.example8.    3600    IN      A       10.10.21.33
+biganswer.example8.    3600    IN      A       10.10.21.34
+biganswer.example8.    3600    IN      A       10.10.21.35
+biganswer.example8.    3600    IN      A       10.10.21.36
+biganswer.example8.    3600    IN      A       10.10.21.37
+biganswer.example8.    3600    IN      A       10.10.21.38
+biganswer.example8.    3600    IN      A       10.10.21.39
+biganswer.example8.    3600    IN      A       10.10.21.40
+biganswer.example8.    3600    IN      A       10.10.21.41
+biganswer.example8.    3600    IN      A       10.10.21.42
+biganswer.example8.    3600    IN      A       10.10.21.43
+biganswer.example8.    3600    IN      A       10.10.21.44
+biganswer.example8.    3600    IN      A       10.10.21.45
+biganswer.example8.    3600    IN      A       10.10.21.46
+biganswer.example8.    3600    IN      A       10.10.21.47
+biganswer.example8.    3600    IN      A       10.10.21.48
+biganswer.example8.    3600    IN      A       10.10.21.49
+biganswer.example8.    3600    IN      A       10.10.21.50
+biganswer.example8.    3600    IN      A       10.10.22.1
+biganswer.example8.    3600    IN      A       10.10.22.2
+biganswer.example8.    3600    IN      A       10.10.22.3
+biganswer.example8.    3600    IN      A       10.10.22.4
+biganswer.example8.    3600    IN      A       10.10.22.5
+biganswer.example8.    3600    IN      A       10.10.22.6
+biganswer.example8.    3600    IN      A       10.10.22.7
+biganswer.example8.    3600    IN      A       10.10.22.8
+biganswer.example8.    3600    IN      A       10.10.22.9
+biganswer.example8.    3600    IN      A       10.10.22.10
+biganswer.example8.    3600    IN      A       10.10.22.11
+biganswer.example8.    3600    IN      A       10.10.22.12
+biganswer.example8.    3600    IN      A       10.10.22.13
+biganswer.example8.    3600    IN      A       10.10.22.14
+biganswer.example8.    3600    IN      A       10.10.22.15
+biganswer.example8.    3600    IN      A       10.10.22.16
+biganswer.example8.    3600    IN      A       10.10.22.17
+biganswer.example8.    3600    IN      A       10.10.22.18
+biganswer.example8.    3600    IN      A       10.10.22.19
+biganswer.example8.    3600    IN      A       10.10.22.20
+biganswer.example8.    3600    IN      A       10.10.22.21
+biganswer.example8.    3600    IN      A       10.10.22.22
+biganswer.example8.    3600    IN      A       10.10.22.23
+biganswer.example8.    3600    IN      A       10.10.22.24
+biganswer.example8.    3600    IN      A       10.10.22.25
+biganswer.example8.    3600    IN      A       10.10.22.26
+biganswer.example8.    3600    IN      A       10.10.22.27
+biganswer.example8.    3600    IN      A       10.10.22.28
+biganswer.example8.    3600    IN      A       10.10.22.29
+biganswer.example8.    3600    IN      A       10.10.22.30
+biganswer.example8.    3600    IN      A       10.10.22.31
+biganswer.example8.    3600    IN      A       10.10.22.32
+biganswer.example8.    3600    IN      A       10.10.22.33
+biganswer.example8.    3600    IN      A       10.10.22.34
+biganswer.example8.    3600    IN      A       10.10.22.35
+biganswer.example8.    3600    IN      A       10.10.22.36
+biganswer.example8.    3600    IN      A       10.10.22.37
+biganswer.example8.    3600    IN      A       10.10.22.38
+biganswer.example8.    3600    IN      A       10.10.22.39
+biganswer.example8.    3600    IN      A       10.10.22.40
+biganswer.example8.    3600    IN      A       10.10.22.41
+biganswer.example8.    3600    IN      A       10.10.22.42
+biganswer.example8.    3600    IN      A       10.10.22.43
+biganswer.example8.    3600    IN      A       10.10.22.44
+biganswer.example8.    3600    IN      A       10.10.22.45
+biganswer.example8.    3600    IN      A       10.10.22.46
+biganswer.example8.    3600    IN      A       10.10.22.47
+biganswer.example8.    3600    IN      A       10.10.22.48
+biganswer.example8.    3600    IN      A       10.10.22.49
+biganswer.example8.    3600    IN      A       10.10.22.50
+biganswer.example8.    3600    IN      A       10.10.23.1
+biganswer.example8.    3600    IN      A       10.10.23.2
+biganswer.example8.    3600    IN      A       10.10.23.3
+biganswer.example8.    3600    IN      A       10.10.23.4
+biganswer.example8.    3600    IN      A       10.10.23.5
+biganswer.example8.    3600    IN      A       10.10.23.6
+biganswer.example8.    3600    IN      A       10.10.23.7
+biganswer.example8.    3600    IN      A       10.10.23.8
+biganswer.example8.    3600    IN      A       10.10.23.9
+biganswer.example8.    3600    IN      A       10.10.23.10
+biganswer.example8.    3600    IN      A       10.10.23.11
+biganswer.example8.    3600    IN      A       10.10.23.12
+biganswer.example8.    3600    IN      A       10.10.23.13
+biganswer.example8.    3600    IN      A       10.10.23.14
+biganswer.example8.    3600    IN      A       10.10.23.15
+biganswer.example8.    3600    IN      A       10.10.23.16
+biganswer.example8.    3600    IN      A       10.10.23.17
+biganswer.example8.    3600    IN      A       10.10.23.18
+biganswer.example8.    3600    IN      A       10.10.23.19
+biganswer.example8.    3600    IN      A       10.10.23.20
+biganswer.example8.    3600    IN      A       10.10.23.21
+biganswer.example8.    3600    IN      A       10.10.23.22
+biganswer.example8.    3600    IN      A       10.10.23.23
+biganswer.example8.    3600    IN      A       10.10.23.24
+biganswer.example8.    3600    IN      A       10.10.23.25
+biganswer.example8.    3600    IN      A       10.10.23.26
+biganswer.example8.    3600    IN      A       10.10.23.27
+biganswer.example8.    3600    IN      A       10.10.23.28
+biganswer.example8.    3600    IN      A       10.10.23.29
+biganswer.example8.    3600    IN      A       10.10.23.30
+biganswer.example8.    3600    IN      A       10.10.23.31
+biganswer.example8.    3600    IN      A       10.10.23.32
+biganswer.example8.    3600    IN      A       10.10.23.33
+biganswer.example8.    3600    IN      A       10.10.23.34
+biganswer.example8.    3600    IN      A       10.10.23.35
+biganswer.example8.    3600    IN      A       10.10.23.36
+biganswer.example8.    3600    IN      A       10.10.23.37
+biganswer.example8.    3600    IN      A       10.10.23.38
+biganswer.example8.    3600    IN      A       10.10.23.39
+biganswer.example8.    3600    IN      A       10.10.23.40
+biganswer.example8.    3600    IN      A       10.10.23.41
+biganswer.example8.    3600    IN      A       10.10.23.42
+biganswer.example8.    3600    IN      A       10.10.23.43
+biganswer.example8.    3600    IN      A       10.10.23.44
+biganswer.example8.    3600    IN      A       10.10.23.45
+biganswer.example8.    3600    IN      A       10.10.23.46
+biganswer.example8.    3600    IN      A       10.10.23.47
+biganswer.example8.    3600    IN      A       10.10.23.48
+biganswer.example8.    3600    IN      A       10.10.23.49
+biganswer.example8.    3600    IN      A       10.10.23.50
+biganswer.example8.    3600    IN      A       10.10.24.1
+biganswer.example8.    3600    IN      A       10.10.24.2
+biganswer.example8.    3600    IN      A       10.10.24.3
+biganswer.example8.    3600    IN      A       10.10.24.4
+biganswer.example8.    3600    IN      A       10.10.24.5
+biganswer.example8.    3600    IN      A       10.10.24.6
+biganswer.example8.    3600    IN      A       10.10.24.7
+biganswer.example8.    3600    IN      A       10.10.24.8
+biganswer.example8.    3600    IN      A       10.10.24.9
+biganswer.example8.    3600    IN      A       10.10.24.10
+biganswer.example8.    3600    IN      A       10.10.24.11
+biganswer.example8.    3600    IN      A       10.10.24.12
+biganswer.example8.    3600    IN      A       10.10.24.13
+biganswer.example8.    3600    IN      A       10.10.24.14
+biganswer.example8.    3600    IN      A       10.10.24.15
+biganswer.example8.    3600    IN      A       10.10.24.16
+biganswer.example8.    3600    IN      A       10.10.24.17
+biganswer.example8.    3600    IN      A       10.10.24.18
+biganswer.example8.    3600    IN      A       10.10.24.19
+biganswer.example8.    3600    IN      A       10.10.24.20
+biganswer.example8.    3600    IN      A       10.10.24.21
+biganswer.example8.    3600    IN      A       10.10.24.22
+biganswer.example8.    3600    IN      A       10.10.24.23
+biganswer.example8.    3600    IN      A       10.10.24.24
+biganswer.example8.    3600    IN      A       10.10.24.25
+biganswer.example8.    3600    IN      A       10.10.24.26
+biganswer.example8.    3600    IN      A       10.10.24.27
+biganswer.example8.    3600    IN      A       10.10.24.28
+biganswer.example8.    3600    IN      A       10.10.24.29
+biganswer.example8.    3600    IN      A       10.10.24.30
+biganswer.example8.    3600    IN      A       10.10.24.31
+biganswer.example8.    3600    IN      A       10.10.24.32
+biganswer.example8.    3600    IN      A       10.10.24.33
+biganswer.example8.    3600    IN      A       10.10.24.34
+biganswer.example8.    3600    IN      A       10.10.24.35
+biganswer.example8.    3600    IN      A       10.10.24.36
+biganswer.example8.    3600    IN      A       10.10.24.37
+biganswer.example8.    3600    IN      A       10.10.24.38
+biganswer.example8.    3600    IN      A       10.10.24.39
+biganswer.example8.    3600    IN      A       10.10.24.40
+biganswer.example8.    3600    IN      A       10.10.24.41
+biganswer.example8.    3600    IN      A       10.10.24.42
+biganswer.example8.    3600    IN      A       10.10.24.43
+biganswer.example8.    3600    IN      A       10.10.24.44
+biganswer.example8.    3600    IN      A       10.10.24.45
+biganswer.example8.    3600    IN      A       10.10.24.46
+biganswer.example8.    3600    IN      A       10.10.24.47
+biganswer.example8.    3600    IN      A       10.10.24.48
+biganswer.example8.    3600    IN      A       10.10.24.49
+biganswer.example8.    3600    IN      A       10.10.24.50
+biganswer.example8.    3600    IN      A       10.10.25.1
+biganswer.example8.    3600    IN      A       10.10.25.2
+biganswer.example8.    3600    IN      A       10.10.25.3
+biganswer.example8.    3600    IN      A       10.10.25.4
+biganswer.example8.    3600    IN      A       10.10.25.5
+biganswer.example8.    3600    IN      A       10.10.25.6
+biganswer.example8.    3600    IN      A       10.10.25.7
+biganswer.example8.    3600    IN      A       10.10.25.8
+biganswer.example8.    3600    IN      A       10.10.25.9
+biganswer.example8.    3600    IN      A       10.10.25.10
+biganswer.example8.    3600    IN      A       10.10.25.11
+biganswer.example8.    3600    IN      A       10.10.25.12
+biganswer.example8.    3600    IN      A       10.10.25.13
+biganswer.example8.    3600    IN      A       10.10.25.14
+biganswer.example8.    3600    IN      A       10.10.25.15
+biganswer.example8.    3600    IN      A       10.10.25.16
+biganswer.example8.    3600    IN      A       10.10.25.17
+biganswer.example8.    3600    IN      A       10.10.25.18
+biganswer.example8.    3600    IN      A       10.10.25.19
+biganswer.example8.    3600    IN      A       10.10.25.20
+biganswer.example8.    3600    IN      A       10.10.25.21
+biganswer.example8.    3600    IN      A       10.10.25.22
+biganswer.example8.    3600    IN      A       10.10.25.23
+biganswer.example8.    3600    IN      A       10.10.25.24
+biganswer.example8.    3600    IN      A       10.10.25.25
+biganswer.example8.    3600    IN      A       10.10.25.26
+biganswer.example8.    3600    IN      A       10.10.25.27
+biganswer.example8.    3600    IN      A       10.10.25.28
+biganswer.example8.    3600    IN      A       10.10.25.29
+biganswer.example8.    3600    IN      A       10.10.25.30
+biganswer.example8.    3600    IN      A       10.10.25.31
+biganswer.example8.    3600    IN      A       10.10.25.32
+biganswer.example8.    3600    IN      A       10.10.25.33
+biganswer.example8.    3600    IN      A       10.10.25.34
+biganswer.example8.    3600    IN      A       10.10.25.35
+biganswer.example8.    3600    IN      A       10.10.25.36
+biganswer.example8.    3600    IN      A       10.10.25.37
+biganswer.example8.    3600    IN      A       10.10.25.38
+biganswer.example8.    3600    IN      A       10.10.25.39
+biganswer.example8.    3600    IN      A       10.10.25.40
+biganswer.example8.    3600    IN      A       10.10.25.41
+biganswer.example8.    3600    IN      A       10.10.25.42
+biganswer.example8.    3600    IN      A       10.10.25.43
+biganswer.example8.    3600    IN      A       10.10.25.44
+biganswer.example8.    3600    IN      A       10.10.25.45
+biganswer.example8.    3600    IN      A       10.10.25.46
+biganswer.example8.    3600    IN      A       10.10.25.47
+biganswer.example8.    3600    IN      A       10.10.25.48
+biganswer.example8.    3600    IN      A       10.10.25.49
+biganswer.example8.    3600    IN      A       10.10.25.50
+biganswer.example8.    3600    IN      A       10.10.26.1
+biganswer.example8.    3600    IN      A       10.10.26.2
+biganswer.example8.    3600    IN      A       10.10.26.3
+biganswer.example8.    3600    IN      A       10.10.26.4
+biganswer.example8.    3600    IN      A       10.10.26.5
+biganswer.example8.    3600    IN      A       10.10.26.6
+biganswer.example8.    3600    IN      A       10.10.26.7
+biganswer.example8.    3600    IN      A       10.10.26.8
+biganswer.example8.    3600    IN      A       10.10.26.9
+biganswer.example8.    3600    IN      A       10.10.26.10
+biganswer.example8.    3600    IN      A       10.10.26.11
+biganswer.example8.    3600    IN      A       10.10.26.12
+biganswer.example8.    3600    IN      A       10.10.26.13
+biganswer.example8.    3600    IN      A       10.10.26.14
+biganswer.example8.    3600    IN      A       10.10.26.15
+biganswer.example8.    3600    IN      A       10.10.26.16
+biganswer.example8.    3600    IN      A       10.10.26.17
+biganswer.example8.    3600    IN      A       10.10.26.18
+biganswer.example8.    3600    IN      A       10.10.26.19
+biganswer.example8.    3600    IN      A       10.10.26.20
+biganswer.example8.    3600    IN      A       10.10.26.21
+biganswer.example8.    3600    IN      A       10.10.26.22
+biganswer.example8.    3600    IN      A       10.10.26.23
+biganswer.example8.    3600    IN      A       10.10.26.24
+biganswer.example8.    3600    IN      A       10.10.26.25
+biganswer.example8.    3600    IN      A       10.10.26.26
+biganswer.example8.    3600    IN      A       10.10.26.27
+biganswer.example8.    3600    IN      A       10.10.26.28
+biganswer.example8.    3600    IN      A       10.10.26.29
+biganswer.example8.    3600    IN      A       10.10.26.30
+biganswer.example8.    3600    IN      A       10.10.26.31
+biganswer.example8.    3600    IN      A       10.10.26.32
+biganswer.example8.    3600    IN      A       10.10.26.33
+biganswer.example8.    3600    IN      A       10.10.26.34
+biganswer.example8.    3600    IN      A       10.10.26.35
+biganswer.example8.    3600    IN      A       10.10.26.36
+biganswer.example8.    3600    IN      A       10.10.26.37
+biganswer.example8.    3600    IN      A       10.10.26.38
+biganswer.example8.    3600    IN      A       10.10.26.39
+biganswer.example8.    3600    IN      A       10.10.26.40
+biganswer.example8.    3600    IN      A       10.10.26.41
+biganswer.example8.    3600    IN      A       10.10.26.42
+biganswer.example8.    3600    IN      A       10.10.26.43
+biganswer.example8.    3600    IN      A       10.10.26.44
+biganswer.example8.    3600    IN      A       10.10.26.45
+biganswer.example8.    3600    IN      A       10.10.26.46
+biganswer.example8.    3600    IN      A       10.10.26.47
+biganswer.example8.    3600    IN      A       10.10.26.48
+biganswer.example8.    3600    IN      A       10.10.26.49
+biganswer.example8.    3600    IN      A       10.10.26.50
+biganswer.example8.    3600    IN      A       10.10.27.1
+biganswer.example8.    3600    IN      A       10.10.27.2
+biganswer.example8.    3600    IN      A       10.10.27.3
+biganswer.example8.    3600    IN      A       10.10.27.4
+biganswer.example8.    3600    IN      A       10.10.27.5
+biganswer.example8.    3600    IN      A       10.10.27.6
+biganswer.example8.    3600    IN      A       10.10.27.7
+biganswer.example8.    3600    IN      A       10.10.27.8
+biganswer.example8.    3600    IN      A       10.10.27.9
+biganswer.example8.    3600    IN      A       10.10.27.10
+biganswer.example8.    3600    IN      A       10.10.27.11
+biganswer.example8.    3600    IN      A       10.10.27.12
+biganswer.example8.    3600    IN      A       10.10.27.13
+biganswer.example8.    3600    IN      A       10.10.27.14
+biganswer.example8.    3600    IN      A       10.10.27.15
+biganswer.example8.    3600    IN      A       10.10.27.16
+biganswer.example8.    3600    IN      A       10.10.27.17
+biganswer.example8.    3600    IN      A       10.10.27.18
+biganswer.example8.    3600    IN      A       10.10.27.19
+biganswer.example8.    3600    IN      A       10.10.27.20
+biganswer.example8.    3600    IN      A       10.10.27.21
+biganswer.example8.    3600    IN      A       10.10.27.22
+biganswer.example8.    3600    IN      A       10.10.27.23
+biganswer.example8.    3600    IN      A       10.10.27.24
+biganswer.example8.    3600    IN      A       10.10.27.25
+biganswer.example8.    3600    IN      A       10.10.27.26
+biganswer.example8.    3600    IN      A       10.10.27.27
+biganswer.example8.    3600    IN      A       10.10.27.28
+biganswer.example8.    3600    IN      A       10.10.27.29
+biganswer.example8.    3600    IN      A       10.10.27.30
+biganswer.example8.    3600    IN      A       10.10.27.31
+biganswer.example8.    3600    IN      A       10.10.27.32
+biganswer.example8.    3600    IN      A       10.10.27.33
+biganswer.example8.    3600    IN      A       10.10.27.34
+biganswer.example8.    3600    IN      A       10.10.27.35
+biganswer.example8.    3600    IN      A       10.10.27.36
+biganswer.example8.    3600    IN      A       10.10.27.37
+biganswer.example8.    3600    IN      A       10.10.27.38
+biganswer.example8.    3600    IN      A       10.10.27.39
+biganswer.example8.    3600    IN      A       10.10.27.40
+biganswer.example8.    3600    IN      A       10.10.27.41
+biganswer.example8.    3600    IN      A       10.10.27.42
+biganswer.example8.    3600    IN      A       10.10.27.43
+biganswer.example8.    3600    IN      A       10.10.27.44
+biganswer.example8.    3600    IN      A       10.10.27.45
+biganswer.example8.    3600    IN      A       10.10.27.46
+biganswer.example8.    3600    IN      A       10.10.27.47
+biganswer.example8.    3600    IN      A       10.10.27.48
+biganswer.example8.    3600    IN      A       10.10.27.49
+biganswer.example8.    3600    IN      A       10.10.27.50
+biganswer.example8.    3600    IN      A       10.10.28.1
+biganswer.example8.    3600    IN      A       10.10.28.2
+biganswer.example8.    3600    IN      A       10.10.28.3
+biganswer.example8.    3600    IN      A       10.10.28.4
+biganswer.example8.    3600    IN      A       10.10.28.5
+biganswer.example8.    3600    IN      A       10.10.28.6
+biganswer.example8.    3600    IN      A       10.10.28.7
+biganswer.example8.    3600    IN      A       10.10.28.8
+biganswer.example8.    3600    IN      A       10.10.28.9
+biganswer.example8.    3600    IN      A       10.10.28.10
+biganswer.example8.    3600    IN      A       10.10.28.11
+biganswer.example8.    3600    IN      A       10.10.28.12
+biganswer.example8.    3600    IN      A       10.10.28.13
+biganswer.example8.    3600    IN      A       10.10.28.14
+biganswer.example8.    3600    IN      A       10.10.28.15
+biganswer.example8.    3600    IN      A       10.10.28.16
+biganswer.example8.    3600    IN      A       10.10.28.17
+biganswer.example8.    3600    IN      A       10.10.28.18
+biganswer.example8.    3600    IN      A       10.10.28.19
+biganswer.example8.    3600    IN      A       10.10.28.20
+biganswer.example8.    3600    IN      A       10.10.28.21
+biganswer.example8.    3600    IN      A       10.10.28.22
+biganswer.example8.    3600    IN      A       10.10.28.23
+biganswer.example8.    3600    IN      A       10.10.28.24
+biganswer.example8.    3600    IN      A       10.10.28.25
+biganswer.example8.    3600    IN      A       10.10.28.26
+biganswer.example8.    3600    IN      A       10.10.28.27
+biganswer.example8.    3600    IN      A       10.10.28.28
+biganswer.example8.    3600    IN      A       10.10.28.29
+biganswer.example8.    3600    IN      A       10.10.28.30
+biganswer.example8.    3600    IN      A       10.10.28.31
+biganswer.example8.    3600    IN      A       10.10.28.32
+biganswer.example8.    3600    IN      A       10.10.28.33
+biganswer.example8.    3600    IN      A       10.10.28.34
+biganswer.example8.    3600    IN      A       10.10.28.35
+biganswer.example8.    3600    IN      A       10.10.28.36
+biganswer.example8.    3600    IN      A       10.10.28.37
+biganswer.example8.    3600    IN      A       10.10.28.38
+biganswer.example8.    3600    IN      A       10.10.28.39
+biganswer.example8.    3600    IN      A       10.10.28.40
+biganswer.example8.    3600    IN      A       10.10.28.41
+biganswer.example8.    3600    IN      A       10.10.28.42
+biganswer.example8.    3600    IN      A       10.10.28.43
+biganswer.example8.    3600    IN      A       10.10.28.44
+biganswer.example8.    3600    IN      A       10.10.28.45
+biganswer.example8.    3600    IN      A       10.10.28.46
+biganswer.example8.    3600    IN      A       10.10.28.47
+biganswer.example8.    3600    IN      A       10.10.28.48
+biganswer.example8.    3600    IN      A       10.10.28.49
+biganswer.example8.    3600    IN      A       10.10.28.50
+biganswer.example8.    3600    IN      A       10.10.29.1
+biganswer.example8.    3600    IN      A       10.10.29.2
+biganswer.example8.    3600    IN      A       10.10.29.3
+biganswer.example8.    3600    IN      A       10.10.29.4
+biganswer.example8.    3600    IN      A       10.10.29.5
+biganswer.example8.    3600    IN      A       10.10.29.6
+biganswer.example8.    3600    IN      A       10.10.29.7
+biganswer.example8.    3600    IN      A       10.10.29.8
+biganswer.example8.    3600    IN      A       10.10.29.9
+biganswer.example8.    3600    IN      A       10.10.29.10
+biganswer.example8.    3600    IN      A       10.10.29.11
+biganswer.example8.    3600    IN      A       10.10.29.12
+biganswer.example8.    3600    IN      A       10.10.29.13
+biganswer.example8.    3600    IN      A       10.10.29.14
+biganswer.example8.    3600    IN      A       10.10.29.15
+biganswer.example8.    3600    IN      A       10.10.29.16
+biganswer.example8.    3600    IN      A       10.10.29.17
+biganswer.example8.    3600    IN      A       10.10.29.18
+biganswer.example8.    3600    IN      A       10.10.29.19
+biganswer.example8.    3600    IN      A       10.10.29.20
+biganswer.example8.    3600    IN      A       10.10.29.21
+biganswer.example8.    3600    IN      A       10.10.29.22
+biganswer.example8.    3600    IN      A       10.10.29.23
+biganswer.example8.    3600    IN      A       10.10.29.24
+biganswer.example8.    3600    IN      A       10.10.29.25
+biganswer.example8.    3600    IN      A       10.10.29.26
+biganswer.example8.    3600    IN      A       10.10.29.27
+biganswer.example8.    3600    IN      A       10.10.29.28
+biganswer.example8.    3600    IN      A       10.10.29.29
+biganswer.example8.    3600    IN      A       10.10.29.30
+biganswer.example8.    3600    IN      A       10.10.29.31
+biganswer.example8.    3600    IN      A       10.10.29.32
+biganswer.example8.    3600    IN      A       10.10.29.33
+biganswer.example8.    3600    IN      A       10.10.29.34
+biganswer.example8.    3600    IN      A       10.10.29.35
+biganswer.example8.    3600    IN      A       10.10.29.36
+biganswer.example8.    3600    IN      A       10.10.29.37
+biganswer.example8.    3600    IN      A       10.10.29.38
+biganswer.example8.    3600    IN      A       10.10.29.39
+biganswer.example8.    3600    IN      A       10.10.29.40
+biganswer.example8.    3600    IN      A       10.10.29.41
+biganswer.example8.    3600    IN      A       10.10.29.42
+biganswer.example8.    3600    IN      A       10.10.29.43
+biganswer.example8.    3600    IN      A       10.10.29.44
+biganswer.example8.    3600    IN      A       10.10.29.45
+biganswer.example8.    3600    IN      A       10.10.29.46
+biganswer.example8.    3600    IN      A       10.10.29.47
+biganswer.example8.    3600    IN      A       10.10.29.48
+biganswer.example8.    3600    IN      A       10.10.29.49
+biganswer.example8.    3600    IN      A       10.10.29.50
+biganswer.example8.    3600    IN      A       10.10.30.1
+biganswer.example8.    3600    IN      A       10.10.30.2
+biganswer.example8.    3600    IN      A       10.10.30.3
+biganswer.example8.    3600    IN      A       10.10.30.4
+biganswer.example8.    3600    IN      A       10.10.30.5
+biganswer.example8.    3600    IN      A       10.10.30.6
+biganswer.example8.    3600    IN      A       10.10.30.7
+biganswer.example8.    3600    IN      A       10.10.30.8
+biganswer.example8.    3600    IN      A       10.10.30.9
+biganswer.example8.    3600    IN      A       10.10.30.10
+biganswer.example8.    3600    IN      A       10.10.30.11
+biganswer.example8.    3600    IN      A       10.10.30.12
+biganswer.example8.    3600    IN      A       10.10.30.13
+biganswer.example8.    3600    IN      A       10.10.30.14
+biganswer.example8.    3600    IN      A       10.10.30.15
+biganswer.example8.    3600    IN      A       10.10.30.16
+biganswer.example8.    3600    IN      A       10.10.30.17
+biganswer.example8.    3600    IN      A       10.10.30.18
+biganswer.example8.    3600    IN      A       10.10.30.19
+biganswer.example8.    3600    IN      A       10.10.30.20
+biganswer.example8.    3600    IN      A       10.10.30.21
+biganswer.example8.    3600    IN      A       10.10.30.22
+biganswer.example8.    3600    IN      A       10.10.30.23
+biganswer.example8.    3600    IN      A       10.10.30.24
+biganswer.example8.    3600    IN      A       10.10.30.25
+biganswer.example8.    3600    IN      A       10.10.30.26
+biganswer.example8.    3600    IN      A       10.10.30.27
+biganswer.example8.    3600    IN      A       10.10.30.28
+biganswer.example8.    3600    IN      A       10.10.30.29
+biganswer.example8.    3600    IN      A       10.10.30.30
+biganswer.example8.    3600    IN      A       10.10.30.31
+biganswer.example8.    3600    IN      A       10.10.30.32
+biganswer.example8.    3600    IN      A       10.10.30.33
+biganswer.example8.    3600    IN      A       10.10.30.34
+biganswer.example8.    3600    IN      A       10.10.30.35
+biganswer.example8.    3600    IN      A       10.10.30.36
+biganswer.example8.    3600    IN      A       10.10.30.37
+biganswer.example8.    3600    IN      A       10.10.30.38
+biganswer.example8.    3600    IN      A       10.10.30.39
+biganswer.example8.    3600    IN      A       10.10.30.40
+biganswer.example8.    3600    IN      A       10.10.30.41
+biganswer.example8.    3600    IN      A       10.10.30.42
+biganswer.example8.    3600    IN      A       10.10.30.43
+biganswer.example8.    3600    IN      A       10.10.30.44
+biganswer.example8.    3600    IN      A       10.10.30.45
+biganswer.example8.    3600    IN      A       10.10.30.46
+biganswer.example8.    3600    IN      A       10.10.30.47
+biganswer.example8.    3600    IN      A       10.10.30.48
+biganswer.example8.    3600    IN      A       10.10.30.49
+biganswer.example8.    3600    IN      A       10.10.30.50
+biganswer.example8.    3600    IN      A       10.10.31.1
+biganswer.example8.    3600    IN      A       10.10.31.2
+biganswer.example8.    3600    IN      A       10.10.31.3
+biganswer.example8.    3600    IN      A       10.10.31.4
+biganswer.example8.    3600    IN      A       10.10.31.5
+biganswer.example8.    3600    IN      A       10.10.31.6
+biganswer.example8.    3600    IN      A       10.10.31.7
+biganswer.example8.    3600    IN      A       10.10.31.8
+biganswer.example8.    3600    IN      A       10.10.31.9
+biganswer.example8.    3600    IN      A       10.10.31.10
+biganswer.example8.    3600    IN      A       10.10.31.11
+biganswer.example8.    3600    IN      A       10.10.31.12
+biganswer.example8.    3600    IN      A       10.10.31.13
+biganswer.example8.    3600    IN      A       10.10.31.14
+biganswer.example8.    3600    IN      A       10.10.31.15
+biganswer.example8.    3600    IN      A       10.10.31.16
+biganswer.example8.    3600    IN      A       10.10.31.17
+biganswer.example8.    3600    IN      A       10.10.31.18
+biganswer.example8.    3600    IN      A       10.10.31.19
+biganswer.example8.    3600    IN      A       10.10.31.20
+biganswer.example8.    3600    IN      A       10.10.31.21
+biganswer.example8.    3600    IN      A       10.10.31.22
+biganswer.example8.    3600    IN      A       10.10.31.23
+biganswer.example8.    3600    IN      A       10.10.31.24
+biganswer.example8.    3600    IN      A       10.10.31.25
+biganswer.example8.    3600    IN      A       10.10.31.26
+biganswer.example8.    3600    IN      A       10.10.31.27
+biganswer.example8.    3600    IN      A       10.10.31.28
+biganswer.example8.    3600    IN      A       10.10.31.29
+biganswer.example8.    3600    IN      A       10.10.31.30
+biganswer.example8.    3600    IN      A       10.10.31.31
+biganswer.example8.    3600    IN      A       10.10.31.32
+biganswer.example8.    3600    IN      A       10.10.31.33
+biganswer.example8.    3600    IN      A       10.10.31.34
+biganswer.example8.    3600    IN      A       10.10.31.35
+biganswer.example8.    3600    IN      A       10.10.31.36
+biganswer.example8.    3600    IN      A       10.10.31.37
+biganswer.example8.    3600    IN      A       10.10.31.38
+biganswer.example8.    3600    IN      A       10.10.31.39
+biganswer.example8.    3600    IN      A       10.10.31.40
+biganswer.example8.    3600    IN      A       10.10.31.41
+biganswer.example8.    3600    IN      A       10.10.31.42
+biganswer.example8.    3600    IN      A       10.10.31.43
+biganswer.example8.    3600    IN      A       10.10.31.44
+biganswer.example8.    3600    IN      A       10.10.31.45
+biganswer.example8.    3600    IN      A       10.10.31.46
+biganswer.example8.    3600    IN      A       10.10.31.47
+biganswer.example8.    3600    IN      A       10.10.31.48
+biganswer.example8.    3600    IN      A       10.10.31.49
+biganswer.example8.    3600    IN      A       10.10.31.50
+biganswer.example8.    3600    IN      A       10.10.32.1
+biganswer.example8.    3600    IN      A       10.10.32.2
+biganswer.example8.    3600    IN      A       10.10.32.3
+biganswer.example8.    3600    IN      A       10.10.32.4
+biganswer.example8.    3600    IN      A       10.10.32.5
+biganswer.example8.    3600    IN      A       10.10.32.6
+biganswer.example8.    3600    IN      A       10.10.32.7
+biganswer.example8.    3600    IN      A       10.10.32.8
+biganswer.example8.    3600    IN      A       10.10.32.9
+biganswer.example8.    3600    IN      A       10.10.32.10
+biganswer.example8.    3600    IN      A       10.10.32.11
+biganswer.example8.    3600    IN      A       10.10.32.12
+biganswer.example8.    3600    IN      A       10.10.32.13
+biganswer.example8.    3600    IN      A       10.10.32.14
+biganswer.example8.    3600    IN      A       10.10.32.15
+biganswer.example8.    3600    IN      A       10.10.32.16
+biganswer.example8.    3600    IN      A       10.10.32.17
+biganswer.example8.    3600    IN      A       10.10.32.18
+biganswer.example8.    3600    IN      A       10.10.32.19
+biganswer.example8.    3600    IN      A       10.10.32.20
+biganswer.example8.    3600    IN      A       10.10.32.21
+biganswer.example8.    3600    IN      A       10.10.32.22
+biganswer.example8.    3600    IN      A       10.10.32.23
+biganswer.example8.    3600    IN      A       10.10.32.24
+biganswer.example8.    3600    IN      A       10.10.32.25
+biganswer.example8.    3600    IN      A       10.10.32.26
+biganswer.example8.    3600    IN      A       10.10.32.27
+biganswer.example8.    3600    IN      A       10.10.32.28
+biganswer.example8.    3600    IN      A       10.10.32.29
+biganswer.example8.    3600    IN      A       10.10.32.30
+biganswer.example8.    3600    IN      A       10.10.32.31
+biganswer.example8.    3600    IN      A       10.10.32.32
+biganswer.example8.    3600    IN      A       10.10.32.33
+biganswer.example8.    3600    IN      A       10.10.32.34
+biganswer.example8.    3600    IN      A       10.10.32.35
+biganswer.example8.    3600    IN      A       10.10.32.36
+biganswer.example8.    3600    IN      A       10.10.32.37
+biganswer.example8.    3600    IN      A       10.10.32.38
+biganswer.example8.    3600    IN      A       10.10.32.39
+biganswer.example8.    3600    IN      A       10.10.32.40
+biganswer.example8.    3600    IN      A       10.10.32.41
+biganswer.example8.    3600    IN      A       10.10.32.42
+biganswer.example8.    3600    IN      A       10.10.32.43
+biganswer.example8.    3600    IN      A       10.10.32.44
+biganswer.example8.    3600    IN      A       10.10.32.45
+biganswer.example8.    3600    IN      A       10.10.32.46
+biganswer.example8.    3600    IN      A       10.10.32.47
+biganswer.example8.    3600    IN      A       10.10.32.48
+biganswer.example8.    3600    IN      A       10.10.32.49
+biganswer.example8.    3600    IN      A       10.10.32.50
+biganswer.example8.    3600    IN      A       10.10.33.1
+biganswer.example8.    3600    IN      A       10.10.33.2
+biganswer.example8.    3600    IN      A       10.10.33.3
+biganswer.example8.    3600    IN      A       10.10.33.4
+biganswer.example8.    3600    IN      A       10.10.33.5
+biganswer.example8.    3600    IN      A       10.10.33.6
+biganswer.example8.    3600    IN      A       10.10.33.7
+biganswer.example8.    3600    IN      A       10.10.33.8
+biganswer.example8.    3600    IN      A       10.10.33.9
+biganswer.example8.    3600    IN      A       10.10.33.10
+biganswer.example8.    3600    IN      A       10.10.33.11
+biganswer.example8.    3600    IN      A       10.10.33.12
+biganswer.example8.    3600    IN      A       10.10.33.13
+biganswer.example8.    3600    IN      A       10.10.33.14
+biganswer.example8.    3600    IN      A       10.10.33.15
+biganswer.example8.    3600    IN      A       10.10.33.16
+biganswer.example8.    3600    IN      A       10.10.33.17
+biganswer.example8.    3600    IN      A       10.10.33.18
+biganswer.example8.    3600    IN      A       10.10.33.19
+biganswer.example8.    3600    IN      A       10.10.33.20
+biganswer.example8.    3600    IN      A       10.10.33.21
+biganswer.example8.    3600    IN      A       10.10.33.22
+biganswer.example8.    3600    IN      A       10.10.33.23
+biganswer.example8.    3600    IN      A       10.10.33.24
+biganswer.example8.    3600    IN      A       10.10.33.25
+biganswer.example8.    3600    IN      A       10.10.33.26
+biganswer.example8.    3600    IN      A       10.10.33.27
+biganswer.example8.    3600    IN      A       10.10.33.28
+biganswer.example8.    3600    IN      A       10.10.33.29
+biganswer.example8.    3600    IN      A       10.10.33.30
+biganswer.example8.    3600    IN      A       10.10.33.31
+biganswer.example8.    3600    IN      A       10.10.33.32
+biganswer.example8.    3600    IN      A       10.10.33.33
+biganswer.example8.    3600    IN      A       10.10.33.34
+biganswer.example8.    3600    IN      A       10.10.33.35
+biganswer.example8.    3600    IN      A       10.10.33.36
+biganswer.example8.    3600    IN      A       10.10.33.37
+biganswer.example8.    3600    IN      A       10.10.33.38
+biganswer.example8.    3600    IN      A       10.10.33.39
+biganswer.example8.    3600    IN      A       10.10.33.40
+biganswer.example8.    3600    IN      A       10.10.33.41
+biganswer.example8.    3600    IN      A       10.10.33.42
+biganswer.example8.    3600    IN      A       10.10.33.43
+biganswer.example8.    3600    IN      A       10.10.33.44
+biganswer.example8.    3600    IN      A       10.10.33.45
+biganswer.example8.    3600    IN      A       10.10.33.46
+biganswer.example8.    3600    IN      A       10.10.33.47
+biganswer.example8.    3600    IN      A       10.10.33.48
+biganswer.example8.    3600    IN      A       10.10.33.49
+biganswer.example8.    3600    IN      A       10.10.33.50
+biganswer.example8.    3600    IN      A       10.10.34.1
+biganswer.example8.    3600    IN      A       10.10.34.2
+biganswer.example8.    3600    IN      A       10.10.34.3
+biganswer.example8.    3600    IN      A       10.10.34.4
+biganswer.example8.    3600    IN      A       10.10.34.5
+biganswer.example8.    3600    IN      A       10.10.34.6
+biganswer.example8.    3600    IN      A       10.10.34.7
+biganswer.example8.    3600    IN      A       10.10.34.8
+biganswer.example8.    3600    IN      A       10.10.34.9
+biganswer.example8.    3600    IN      A       10.10.34.10
+biganswer.example8.    3600    IN      A       10.10.34.11
+biganswer.example8.    3600    IN      A       10.10.34.12
+biganswer.example8.    3600    IN      A       10.10.34.13
+biganswer.example8.    3600    IN      A       10.10.34.14
+biganswer.example8.    3600    IN      A       10.10.34.15
+biganswer.example8.    3600    IN      A       10.10.34.16
+biganswer.example8.    3600    IN      A       10.10.34.17
+biganswer.example8.    3600    IN      A       10.10.34.18
+biganswer.example8.    3600    IN      A       10.10.34.19
+biganswer.example8.    3600    IN      A       10.10.34.20
+biganswer.example8.    3600    IN      A       10.10.34.21
+biganswer.example8.    3600    IN      A       10.10.34.22
+biganswer.example8.    3600    IN      A       10.10.34.23
+biganswer.example8.    3600    IN      A       10.10.34.24
+biganswer.example8.    3600    IN      A       10.10.34.25
+biganswer.example8.    3600    IN      A       10.10.34.26
+biganswer.example8.    3600    IN      A       10.10.34.27
+biganswer.example8.    3600    IN      A       10.10.34.28
+biganswer.example8.    3600    IN      A       10.10.34.29
+biganswer.example8.    3600    IN      A       10.10.34.30
+biganswer.example8.    3600    IN      A       10.10.34.31
+biganswer.example8.    3600    IN      A       10.10.34.32
+biganswer.example8.    3600    IN      A       10.10.34.33
+biganswer.example8.    3600    IN      A       10.10.34.34
+biganswer.example8.    3600    IN      A       10.10.34.35
+biganswer.example8.    3600    IN      A       10.10.34.36
+biganswer.example8.    3600    IN      A       10.10.34.37
+biganswer.example8.    3600    IN      A       10.10.34.38
+biganswer.example8.    3600    IN      A       10.10.34.39
+biganswer.example8.    3600    IN      A       10.10.34.40
+biganswer.example8.    3600    IN      A       10.10.34.41
+biganswer.example8.    3600    IN      A       10.10.34.42
+biganswer.example8.    3600    IN      A       10.10.34.43
+biganswer.example8.    3600    IN      A       10.10.34.44
+biganswer.example8.    3600    IN      A       10.10.34.45
+biganswer.example8.    3600    IN      A       10.10.34.46
+biganswer.example8.    3600    IN      A       10.10.34.47
+biganswer.example8.    3600    IN      A       10.10.34.48
+biganswer.example8.    3600    IN      A       10.10.34.49
+biganswer.example8.    3600    IN      A       10.10.34.50
+biganswer.example8.    3600    IN      A       10.10.35.1
+biganswer.example8.    3600    IN      A       10.10.35.2
+biganswer.example8.    3600    IN      A       10.10.35.3
+biganswer.example8.    3600    IN      A       10.10.35.4
+biganswer.example8.    3600    IN      A       10.10.35.5
+biganswer.example8.    3600    IN      A       10.10.35.6
+biganswer.example8.    3600    IN      A       10.10.35.7
+biganswer.example8.    3600    IN      A       10.10.35.8
+biganswer.example8.    3600    IN      A       10.10.35.9
+biganswer.example8.    3600    IN      A       10.10.35.10
+biganswer.example8.    3600    IN      A       10.10.35.11
+biganswer.example8.    3600    IN      A       10.10.35.12
+biganswer.example8.    3600    IN      A       10.10.35.13
+biganswer.example8.    3600    IN      A       10.10.35.14
+biganswer.example8.    3600    IN      A       10.10.35.15
+biganswer.example8.    3600    IN      A       10.10.35.16
+biganswer.example8.    3600    IN      A       10.10.35.17
+biganswer.example8.    3600    IN      A       10.10.35.18
+biganswer.example8.    3600    IN      A       10.10.35.19
+biganswer.example8.    3600    IN      A       10.10.35.20
+biganswer.example8.    3600    IN      A       10.10.35.21
+biganswer.example8.    3600    IN      A       10.10.35.22
+biganswer.example8.    3600    IN      A       10.10.35.23
+biganswer.example8.    3600    IN      A       10.10.35.24
+biganswer.example8.    3600    IN      A       10.10.35.25
+biganswer.example8.    3600    IN      A       10.10.35.26
+biganswer.example8.    3600    IN      A       10.10.35.27
+biganswer.example8.    3600    IN      A       10.10.35.28
+biganswer.example8.    3600    IN      A       10.10.35.29
+biganswer.example8.    3600    IN      A       10.10.35.30
+biganswer.example8.    3600    IN      A       10.10.35.31
+biganswer.example8.    3600    IN      A       10.10.35.32
+biganswer.example8.    3600    IN      A       10.10.35.33
+biganswer.example8.    3600    IN      A       10.10.35.34
+biganswer.example8.    3600    IN      A       10.10.35.35
+biganswer.example8.    3600    IN      A       10.10.35.36
+biganswer.example8.    3600    IN      A       10.10.35.37
+biganswer.example8.    3600    IN      A       10.10.35.38
+biganswer.example8.    3600    IN      A       10.10.35.39
+biganswer.example8.    3600    IN      A       10.10.35.40
+biganswer.example8.    3600    IN      A       10.10.35.41
+biganswer.example8.    3600    IN      A       10.10.35.42
+biganswer.example8.    3600    IN      A       10.10.35.43
+biganswer.example8.    3600    IN      A       10.10.35.44
+biganswer.example8.    3600    IN      A       10.10.35.45
+biganswer.example8.    3600    IN      A       10.10.35.46
+biganswer.example8.    3600    IN      A       10.10.35.47
+biganswer.example8.    3600    IN      A       10.10.35.48
+biganswer.example8.    3600    IN      A       10.10.35.49
+biganswer.example8.    3600    IN      A       10.10.35.50
+biganswer.example8.    3600    IN      A       10.10.36.1
+biganswer.example8.    3600    IN      A       10.10.36.2
+biganswer.example8.    3600    IN      A       10.10.36.3
+biganswer.example8.    3600    IN      A       10.10.36.4
+biganswer.example8.    3600    IN      A       10.10.36.5
+biganswer.example8.    3600    IN      A       10.10.36.6
+biganswer.example8.    3600    IN      A       10.10.36.7
+biganswer.example8.    3600    IN      A       10.10.36.8
+biganswer.example8.    3600    IN      A       10.10.36.9
+biganswer.example8.    3600    IN      A       10.10.36.10
+biganswer.example8.    3600    IN      A       10.10.36.11
+biganswer.example8.    3600    IN      A       10.10.36.12
+biganswer.example8.    3600    IN      A       10.10.36.13
+biganswer.example8.    3600    IN      A       10.10.36.14
+biganswer.example8.    3600    IN      A       10.10.36.15
+biganswer.example8.    3600    IN      A       10.10.36.16
+biganswer.example8.    3600    IN      A       10.10.36.17
+biganswer.example8.    3600    IN      A       10.10.36.18
+biganswer.example8.    3600    IN      A       10.10.36.19
+biganswer.example8.    3600    IN      A       10.10.36.20
+biganswer.example8.    3600    IN      A       10.10.36.21
+biganswer.example8.    3600    IN      A       10.10.36.22
+biganswer.example8.    3600    IN      A       10.10.36.23
+biganswer.example8.    3600    IN      A       10.10.36.24
+biganswer.example8.    3600    IN      A       10.10.36.25
+biganswer.example8.    3600    IN      A       10.10.36.26
+biganswer.example8.    3600    IN      A       10.10.36.27
+biganswer.example8.    3600    IN      A       10.10.36.28
+biganswer.example8.    3600    IN      A       10.10.36.29
+biganswer.example8.    3600    IN      A       10.10.36.30
+biganswer.example8.    3600    IN      A       10.10.36.31
+biganswer.example8.    3600    IN      A       10.10.36.32
+biganswer.example8.    3600    IN      A       10.10.36.33
+biganswer.example8.    3600    IN      A       10.10.36.34
+biganswer.example8.    3600    IN      A       10.10.36.35
+biganswer.example8.    3600    IN      A       10.10.36.36
+biganswer.example8.    3600    IN      A       10.10.36.37
+biganswer.example8.    3600    IN      A       10.10.36.38
+biganswer.example8.    3600    IN      A       10.10.36.39
+biganswer.example8.    3600    IN      A       10.10.36.40
+biganswer.example8.    3600    IN      A       10.10.36.41
+biganswer.example8.    3600    IN      A       10.10.36.42
+biganswer.example8.    3600    IN      A       10.10.36.43
+biganswer.example8.    3600    IN      A       10.10.36.44
+biganswer.example8.    3600    IN      A       10.10.36.45
+biganswer.example8.    3600    IN      A       10.10.36.46
+biganswer.example8.    3600    IN      A       10.10.36.47
+biganswer.example8.    3600    IN      A       10.10.36.48
+biganswer.example8.    3600    IN      A       10.10.36.49
+biganswer.example8.    3600    IN      A       10.10.36.50
+biganswer.example8.    3600    IN      A       10.10.37.1
+biganswer.example8.    3600    IN      A       10.10.37.2
+biganswer.example8.    3600    IN      A       10.10.37.3
+biganswer.example8.    3600    IN      A       10.10.37.4
+biganswer.example8.    3600    IN      A       10.10.37.5
+biganswer.example8.    3600    IN      A       10.10.37.6
+biganswer.example8.    3600    IN      A       10.10.37.7
+biganswer.example8.    3600    IN      A       10.10.37.8
+biganswer.example8.    3600    IN      A       10.10.37.9
+biganswer.example8.    3600    IN      A       10.10.37.10
+biganswer.example8.    3600    IN      A       10.10.37.11
+biganswer.example8.    3600    IN      A       10.10.37.12
+biganswer.example8.    3600    IN      A       10.10.37.13
+biganswer.example8.    3600    IN      A       10.10.37.14
+biganswer.example8.    3600    IN      A       10.10.37.15
+biganswer.example8.    3600    IN      A       10.10.37.16
+biganswer.example8.    3600    IN      A       10.10.37.17
+biganswer.example8.    3600    IN      A       10.10.37.18
+biganswer.example8.    3600    IN      A       10.10.37.19
+biganswer.example8.    3600    IN      A       10.10.37.20
+biganswer.example8.    3600    IN      A       10.10.37.21
+biganswer.example8.    3600    IN      A       10.10.37.22
+biganswer.example8.    3600    IN      A       10.10.37.23
+biganswer.example8.    3600    IN      A       10.10.37.24
+biganswer.example8.    3600    IN      A       10.10.37.25
+biganswer.example8.    3600    IN      A       10.10.37.26
+biganswer.example8.    3600    IN      A       10.10.37.27
+biganswer.example8.    3600    IN      A       10.10.37.28
+biganswer.example8.    3600    IN      A       10.10.37.29
+biganswer.example8.    3600    IN      A       10.10.37.30
+biganswer.example8.    3600    IN      A       10.10.37.31
+biganswer.example8.    3600    IN      A       10.10.37.32
+biganswer.example8.    3600    IN      A       10.10.37.33
+biganswer.example8.    3600    IN      A       10.10.37.34
+biganswer.example8.    3600    IN      A       10.10.37.35
+biganswer.example8.    3600    IN      A       10.10.37.36
+biganswer.example8.    3600    IN      A       10.10.37.37
+biganswer.example8.    3600    IN      A       10.10.37.38
+biganswer.example8.    3600    IN      A       10.10.37.39
+biganswer.example8.    3600    IN      A       10.10.37.40
+biganswer.example8.    3600    IN      A       10.10.37.41
+biganswer.example8.    3600    IN      A       10.10.37.42
+biganswer.example8.    3600    IN      A       10.10.37.43
+biganswer.example8.    3600    IN      A       10.10.37.44
+biganswer.example8.    3600    IN      A       10.10.37.45
+biganswer.example8.    3600    IN      A       10.10.37.46
+biganswer.example8.    3600    IN      A       10.10.37.47
+biganswer.example8.    3600    IN      A       10.10.37.48
+biganswer.example8.    3600    IN      A       10.10.37.49
+biganswer.example8.    3600    IN      A       10.10.37.50
+biganswer.example8.    3600    IN      A       10.10.38.1
+biganswer.example8.    3600    IN      A       10.10.38.2
+biganswer.example8.    3600    IN      A       10.10.38.3
+biganswer.example8.    3600    IN      A       10.10.38.4
+biganswer.example8.    3600    IN      A       10.10.38.5
+biganswer.example8.    3600    IN      A       10.10.38.6
+biganswer.example8.    3600    IN      A       10.10.38.7
+biganswer.example8.    3600    IN      A       10.10.38.8
+biganswer.example8.    3600    IN      A       10.10.38.9
+biganswer.example8.    3600    IN      A       10.10.38.10
+biganswer.example8.    3600    IN      A       10.10.38.11
+biganswer.example8.    3600    IN      A       10.10.38.12
+biganswer.example8.    3600    IN      A       10.10.38.13
+biganswer.example8.    3600    IN      A       10.10.38.14
+biganswer.example8.    3600    IN      A       10.10.38.15
+biganswer.example8.    3600    IN      A       10.10.38.16
+biganswer.example8.    3600    IN      A       10.10.38.17
+biganswer.example8.    3600    IN      A       10.10.38.18
+biganswer.example8.    3600    IN      A       10.10.38.19
+biganswer.example8.    3600    IN      A       10.10.38.20
+biganswer.example8.    3600    IN      A       10.10.38.21
+biganswer.example8.    3600    IN      A       10.10.38.22
+biganswer.example8.    3600    IN      A       10.10.38.23
+biganswer.example8.    3600    IN      A       10.10.38.24
+biganswer.example8.    3600    IN      A       10.10.38.25
+biganswer.example8.    3600    IN      A       10.10.38.26
+biganswer.example8.    3600    IN      A       10.10.38.27
+biganswer.example8.    3600    IN      A       10.10.38.28
+biganswer.example8.    3600    IN      A       10.10.38.29
+biganswer.example8.    3600    IN      A       10.10.38.30
+biganswer.example8.    3600    IN      A       10.10.38.31
+biganswer.example8.    3600    IN      A       10.10.38.32
+biganswer.example8.    3600    IN      A       10.10.38.33
+biganswer.example8.    3600    IN      A       10.10.38.34
+biganswer.example8.    3600    IN      A       10.10.38.35
+biganswer.example8.    3600    IN      A       10.10.38.36
+biganswer.example8.    3600    IN      A       10.10.38.37
+biganswer.example8.    3600    IN      A       10.10.38.38
+biganswer.example8.    3600    IN      A       10.10.38.39
+biganswer.example8.    3600    IN      A       10.10.38.40
+biganswer.example8.    3600    IN      A       10.10.38.41
+biganswer.example8.    3600    IN      A       10.10.38.42
+biganswer.example8.    3600    IN      A       10.10.38.43
+biganswer.example8.    3600    IN      A       10.10.38.44
+biganswer.example8.    3600    IN      A       10.10.38.45
+biganswer.example8.    3600    IN      A       10.10.38.46
+biganswer.example8.    3600    IN      A       10.10.38.47
+biganswer.example8.    3600    IN      A       10.10.38.48
+biganswer.example8.    3600    IN      A       10.10.38.49
+biganswer.example8.    3600    IN      A       10.10.38.50
+biganswer.example8.    3600    IN      A       10.10.39.1
+biganswer.example8.    3600    IN      A       10.10.39.2
+biganswer.example8.    3600    IN      A       10.10.39.3
+biganswer.example8.    3600    IN      A       10.10.39.4
+biganswer.example8.    3600    IN      A       10.10.39.5
+biganswer.example8.    3600    IN      A       10.10.39.6
+biganswer.example8.    3600    IN      A       10.10.39.7
+biganswer.example8.    3600    IN      A       10.10.39.8
+biganswer.example8.    3600    IN      A       10.10.39.9
+biganswer.example8.    3600    IN      A       10.10.39.10
+biganswer.example8.    3600    IN      A       10.10.39.11
+biganswer.example8.    3600    IN      A       10.10.39.12
+biganswer.example8.    3600    IN      A       10.10.39.13
+biganswer.example8.    3600    IN      A       10.10.39.14
+biganswer.example8.    3600    IN      A       10.10.39.15
+biganswer.example8.    3600    IN      A       10.10.39.16
+biganswer.example8.    3600    IN      A       10.10.39.17
+biganswer.example8.    3600    IN      A       10.10.39.18
+biganswer.example8.    3600    IN      A       10.10.39.19
+biganswer.example8.    3600    IN      A       10.10.39.20
+biganswer.example8.    3600    IN      A       10.10.39.21
+biganswer.example8.    3600    IN      A       10.10.39.22
+biganswer.example8.    3600    IN      A       10.10.39.23
+biganswer.example8.    3600    IN      A       10.10.39.24
+biganswer.example8.    3600    IN      A       10.10.39.25
+biganswer.example8.    3600    IN      A       10.10.39.26
+biganswer.example8.    3600    IN      A       10.10.39.27
+biganswer.example8.    3600    IN      A       10.10.39.28
+biganswer.example8.    3600    IN      A       10.10.39.29
+biganswer.example8.    3600    IN      A       10.10.39.30
+biganswer.example8.    3600    IN      A       10.10.39.31
+biganswer.example8.    3600    IN      A       10.10.39.32
+biganswer.example8.    3600    IN      A       10.10.39.33
+biganswer.example8.    3600    IN      A       10.10.39.34
+biganswer.example8.    3600    IN      A       10.10.39.35
+biganswer.example8.    3600    IN      A       10.10.39.36
+biganswer.example8.    3600    IN      A       10.10.39.37
+biganswer.example8.    3600    IN      A       10.10.39.38
+biganswer.example8.    3600    IN      A       10.10.39.39
+biganswer.example8.    3600    IN      A       10.10.39.40
+biganswer.example8.    3600    IN      A       10.10.39.41
+biganswer.example8.    3600    IN      A       10.10.39.42
+biganswer.example8.    3600    IN      A       10.10.39.43
+biganswer.example8.    3600    IN      A       10.10.39.44
+biganswer.example8.    3600    IN      A       10.10.39.45
+biganswer.example8.    3600    IN      A       10.10.39.46
+biganswer.example8.    3600    IN      A       10.10.39.47
+biganswer.example8.    3600    IN      A       10.10.39.48
+biganswer.example8.    3600    IN      A       10.10.39.49
+biganswer.example8.    3600    IN      A       10.10.39.50
+biganswer.example8.    3600    IN      A       10.10.40.1
+biganswer.example8.    3600    IN      A       10.10.40.2
+biganswer.example8.    3600    IN      A       10.10.40.3
+biganswer.example8.    3600    IN      A       10.10.40.4
+biganswer.example8.    3600    IN      A       10.10.40.5
+biganswer.example8.    3600    IN      A       10.10.40.6
+biganswer.example8.    3600    IN      A       10.10.40.7
+biganswer.example8.    3600    IN      A       10.10.40.8
+biganswer.example8.    3600    IN      A       10.10.40.9
+biganswer.example8.    3600    IN      A       10.10.40.10
+biganswer.example8.    3600    IN      A       10.10.40.11
+biganswer.example8.    3600    IN      A       10.10.40.12
+biganswer.example8.    3600    IN      A       10.10.40.13
+biganswer.example8.    3600    IN      A       10.10.40.14
+biganswer.example8.    3600    IN      A       10.10.40.15
+biganswer.example8.    3600    IN      A       10.10.40.16
+biganswer.example8.    3600    IN      A       10.10.40.17
+biganswer.example8.    3600    IN      A       10.10.40.18
+biganswer.example8.    3600    IN      A       10.10.40.19
+biganswer.example8.    3600    IN      A       10.10.40.20
+biganswer.example8.    3600    IN      A       10.10.40.21
+biganswer.example8.    3600    IN      A       10.10.40.22
+biganswer.example8.    3600    IN      A       10.10.40.23
+biganswer.example8.    3600    IN      A       10.10.40.24
+biganswer.example8.    3600    IN      A       10.10.40.25
+biganswer.example8.    3600    IN      A       10.10.40.26
+biganswer.example8.    3600    IN      A       10.10.40.27
+biganswer.example8.    3600    IN      A       10.10.40.28
+biganswer.example8.    3600    IN      A       10.10.40.29
+biganswer.example8.    3600    IN      A       10.10.40.30
+biganswer.example8.    3600    IN      A       10.10.40.31
+biganswer.example8.    3600    IN      A       10.10.40.32
+biganswer.example8.    3600    IN      A       10.10.40.33
+biganswer.example8.    3600    IN      A       10.10.40.34
+biganswer.example8.    3600    IN      A       10.10.40.35
+biganswer.example8.    3600    IN      A       10.10.40.36
+biganswer.example8.    3600    IN      A       10.10.40.37
+biganswer.example8.    3600    IN      A       10.10.40.38
+biganswer.example8.    3600    IN      A       10.10.40.39
+biganswer.example8.    3600    IN      A       10.10.40.40
+biganswer.example8.    3600    IN      A       10.10.40.41
+biganswer.example8.    3600    IN      A       10.10.40.42
+biganswer.example8.    3600    IN      A       10.10.40.43
+biganswer.example8.    3600    IN      A       10.10.40.44
+biganswer.example8.    3600    IN      A       10.10.40.45
+biganswer.example8.    3600    IN      A       10.10.40.46
+biganswer.example8.    3600    IN      A       10.10.40.47
+biganswer.example8.    3600    IN      A       10.10.40.48
+biganswer.example8.    3600    IN      A       10.10.40.49
+biganswer.example8.    3600    IN      A       10.10.40.50
+biganswer.example8.    3600    IN      A       10.10.41.1
+biganswer.example8.    3600    IN      A       10.10.41.2
+biganswer.example8.    3600    IN      A       10.10.41.3
+biganswer.example8.    3600    IN      A       10.10.41.4
+biganswer.example8.    3600    IN      A       10.10.41.5
+biganswer.example8.    3600    IN      A       10.10.41.6
+biganswer.example8.    3600    IN      A       10.10.41.7
+biganswer.example8.    3600    IN      A       10.10.41.8
+biganswer.example8.    3600    IN      A       10.10.41.9
+biganswer.example8.    3600    IN      A       10.10.41.10
+biganswer.example8.    3600    IN      A       10.10.41.11
+biganswer.example8.    3600    IN      A       10.10.41.12
+biganswer.example8.    3600    IN      A       10.10.41.13
+biganswer.example8.    3600    IN      A       10.10.41.14
+biganswer.example8.    3600    IN      A       10.10.41.15
+biganswer.example8.    3600    IN      A       10.10.41.16
+biganswer.example8.    3600    IN      A       10.10.41.17
+biganswer.example8.    3600    IN      A       10.10.41.18
+biganswer.example8.    3600    IN      A       10.10.41.19
+biganswer.example8.    3600    IN      A       10.10.41.20
+biganswer.example8.    3600    IN      A       10.10.41.21
+biganswer.example8.    3600    IN      A       10.10.41.22
+biganswer.example8.    3600    IN      A       10.10.41.23
+biganswer.example8.    3600    IN      A       10.10.41.24
+biganswer.example8.    3600    IN      A       10.10.41.25
+biganswer.example8.    3600    IN      A       10.10.41.26
+biganswer.example8.    3600    IN      A       10.10.41.27
+biganswer.example8.    3600    IN      A       10.10.41.28
+biganswer.example8.    3600    IN      A       10.10.41.29
+biganswer.example8.    3600    IN      A       10.10.41.30
+biganswer.example8.    3600    IN      A       10.10.41.31
+biganswer.example8.    3600    IN      A       10.10.41.32
+biganswer.example8.    3600    IN      A       10.10.41.33
+biganswer.example8.    3600    IN      A       10.10.41.34
+biganswer.example8.    3600    IN      A       10.10.41.35
+biganswer.example8.    3600    IN      A       10.10.41.36
+biganswer.example8.    3600    IN      A       10.10.41.37
+biganswer.example8.    3600    IN      A       10.10.41.38
+biganswer.example8.    3600    IN      A       10.10.41.39
+biganswer.example8.    3600    IN      A       10.10.41.40
+biganswer.example8.    3600    IN      A       10.10.41.41
+biganswer.example8.    3600    IN      A       10.10.41.42
+biganswer.example8.    3600    IN      A       10.10.41.43
+biganswer.example8.    3600    IN      A       10.10.41.44
+biganswer.example8.    3600    IN      A       10.10.41.45
+biganswer.example8.    3600    IN      A       10.10.41.46
+biganswer.example8.    3600    IN      A       10.10.41.47
+biganswer.example8.    3600    IN      A       10.10.41.48
+biganswer.example8.    3600    IN      A       10.10.41.49
+biganswer.example8.    3600    IN      A       10.10.41.50
+biganswer.example8.    3600    IN      A       10.10.42.1
+biganswer.example8.    3600    IN      A       10.10.42.2
+biganswer.example8.    3600    IN      A       10.10.42.3
+biganswer.example8.    3600    IN      A       10.10.42.4
+biganswer.example8.    3600    IN      A       10.10.42.5
+biganswer.example8.    3600    IN      A       10.10.42.6
+biganswer.example8.    3600    IN      A       10.10.42.7
+biganswer.example8.    3600    IN      A       10.10.42.8
+biganswer.example8.    3600    IN      A       10.10.42.9
+biganswer.example8.    3600    IN      A       10.10.42.10
+biganswer.example8.    3600    IN      A       10.10.42.11
+biganswer.example8.    3600    IN      A       10.10.42.12
+biganswer.example8.    3600    IN      A       10.10.42.13
+biganswer.example8.    3600    IN      A       10.10.42.14
+biganswer.example8.    3600    IN      A       10.10.42.15
+biganswer.example8.    3600    IN      A       10.10.42.16
+biganswer.example8.    3600    IN      A       10.10.42.17
+biganswer.example8.    3600    IN      A       10.10.42.18
+biganswer.example8.    3600    IN      A       10.10.42.19
+biganswer.example8.    3600    IN      A       10.10.42.20
+biganswer.example8.    3600    IN      A       10.10.42.21
+biganswer.example8.    3600    IN      A       10.10.42.22
+biganswer.example8.    3600    IN      A       10.10.42.23
+biganswer.example8.    3600    IN      A       10.10.42.24
+biganswer.example8.    3600    IN      A       10.10.42.25
+biganswer.example8.    3600    IN      A       10.10.42.26
+biganswer.example8.    3600    IN      A       10.10.42.27
+biganswer.example8.    3600    IN      A       10.10.42.28
+biganswer.example8.    3600    IN      A       10.10.42.29
+biganswer.example8.    3600    IN      A       10.10.42.30
+biganswer.example8.    3600    IN      A       10.10.42.31
+biganswer.example8.    3600    IN      A       10.10.42.32
+biganswer.example8.    3600    IN      A       10.10.42.33
+biganswer.example8.    3600    IN      A       10.10.42.34
+biganswer.example8.    3600    IN      A       10.10.42.35
+biganswer.example8.    3600    IN      A       10.10.42.36
+biganswer.example8.    3600    IN      A       10.10.42.37
+biganswer.example8.    3600    IN      A       10.10.42.38
+biganswer.example8.    3600    IN      A       10.10.42.39
+biganswer.example8.    3600    IN      A       10.10.42.40
+biganswer.example8.    3600    IN      A       10.10.42.41
+biganswer.example8.    3600    IN      A       10.10.42.42
+biganswer.example8.    3600    IN      A       10.10.42.43
+biganswer.example8.    3600    IN      A       10.10.42.44
+biganswer.example8.    3600    IN      A       10.10.42.45
+biganswer.example8.    3600    IN      A       10.10.42.46
+biganswer.example8.    3600    IN      A       10.10.42.47
+biganswer.example8.    3600    IN      A       10.10.42.48
+biganswer.example8.    3600    IN      A       10.10.42.49
+biganswer.example8.    3600    IN      A       10.10.42.50
+biganswer.example8.    3600    IN      A       10.10.43.1
+biganswer.example8.    3600    IN      A       10.10.43.2
+biganswer.example8.    3600    IN      A       10.10.43.3
+biganswer.example8.    3600    IN      A       10.10.43.4
+biganswer.example8.    3600    IN      A       10.10.43.5
+biganswer.example8.    3600    IN      A       10.10.43.6
+biganswer.example8.    3600    IN      A       10.10.43.7
+biganswer.example8.    3600    IN      A       10.10.43.8
+biganswer.example8.    3600    IN      A       10.10.43.9
+biganswer.example8.    3600    IN      A       10.10.43.10
+biganswer.example8.    3600    IN      A       10.10.43.11
+biganswer.example8.    3600    IN      A       10.10.43.12
+biganswer.example8.    3600    IN      A       10.10.43.13
+biganswer.example8.    3600    IN      A       10.10.43.14
+biganswer.example8.    3600    IN      A       10.10.43.15
+biganswer.example8.    3600    IN      A       10.10.43.16
+biganswer.example8.    3600    IN      A       10.10.43.17
+biganswer.example8.    3600    IN      A       10.10.43.18
+biganswer.example8.    3600    IN      A       10.10.43.19
+biganswer.example8.    3600    IN      A       10.10.43.20
+biganswer.example8.    3600    IN      A       10.10.43.21
+biganswer.example8.    3600    IN      A       10.10.43.22
+biganswer.example8.    3600    IN      A       10.10.43.23
+biganswer.example8.    3600    IN      A       10.10.43.24
+biganswer.example8.    3600    IN      A       10.10.43.25
+biganswer.example8.    3600    IN      A       10.10.43.26
+biganswer.example8.    3600    IN      A       10.10.43.27
+biganswer.example8.    3600    IN      A       10.10.43.28
+biganswer.example8.    3600    IN      A       10.10.43.29
+biganswer.example8.    3600    IN      A       10.10.43.30
+biganswer.example8.    3600    IN      A       10.10.43.31
+biganswer.example8.    3600    IN      A       10.10.43.32
+biganswer.example8.    3600    IN      A       10.10.43.33
+biganswer.example8.    3600    IN      A       10.10.43.34
+biganswer.example8.    3600    IN      A       10.10.43.35
+biganswer.example8.    3600    IN      A       10.10.43.36
+biganswer.example8.    3600    IN      A       10.10.43.37
+biganswer.example8.    3600    IN      A       10.10.43.38
+biganswer.example8.    3600    IN      A       10.10.43.39
+biganswer.example8.    3600    IN      A       10.10.43.40
+biganswer.example8.    3600    IN      A       10.10.43.41
+biganswer.example8.    3600    IN      A       10.10.43.42
+biganswer.example8.    3600    IN      A       10.10.43.43
+biganswer.example8.    3600    IN      A       10.10.43.44
+biganswer.example8.    3600    IN      A       10.10.43.45
+biganswer.example8.    3600    IN      A       10.10.43.46
+biganswer.example8.    3600    IN      A       10.10.43.47
+biganswer.example8.    3600    IN      A       10.10.43.48
+biganswer.example8.    3600    IN      A       10.10.43.49
+biganswer.example8.    3600    IN      A       10.10.43.50
+biganswer.example8.    3600    IN      A       10.10.44.1
+biganswer.example8.    3600    IN      A       10.10.44.2
+biganswer.example8.    3600    IN      A       10.10.44.3
+biganswer.example8.    3600    IN      A       10.10.44.4
+biganswer.example8.    3600    IN      A       10.10.44.5
+biganswer.example8.    3600    IN      A       10.10.44.6
+biganswer.example8.    3600    IN      A       10.10.44.7
+biganswer.example8.    3600    IN      A       10.10.44.8
+biganswer.example8.    3600    IN      A       10.10.44.9
+biganswer.example8.    3600    IN      A       10.10.44.10
+biganswer.example8.    3600    IN      A       10.10.44.11
+biganswer.example8.    3600    IN      A       10.10.44.12
+biganswer.example8.    3600    IN      A       10.10.44.13
+biganswer.example8.    3600    IN      A       10.10.44.14
+biganswer.example8.    3600    IN      A       10.10.44.15
+biganswer.example8.    3600    IN      A       10.10.44.16
+biganswer.example8.    3600    IN      A       10.10.44.17
+biganswer.example8.    3600    IN      A       10.10.44.18
+biganswer.example8.    3600    IN      A       10.10.44.19
+biganswer.example8.    3600    IN      A       10.10.44.20
+biganswer.example8.    3600    IN      A       10.10.44.21
+biganswer.example8.    3600    IN      A       10.10.44.22
+biganswer.example8.    3600    IN      A       10.10.44.23
+biganswer.example8.    3600    IN      A       10.10.44.24
+biganswer.example8.    3600    IN      A       10.10.44.25
+biganswer.example8.    3600    IN      A       10.10.44.26
+biganswer.example8.    3600    IN      A       10.10.44.27
+biganswer.example8.    3600    IN      A       10.10.44.28
+biganswer.example8.    3600    IN      A       10.10.44.29
+biganswer.example8.    3600    IN      A       10.10.44.30
+biganswer.example8.    3600    IN      A       10.10.44.31
+biganswer.example8.    3600    IN      A       10.10.44.32
+biganswer.example8.    3600    IN      A       10.10.44.33
+biganswer.example8.    3600    IN      A       10.10.44.34
+biganswer.example8.    3600    IN      A       10.10.44.35
+biganswer.example8.    3600    IN      A       10.10.44.36
+biganswer.example8.    3600    IN      A       10.10.44.37
+biganswer.example8.    3600    IN      A       10.10.44.38
+biganswer.example8.    3600    IN      A       10.10.44.39
+biganswer.example8.    3600    IN      A       10.10.44.40
+biganswer.example8.    3600    IN      A       10.10.44.41
+biganswer.example8.    3600    IN      A       10.10.44.42
+biganswer.example8.    3600    IN      A       10.10.44.43
+biganswer.example8.    3600    IN      A       10.10.44.44
+biganswer.example8.    3600    IN      A       10.10.44.45
+biganswer.example8.    3600    IN      A       10.10.44.46
+biganswer.example8.    3600    IN      A       10.10.44.47
+biganswer.example8.    3600    IN      A       10.10.44.48
+biganswer.example8.    3600    IN      A       10.10.44.49
+biganswer.example8.    3600    IN      A       10.10.44.50
+biganswer.example8.    3600    IN      A       10.10.45.1
+biganswer.example8.    3600    IN      A       10.10.45.2
+biganswer.example8.    3600    IN      A       10.10.45.3
+biganswer.example8.    3600    IN      A       10.10.45.4
+biganswer.example8.    3600    IN      A       10.10.45.5
+biganswer.example8.    3600    IN      A       10.10.45.6
+biganswer.example8.    3600    IN      A       10.10.45.7
+biganswer.example8.    3600    IN      A       10.10.45.8
+biganswer.example8.    3600    IN      A       10.10.45.9
+biganswer.example8.    3600    IN      A       10.10.45.10
+biganswer.example8.    3600    IN      A       10.10.45.11
+biganswer.example8.    3600    IN      A       10.10.45.12
+biganswer.example8.    3600    IN      A       10.10.45.13
+biganswer.example8.    3600    IN      A       10.10.45.14
+biganswer.example8.    3600    IN      A       10.10.45.15
+biganswer.example8.    3600    IN      A       10.10.45.16
+biganswer.example8.    3600    IN      A       10.10.45.17
+biganswer.example8.    3600    IN      A       10.10.45.18
+biganswer.example8.    3600    IN      A       10.10.45.19
+biganswer.example8.    3600    IN      A       10.10.45.20
+biganswer.example8.    3600    IN      A       10.10.45.21
+biganswer.example8.    3600    IN      A       10.10.45.22
+biganswer.example8.    3600    IN      A       10.10.45.23
+biganswer.example8.    3600    IN      A       10.10.45.24
+biganswer.example8.    3600    IN      A       10.10.45.25
+biganswer.example8.    3600    IN      A       10.10.45.26
+biganswer.example8.    3600    IN      A       10.10.45.27
+biganswer.example8.    3600    IN      A       10.10.45.28
+biganswer.example8.    3600    IN      A       10.10.45.29
+biganswer.example8.    3600    IN      A       10.10.45.30
+biganswer.example8.    3600    IN      A       10.10.45.31
+biganswer.example8.    3600    IN      A       10.10.45.32
+biganswer.example8.    3600    IN      A       10.10.45.33
+biganswer.example8.    3600    IN      A       10.10.45.34
+biganswer.example8.    3600    IN      A       10.10.45.35
+biganswer.example8.    3600    IN      A       10.10.45.36
+biganswer.example8.    3600    IN      A       10.10.45.37
+biganswer.example8.    3600    IN      A       10.10.45.38
+biganswer.example8.    3600    IN      A       10.10.45.39
+biganswer.example8.    3600    IN      A       10.10.45.40
+biganswer.example8.    3600    IN      A       10.10.45.41
+biganswer.example8.    3600    IN      A       10.10.45.42
+biganswer.example8.    3600    IN      A       10.10.45.43
+biganswer.example8.    3600    IN      A       10.10.45.44
+biganswer.example8.    3600    IN      A       10.10.45.45
+biganswer.example8.    3600    IN      A       10.10.45.46
+biganswer.example8.    3600    IN      A       10.10.45.47
+biganswer.example8.    3600    IN      A       10.10.45.48
+biganswer.example8.    3600    IN      A       10.10.45.49
+biganswer.example8.    3600    IN      A       10.10.45.50
+biganswer.example8.    3600    IN      A       10.10.46.1
+biganswer.example8.    3600    IN      A       10.10.46.2
+biganswer.example8.    3600    IN      A       10.10.46.3
+biganswer.example8.    3600    IN      A       10.10.46.4
+biganswer.example8.    3600    IN      A       10.10.46.5
+biganswer.example8.    3600    IN      A       10.10.46.6
+biganswer.example8.    3600    IN      A       10.10.46.7
+biganswer.example8.    3600    IN      A       10.10.46.8
+biganswer.example8.    3600    IN      A       10.10.46.9
+biganswer.example8.    3600    IN      A       10.10.46.10
+biganswer.example8.    3600    IN      A       10.10.46.11
+biganswer.example8.    3600    IN      A       10.10.46.12
+biganswer.example8.    3600    IN      A       10.10.46.13
+biganswer.example8.    3600    IN      A       10.10.46.14
+biganswer.example8.    3600    IN      A       10.10.46.15
+biganswer.example8.    3600    IN      A       10.10.46.16
+biganswer.example8.    3600    IN      A       10.10.46.17
+biganswer.example8.    3600    IN      A       10.10.46.18
+biganswer.example8.    3600    IN      A       10.10.46.19
+biganswer.example8.    3600    IN      A       10.10.46.20
+biganswer.example8.    3600    IN      A       10.10.46.21
+biganswer.example8.    3600    IN      A       10.10.46.22
+biganswer.example8.    3600    IN      A       10.10.46.23
+biganswer.example8.    3600    IN      A       10.10.46.24
+biganswer.example8.    3600    IN      A       10.10.46.25
+biganswer.example8.    3600    IN      A       10.10.46.26
+biganswer.example8.    3600    IN      A       10.10.46.27
+biganswer.example8.    3600    IN      A       10.10.46.28
+biganswer.example8.    3600    IN      A       10.10.46.29
+biganswer.example8.    3600    IN      A       10.10.46.30
+biganswer.example8.    3600    IN      A       10.10.46.31
+biganswer.example8.    3600    IN      A       10.10.46.32
+biganswer.example8.    3600    IN      A       10.10.46.33
+biganswer.example8.    3600    IN      A       10.10.46.34
+biganswer.example8.    3600    IN      A       10.10.46.35
+biganswer.example8.    3600    IN      A       10.10.46.36
+biganswer.example8.    3600    IN      A       10.10.46.37
+biganswer.example8.    3600    IN      A       10.10.46.38
+biganswer.example8.    3600    IN      A       10.10.46.39
+biganswer.example8.    3600    IN      A       10.10.46.40
+biganswer.example8.    3600    IN      A       10.10.46.41
+biganswer.example8.    3600    IN      A       10.10.46.42
+biganswer.example8.    3600    IN      A       10.10.46.43
+biganswer.example8.    3600    IN      A       10.10.46.44
+biganswer.example8.    3600    IN      A       10.10.46.45
+biganswer.example8.    3600    IN      A       10.10.46.46
+biganswer.example8.    3600    IN      A       10.10.46.47
+biganswer.example8.    3600    IN      A       10.10.46.48
+biganswer.example8.    3600    IN      A       10.10.46.49
+biganswer.example8.    3600    IN      A       10.10.46.50
+biganswer.example8.    3600    IN      A       10.10.47.1
+biganswer.example8.    3600    IN      A       10.10.47.2
+biganswer.example8.    3600    IN      A       10.10.47.3
+biganswer.example8.    3600    IN      A       10.10.47.4
+biganswer.example8.    3600    IN      A       10.10.47.5
+biganswer.example8.    3600    IN      A       10.10.47.6
+biganswer.example8.    3600    IN      A       10.10.47.7
+biganswer.example8.    3600    IN      A       10.10.47.8
+biganswer.example8.    3600    IN      A       10.10.47.9
+biganswer.example8.    3600    IN      A       10.10.47.10
+biganswer.example8.    3600    IN      A       10.10.47.11
+biganswer.example8.    3600    IN      A       10.10.47.12
+biganswer.example8.    3600    IN      A       10.10.47.13
+biganswer.example8.    3600    IN      A       10.10.47.14
+biganswer.example8.    3600    IN      A       10.10.47.15
+biganswer.example8.    3600    IN      A       10.10.47.16
+biganswer.example8.    3600    IN      A       10.10.47.17
+biganswer.example8.    3600    IN      A       10.10.47.18
+biganswer.example8.    3600    IN      A       10.10.47.19
+biganswer.example8.    3600    IN      A       10.10.47.20
+biganswer.example8.    3600    IN      A       10.10.47.21
+biganswer.example8.    3600    IN      A       10.10.47.22
+biganswer.example8.    3600    IN      A       10.10.47.23
+biganswer.example8.    3600    IN      A       10.10.47.24
+biganswer.example8.    3600    IN      A       10.10.47.25
+biganswer.example8.    3600    IN      A       10.10.47.26
+biganswer.example8.    3600    IN      A       10.10.47.27
+biganswer.example8.    3600    IN      A       10.10.47.28
+biganswer.example8.    3600    IN      A       10.10.47.29
+biganswer.example8.    3600    IN      A       10.10.47.30
+biganswer.example8.    3600    IN      A       10.10.47.31
+biganswer.example8.    3600    IN      A       10.10.47.32
+biganswer.example8.    3600    IN      A       10.10.47.33
+biganswer.example8.    3600    IN      A       10.10.47.34
+biganswer.example8.    3600    IN      A       10.10.47.35
+biganswer.example8.    3600    IN      A       10.10.47.36
+biganswer.example8.    3600    IN      A       10.10.47.37
+biganswer.example8.    3600    IN      A       10.10.47.38
+biganswer.example8.    3600    IN      A       10.10.47.39
+biganswer.example8.    3600    IN      A       10.10.47.40
+biganswer.example8.    3600    IN      A       10.10.47.41
+biganswer.example8.    3600    IN      A       10.10.47.42
+biganswer.example8.    3600    IN      A       10.10.47.43
+biganswer.example8.    3600    IN      A       10.10.47.44
+biganswer.example8.    3600    IN      A       10.10.47.45
+biganswer.example8.    3600    IN      A       10.10.47.46
+biganswer.example8.    3600    IN      A       10.10.47.47
+biganswer.example8.    3600    IN      A       10.10.47.48
+biganswer.example8.    3600    IN      A       10.10.47.49
+biganswer.example8.    3600    IN      A       10.10.47.50
+biganswer.example8.    3600    IN      A       10.10.48.1
+biganswer.example8.    3600    IN      A       10.10.48.2
+biganswer.example8.    3600    IN      A       10.10.48.3
+biganswer.example8.    3600    IN      A       10.10.48.4
+biganswer.example8.    3600    IN      A       10.10.48.5
+biganswer.example8.    3600    IN      A       10.10.48.6
+biganswer.example8.    3600    IN      A       10.10.48.7
+biganswer.example8.    3600    IN      A       10.10.48.8
+biganswer.example8.    3600    IN      A       10.10.48.9
+biganswer.example8.    3600    IN      A       10.10.48.10
+biganswer.example8.    3600    IN      A       10.10.48.11
+biganswer.example8.    3600    IN      A       10.10.48.12
+biganswer.example8.    3600    IN      A       10.10.48.13
+biganswer.example8.    3600    IN      A       10.10.48.14
+biganswer.example8.    3600    IN      A       10.10.48.15
+biganswer.example8.    3600    IN      A       10.10.48.16
+biganswer.example8.    3600    IN      A       10.10.48.17
+biganswer.example8.    3600    IN      A       10.10.48.18
+biganswer.example8.    3600    IN      A       10.10.48.19
+biganswer.example8.    3600    IN      A       10.10.48.20
+biganswer.example8.    3600    IN      A       10.10.48.21
+biganswer.example8.    3600    IN      A       10.10.48.22
+biganswer.example8.    3600    IN      A       10.10.48.23
+biganswer.example8.    3600    IN      A       10.10.48.24
+biganswer.example8.    3600    IN      A       10.10.48.25
+biganswer.example8.    3600    IN      A       10.10.48.26
+biganswer.example8.    3600    IN      A       10.10.48.27
+biganswer.example8.    3600    IN      A       10.10.48.28
+biganswer.example8.    3600    IN      A       10.10.48.29
+biganswer.example8.    3600    IN      A       10.10.48.30
+biganswer.example8.    3600    IN      A       10.10.48.31
+biganswer.example8.    3600    IN      A       10.10.48.32
+biganswer.example8.    3600    IN      A       10.10.48.33
+biganswer.example8.    3600    IN      A       10.10.48.34
+biganswer.example8.    3600    IN      A       10.10.48.35
+biganswer.example8.    3600    IN      A       10.10.48.36
+biganswer.example8.    3600    IN      A       10.10.48.37
+biganswer.example8.    3600    IN      A       10.10.48.38
+biganswer.example8.    3600    IN      A       10.10.48.39
+biganswer.example8.    3600    IN      A       10.10.48.40
+biganswer.example8.    3600    IN      A       10.10.48.41
+biganswer.example8.    3600    IN      A       10.10.48.42
+biganswer.example8.    3600    IN      A       10.10.48.43
+biganswer.example8.    3600    IN      A       10.10.48.44
+biganswer.example8.    3600    IN      A       10.10.48.45
+biganswer.example8.    3600    IN      A       10.10.48.46
+biganswer.example8.    3600    IN      A       10.10.48.47
+biganswer.example8.    3600    IN      A       10.10.48.48
+biganswer.example8.    3600    IN      A       10.10.48.49
+biganswer.example8.    3600    IN      A       10.10.48.50
+biganswer.example8.    3600    IN      A       10.10.49.1
+biganswer.example8.    3600    IN      A       10.10.49.2
+biganswer.example8.    3600    IN      A       10.10.49.3
+biganswer.example8.    3600    IN      A       10.10.49.4
+biganswer.example8.    3600    IN      A       10.10.49.5
+biganswer.example8.    3600    IN      A       10.10.49.6
+biganswer.example8.    3600    IN      A       10.10.49.7
+biganswer.example8.    3600    IN      A       10.10.49.8
+biganswer.example8.    3600    IN      A       10.10.49.9
+biganswer.example8.    3600    IN      A       10.10.49.10
+biganswer.example8.    3600    IN      A       10.10.49.11
+biganswer.example8.    3600    IN      A       10.10.49.12
+biganswer.example8.    3600    IN      A       10.10.49.13
+biganswer.example8.    3600    IN      A       10.10.49.14
+biganswer.example8.    3600    IN      A       10.10.49.15
+biganswer.example8.    3600    IN      A       10.10.49.16
+biganswer.example8.    3600    IN      A       10.10.49.17
+biganswer.example8.    3600    IN      A       10.10.49.18
+biganswer.example8.    3600    IN      A       10.10.49.19
+biganswer.example8.    3600    IN      A       10.10.49.20
+biganswer.example8.    3600    IN      A       10.10.49.21
+biganswer.example8.    3600    IN      A       10.10.49.22
+biganswer.example8.    3600    IN      A       10.10.49.23
+biganswer.example8.    3600    IN      A       10.10.49.24
+biganswer.example8.    3600    IN      A       10.10.49.25
+biganswer.example8.    3600    IN      A       10.10.49.26
+biganswer.example8.    3600    IN      A       10.10.49.27
+biganswer.example8.    3600    IN      A       10.10.49.28
+biganswer.example8.    3600    IN      A       10.10.49.29
+biganswer.example8.    3600    IN      A       10.10.49.30
+biganswer.example8.    3600    IN      A       10.10.49.31
+biganswer.example8.    3600    IN      A       10.10.49.32
+biganswer.example8.    3600    IN      A       10.10.49.33
+biganswer.example8.    3600    IN      A       10.10.49.34
+biganswer.example8.    3600    IN      A       10.10.49.35
+biganswer.example8.    3600    IN      A       10.10.49.36
+biganswer.example8.    3600    IN      A       10.10.49.37
+biganswer.example8.    3600    IN      A       10.10.49.38
+biganswer.example8.    3600    IN      A       10.10.49.39
+biganswer.example8.    3600    IN      A       10.10.49.40
+biganswer.example8.    3600    IN      A       10.10.49.41
+biganswer.example8.    3600    IN      A       10.10.49.42
+biganswer.example8.    3600    IN      A       10.10.49.43
+biganswer.example8.    3600    IN      A       10.10.49.44
+biganswer.example8.    3600    IN      A       10.10.49.45
+biganswer.example8.    3600    IN      A       10.10.49.46
+biganswer.example8.    3600    IN      A       10.10.49.47
+biganswer.example8.    3600    IN      A       10.10.49.48
+biganswer.example8.    3600    IN      A       10.10.49.49
+biganswer.example8.    3600    IN      A       10.10.49.50
+biganswer.example8.    3600    IN      A       10.10.50.1
+biganswer.example8.    3600    IN      A       10.10.50.2
+biganswer.example8.    3600    IN      A       10.10.50.3
+biganswer.example8.    3600    IN      A       10.10.50.4
+biganswer.example8.    3600    IN      A       10.10.50.5
+biganswer.example8.    3600    IN      A       10.10.50.6
+biganswer.example8.    3600    IN      A       10.10.50.7
+biganswer.example8.    3600    IN      A       10.10.50.8
+biganswer.example8.    3600    IN      A       10.10.50.9
+biganswer.example8.    3600    IN      A       10.10.50.10
+biganswer.example8.    3600    IN      A       10.10.50.11
+biganswer.example8.    3600    IN      A       10.10.50.12
+biganswer.example8.    3600    IN      A       10.10.50.13
+biganswer.example8.    3600    IN      A       10.10.50.14
+biganswer.example8.    3600    IN      A       10.10.50.15
+biganswer.example8.    3600    IN      A       10.10.50.16
+biganswer.example8.    3600    IN      A       10.10.50.17
+biganswer.example8.    3600    IN      A       10.10.50.18
+biganswer.example8.    3600    IN      A       10.10.50.19
+biganswer.example8.    3600    IN      A       10.10.50.20
+biganswer.example8.    3600    IN      A       10.10.50.21
+biganswer.example8.    3600    IN      A       10.10.50.22
+biganswer.example8.    3600    IN      A       10.10.50.23
+biganswer.example8.    3600    IN      A       10.10.50.24
+biganswer.example8.    3600    IN      A       10.10.50.25
+biganswer.example8.    3600    IN      A       10.10.50.26
+biganswer.example8.    3600    IN      A       10.10.50.27
+biganswer.example8.    3600    IN      A       10.10.50.28
+biganswer.example8.    3600    IN      A       10.10.50.29
+biganswer.example8.    3600    IN      A       10.10.50.30
+biganswer.example8.    3600    IN      A       10.10.50.31
+biganswer.example8.    3600    IN      A       10.10.50.32
+biganswer.example8.    3600    IN      A       10.10.50.33
+biganswer.example8.    3600    IN      A       10.10.50.34
+biganswer.example8.    3600    IN      A       10.10.50.35
+biganswer.example8.    3600    IN      A       10.10.50.36
+biganswer.example8.    3600    IN      A       10.10.50.37
+biganswer.example8.    3600    IN      A       10.10.50.38
+biganswer.example8.    3600    IN      A       10.10.50.39
+biganswer.example8.    3600    IN      A       10.10.50.40
+biganswer.example8.    3600    IN      A       10.10.50.41
+biganswer.example8.    3600    IN      A       10.10.50.42
+biganswer.example8.    3600    IN      A       10.10.50.43
+biganswer.example8.    3600    IN      A       10.10.50.44
+biganswer.example8.    3600    IN      A       10.10.50.45
+biganswer.example8.    3600    IN      A       10.10.50.46
+biganswer.example8.    3600    IN      A       10.10.50.47
+biganswer.example8.    3600    IN      A       10.10.50.48
+biganswer.example8.    3600    IN      A       10.10.50.49
+biganswer.example8.    3600    IN      A       10.10.50.50
+caa01.example8.                3600    IN      CAA     0 issue "ca.example.net; policy=ev"
+caa02.example8.                3600    IN      CAA     128 tbs "Unknown"
+caa03.example8.                3600    IN      CAA     128 tbs ""
+cdnskey01.example8.    3600    IN      CDNSKEY 512 255 1 AQMFD5raczCJHViKtLYhWGz8hMY9UGRuniJDBzC7w0aRyzWZriO6i2od GWWQVucZqKVsENW91IOW4vqudngPZsY3GvQ/xVA8/7pyFj6b7Esga60z yGW6LFe9r8n6paHrlG5ojqf0BaqHT+8=
+cds01.example8.                3600    IN      CDS     30795 1 1 310D27F4D82C1FC2400704EA9939FE6E1CEAA3B9
+cert01.example8.       3600    IN      CERT    65534 65535 PRIVATEOID MxFcby9k/yvedMfQgKzhH5er0Mu/vILz45IkskceFGgiWCn/GxHhai6V AuHAoNUz4YoU1tVfSCSqQYn6//11U6Nld80jEeC8aTrO+KKmCaY=
+cname01.example8.      3600    IN      CNAME   cname-target.
+cname02.example8.      3600    IN      CNAME   cname-target.example8.
+cname03.example8.      3600    IN      CNAME   .
+csync01.example8.      3600    IN      CSYNC   0 0 A NS AAAA
+csync02.example8.      3600    IN      CSYNC   0 0
+dhcid01.example8.      3600    IN      DHCID   AAIBY2/AuCccgoJbsaxcQc9TUapptP69lOjxfNuVAA2kjEA=
+dhcid02.example8.      3600    IN      DHCID   AAEBOSD+XR3Os/0LozeXVqcNc7FwCfQdWL3b/NaiUDlW2No=
+dhcid03.example8.      3600    IN      DHCID   AAABxLmlskllE0MVjd57zHcWmEH3pCQ6VytcKD//7es/deY=
+dlv.example8.          3600    IN      DLV     30795 1 1 310D27F4D82C1FC2400704EA9939FE6E1CEAA3B9
+dname01.example8.      3600    IN      DNAME   dname-target.
+dname02.example8.      3600    IN      DNAME   dname-target.example8.
+dname03.example8.      3600    IN      DNAME   .
+dnskey01.example8.     3600    IN      DNSKEY  512 255 1 AQMFD5raczCJHViKtLYhWGz8hMY9UGRuniJDBzC7w0aRyzWZriO6i2od GWWQVucZqKVsENW91IOW4vqudngPZsY3GvQ/xVA8/7pyFj6b7Esga60z yGW6LFe9r8n6paHrlG5ojqf0BaqHT+8=
+doa01.example8.                3600    IN      DOA     1234567890 1234567890 1 "image/gif" R0lGODlhKAAZAOMCAGZmZgBmmf///zOZzMz//5nM/zNmmWbM/5nMzMzMzACZ/////////////////////yH5BAEKAA8ALAAAAAAoABkAAATH8IFJK5U2a4337F5ogRkpnoCJrly7PrCKyh8c3HgAhzT35MDbbtO7/IJIHbGiOiaTxVTpSVWWLqNq1UVyapNS1wd3OAxug0LhnCubcVhsxysQnOt4ATpvvzHlFzl1AwODhWeFAgRpen5/UhheAYMFdUB4SFcpGEGGdQeCAqBBLTuSk30EeXd9pEsAbKGxjHqDSE0Sp6ixN4N1BJmbc7lIhmsBich1awPAjkY1SZR8bJWrz382SGqIBQQFQd4IsUTaX+ceuudPEQA7
+doa02.example8.                3600    IN      DOA     0 1 2 "" aHR0cHM6Ly93d3cuaXNjLm9yZy8=
+ds01.example8.         3600    IN      DS      12892 5 2 26584835CA80C81C91999F31CFAF2A0E89D4FF1C8FAFD0DDB31A85C7 19277C13
+ds01.example8.         3600    IN      NS      ns42.example8.
+ds02.example8.         3600    IN      DS      12892 5 1 7AA4A3F416C2F2391FB7AB0D434F762CD62D1390
+ds02.example8.         3600    IN      NS      ns43.example8.
+eid01.example8.                3600    IN      EID     1289AB
+eui48.example8.                3600    IN      EUI48   01-23-45-67-89-ab
+eui64.example8.                3600    IN      EUI64   01-23-45-67-89-ab-cd-ef
+gid01.example8.                3600    IN      GID     \# 1 03
+gpos01.example8.       3600    IN      GPOS    "-22.6882" "116.8652" "250.0"
+gpos02.example8.       3600    IN      GPOS    "" "" ""
+hinfo01.example8.      3600    IN      HINFO   "Generic PC clone" "NetBSD-1.4"
+hinfo02.example8.      3600    IN      HINFO   "PC" "NetBSD"
+hip1.example8.         3600    IN      HIP     2 200100107B1A74DF365639CC39F1D578 AwEAAbdxyhNuSutc5EMzxTs9LBPCIkOFH8cIvM4p9+LrV4e19WzK00+CI6zBCQTdtWsuxKbWIy87UOoJTwkUs7lBu+Upr1gsNrut79ryra+bSRGQb1slImA8YVJyuIDsj7kwzG7jnERNqnWxZ48AWkskmdHaVDP4BcelrTI3rMXdXF5D
+hip2.example8.         3600    IN      HIP     2 200100107B1A74DF365639CC39F1D578 AwEAAbdxyhNuSutc5EMzxTs9LBPCIkOFH8cIvM4p9+LrV4e19WzK00+CI6zBCQTdtWsuxKbWIy87UOoJTwkUs7lBu+Upr1gsNrut79ryra+bSRGQb1slImA8YVJyuIDsj7kwzG7jnERNqnWxZ48AWkskmdHaVDP4BcelrTI3rMXdXF5D rvs.example.com.
+https0.example8.       3600    IN      HTTPS   0 example.net.
+https1.example8.       3600    IN      HTTPS   1 . port=60
+ipseckey01.example8.   3600    IN      IPSECKEY 10 1 2 192.0.2.38 AQNRU3mG7TVTO2BkR47usntb102uFJtugbo6BSGvgqt4AQ==
+ipseckey02.example8.   3600    IN      IPSECKEY 10 0 2 . AQNRU3mG7TVTO2BkR47usntb102uFJtugbo6BSGvgqt4AQ==
+ipseckey03.example8.   3600    IN      IPSECKEY 10 1 2 192.0.2.3 AQNRU3mG7TVTO2BkR47usntb102uFJtugbo6BSGvgqt4AQ==
+ipseckey04.example8.   3600    IN      IPSECKEY 10 3 2 mygateway.example.com. AQNRU3mG7TVTO2BkR47usntb102uFJtugbo6BSGvgqt4AQ==
+ipseckey05.example8.   3600    IN      IPSECKEY 10 2 2 2001:db8:0:8002::2000:1 AQNRU3mG7TVTO2BkR47usntb102uFJtugbo6BSGvgqt4AQ==
+isdn01.example8.       3600    IN      ISDN    "isdn-address"
+isdn02.example8.       3600    IN      ISDN    "isdn-address" "subaddress"
+isdn03.example8.       3600    IN      ISDN    "isdn-address"
+isdn04.example8.       3600    IN      ISDN    "isdn-address" "subaddress"
+keydata.example8.      3600    IN      TYPE65533 \# 0
+keydata.example8.      3600    IN      TYPE65533 \# 6 010203040506
+keydata.example8.      3600    IN      TYPE65533 \# 18 010203040506010203040506010203040506
+kx01.example8.         3600    IN      KX      10 kdc.example8.
+kx02.example8.         3600    IN      KX      10 .
+l32.example8.          3600    IN      L32     10 1.2.3.4
+l64.example8.          3600    IN      L64     10 14:4fff:ff20:ee64
+loc01.example8.                3600    IN      LOC     60 9 0.000 N 24 39 0.000 E 10.00m 20m 2000m 20m
+loc02.example8.                3600    IN      LOC     60 9 0.000 N 24 39 0.000 E 10.00m 20m 2000m 20m
+lp.example8.           3600    IN      LP      10 example.net.
+mb01.example8.         3600    IN      MG      madname.example8.
+mb02.example8.         3600    IN      MG      .
+mg01.example8.         3600    IN      MG      mgmname.example8.
+mg02.example8.         3600    IN      MG      .
+minfo01.example8.      3600    IN      MINFO   rmailbx.example8. emailbx.example8.
+minfo02.example8.      3600    IN      MINFO   . .
+mr01.example8.         3600    IN      MR      mrname.example8.
+mr02.example8.         3600    IN      MR      .
+mx01.example8.         3600    IN      MX      10 mail.example8.
+mx02.example8.         3600    IN      MX      10 .
+naptr01.example8.      3600    IN      NAPTR   0 0 "" "" "" .
+naptr02.example8.      3600    IN      NAPTR   65535 65535 "blurgh" "blorf" "blllbb" foo.
+nid.example8.          3600    IN      NID     10 14:4fff:ff20:ee64
+nimloc01.example8.     3600    IN      NIMLOC  1289AB
+ninfo01.example8.      3600    IN      NINFO   "foo"
+ninfo02.example8.      3600    IN      NINFO   "foo" "bar"
+ninfo03.example8.      3600    IN      NINFO   "foo"
+ninfo04.example8.      3600    IN      NINFO   "foo" "bar"
+ninfo05.example8.      3600    IN      NINFO   "foo bar"
+ninfo06.example8.      3600    IN      NINFO   "foo bar"
+ninfo07.example8.      3600    IN      NINFO   "foo bar"
+ninfo08.example8.      3600    IN      NINFO   "foo\010bar"
+ninfo09.example8.      3600    IN      NINFO   "foo\010bar"
+ninfo10.example8.      3600    IN      NINFO   "foo bar"
+ninfo11.example8.      3600    IN      NINFO   "\"foo\""
+ninfo12.example8.      3600    IN      NINFO   "\"foo\""
+ninfo13.example8.      3600    IN      NINFO   "foo;"
+ninfo14.example8.      3600    IN      NINFO   "foo;"
+ninfo15.example8.      3600    IN      NINFO   "bar\\;"
+ns2.example8.          3600    IN      A       10.53.0.2
+nsap-ptr01.example8.   3600    IN      NSAP-PTR foo.
+nsap-ptr01.example8.   3600    IN      NSAP-PTR .
+nsap01.example8.       3600    IN      NSAP    0x47000580005a0000000001e133ffffff00016100
+nsap02.example8.       3600    IN      NSAP    0x47000580005a0000000001e133ffffff00016100
+nsec01.example8.       3600    IN      NSEC    a.secure.nil. NS SOA MX LOC RRSIG NSEC DNSKEY
+nsec02.example8.       3600    IN      NSEC    . NSAP-PTR NSEC
+nsec03.example8.       3600    IN      NSEC    . A
+nsec04.example8.       3600    IN      NSEC    . TYPE127
+openpgpkey.example8.   3600    IN      OPENPGPKEY AQMFD5raczCJHViKtLYhWGz8hMY9UGRuniJDBzC7w0aRyzWZriO6i2od GWWQVucZqKVsENW91IOW4vqudngPZsY3GvQ/xVA8/7pyFj6b7Esga60z yGW6LFe9r8n6paHrlG5ojqf0BaqHT+8=
+ptr01.example8.                3600    IN      PTR     example8.
+px01.example8.         3600    IN      PX      65535 foo. bar.
+px02.example8.         3600    IN      PX      65535 . .
+rkey01.example8.       3600    IN      RKEY    0 255 1 AQMFD5raczCJHViKtLYhWGz8hMY9UGRuniJDBzC7w0aRyzWZriO6i2od GWWQVucZqKVsENW91IOW4vqudngPZsY3GvQ/xVA8/7pyFj6b7Esga60z yGW6LFe9r8n6paHrlG5ojqf0BaqHT+8=
+rp01.example8.         3600    IN      RP      mbox-dname.example8. txt-dname.example8.
+rp02.example8.         3600    IN      RP      . .
+rrsig01.example8.      3600    IN      RRSIG   NSEC 1 3 3600 20000102030405 19961211100908 2143 foo.nil. MxFcby9k/yvedMfQgKzhH5er0Mu/vILz45IkskceFGgiWCn/GxHhai6V AuHAoNUz4YoU1tVfSCSqQYn6//11U6Nld80jEeC8aTrO+KKmCaY=
+rt01.example8.         3600    IN      RT      0 intermediate-host.example8.
+rt02.example8.         3600    IN      RT      65535 .
+sink01.example8.       3600    IN      SINK    1 0 0
+sink02.example8.       3600    IN      SINK    8 0 2 l4ik
+smimea.example8.       3600    IN      SMIMEA  1 1 2 92003BA34942DC74152E2F2C408D29ECA5A520E7F2E06BB944F4DCA3 46BAF63C1B177615D466F6C4B71C216A50292BD58C9EBDD2F74E38FE 51FFD48C43326CBC
+spf01.example8.                3600    IN      SPF     "v=spf1 -all"
+spf02.example8.                3600    IN      SPF     "v=spf1" " -all"
+srv01.example8.                3600    IN      SRV     0 0 0 .
+srv02.example8.                3600    IN      SRV     65535 65535 65535 old-slow-box.example8.
+sshfp01.example8.      3600    IN      SSHFP   4 2 C76D8329954DA2835751E371544E963EFDA099080D6C58DD2BFD9A31 6E162C83
+sshfp02.example8.      3600    IN      SSHFP   1 2 BF29468C83AC58CCF8C85AB7B3BEB054ECF1E38512B8353AB36471FA 88961DCC
+svcb0.example8.                3600    IN      SVCB    0 example.net.
+svcb1.example8.                3600    IN      SVCB    1 . port=60
+ta.example8.           3600    IN      TA      30795 1 1 310D27F4D82C1FC2400704EA9939FE6E1CEAA3B9
+talink0.example8.      3600    IN      TALINK  . talink1.example8.
+talink1.example8.      3600    IN      TALINK  talink0.example8. talink2.example8.
+talink2.example8.      3600    IN      TALINK  talink2.example8. .
+tlsa.example8.         3600    IN      TLSA    1 1 2 92003BA34942DC74152E2F2C408D29ECA5A520E7F2E06BB944F4DCA3 46BAF63C1B177615D466F6C4B71C216A50292BD58C9EBDD2F74E38FE 51FFD48C43326CBC
+txt01.example8.                3600    IN      TXT     "foo"
+txt02.example8.                3600    IN      TXT     "foo" "bar"
+txt03.example8.                3600    IN      TXT     "foo"
+txt04.example8.                3600    IN      TXT     "foo" "bar"
+txt05.example8.                3600    IN      TXT     "foo bar"
+txt06.example8.                3600    IN      TXT     "foo bar"
+txt07.example8.                3600    IN      TXT     "foo bar"
+txt08.example8.                3600    IN      TXT     "foo\010bar"
+txt09.example8.                3600    IN      TXT     "foo\010bar"
+txt10.example8.                3600    IN      TXT     "foo bar"
+txt11.example8.                3600    IN      TXT     "\"foo\""
+txt12.example8.                3600    IN      TXT     "\"foo\""
+txt13.example8.                3600    IN      TXT     "foo;"
+txt14.example8.                3600    IN      TXT     "foo;"
+txt15.example8.                3600    IN      TXT     "bar\\;"
+uid01.example8.                3600    IN      UID     \# 1 02
+uinfo01.example8.      3600    IN      UINFO   \# 1 01
+unspec01.example8.     3600    IN      UNSPEC  \# 1 04
+uri01.example8.                3600    IN      URI     10 20 "https://www.isc.org/"
+uri02.example8.                3600    IN      URI     30 40 "https://www.isc.org/HolyCowThisSureIsAVeryLongURIRecordIDontEvenKnowWhatSomeoneWouldEverWantWithSuchAThingButTheSpecificationRequiresThatWesupportItSoHereWeGoTestingItLaLaLaLaLaLaLaSeriouslyThoughWhyWouldYouEvenConsiderUsingAURIThisLongItSeemsLikeASillyIdeaButEnhWhatAreYouGonnaDo/"
+uri03.example8.                3600    IN      URI     30 40 ""
+wks01.example8.                3600    IN      WKS     10.0.0.1 6 0 1 2 21 23
+wks02.example8.                3600    IN      WKS     10.0.0.1 17 0 1 2 53
+wks03.example8.                3600    IN      WKS     10.0.0.2 6 65535
+x2501.example8.                3600    IN      X25     "123456789"
+zonemd01.example8.     3600    IN      ZONEMD  2019020700 1 1 C220B8A6ED5728A971902F7E3D4FD93ADEEA88B0453C2E8E8C863D46 5AB06CF34EB95B266398C98B59124FA239CB7EEB
+zonemd02.example8.     3600    IN      ZONEMD  2019020700 1 2 08CFA1115C7B948C4163A901270395EA226A930CD2CBCF2FA9A5E6EB 85F37C8A4E114D884E66F176EAB121CB02DB7D652E0CC4827E7A3204 F166B47E5613FD27
+8f1tmio9avcom2k0frp92lgcumak0cad.example8. 3600        IN NSEC3 1 0 10 D2CF0294C020CE6C 8FPNS2UCT7FBS643THP2B77PEQ77K6IU A NS SOA MX AAAA RRSIG DNSKEY NSEC3PARAM
+kcd3juae64f9c5csl1kif1htaui7un0g.example8. 3600        IN NSEC3 1 0 10 D2CF0294C020CE6C KD5MN2M20340DGO0BL7NTSB8JP4BSC7E
+mr5ukvsk1l37btu4q7b1dfevft4hkqdk.example8. 3600        IN NSEC3 1 0 10 D2CF0294C020CE6C MT38J6VG7S0SN5G17MCUF6IQIKFUAJ05 A AAAA RRSIG
+example8.              86400   IN      SOA     ns2.example8. hostmaster.example8. 1397051952 5 5 1814400 3600

diff --git a/bin/tests/system/doth/get_openssl_version.py b/bin/tests/system/doth/get_openssl_version.py
new file mode 100755 (executable)
index 0000000..0aea9af
--- /dev/null
+++ b/bin/tests/system/doth/get_openssl_version.py
@@ -0,0 +1,16 @@
+#!/usr/bin/env python
+
+# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
+#
+# SPDX-License-Identifier: MPL-2.0
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0.  If a copy of the MPL was not distributed with this
+# file, you can obtain one at https://mozilla.org/MPL/2.0/.
+#
+# See the COPYRIGHT file distributed with this work for additional
+# information regarding copyright ownership.
+
+import ssl
+version = ssl.OPENSSL_VERSION_INFO
+print(version[0], version[1], version[2])

diff --git a/bin/tests/system/doth/ns1/named.conf.in b/bin/tests/system/doth/ns1/named.conf.in
index 571aa7995d554c3a697477579b7e86a49c67a883..45102290569dc10d49f06c54675572737720173e 100644 (file)
--- a/bin/tests/system/doth/ns1/named.conf.in
+++ b/bin/tests/system/doth/ns1/named.conf.in
@@ -25,18 +25,46 @@ tls tls-forward-secrecy {
        protocols { TLSv1.2; };
        ciphers "HIGH:!kRSA:!aNULL:!eNULL:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SHA1:!SHA256:!SHA384";
        prefer-server-ciphers yes;
-       key-file "../ns2/key.pem";
-       cert-file "../ns2/cert.pem";
-       dhparam-file "../ns2/dhparam3072.pem";
+       key-file "../CA/certs/srv01.crt01.example.com.key";
+       cert-file "../CA/certs/srv01.crt01.example.com.pem";
+       dhparam-file "../dhparam3072.pem";
 };
 
 tls tls-pfs-aes256 {
        protocols { TLSv1.2; };
        ciphers "AES256:!kRSA:!aNULL:!eNULL:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SHA1:!SHA256:!SHA384";
        prefer-server-ciphers yes;
-       key-file "../ns2/key.pem";
-       cert-file "../ns2/cert.pem";
-       dhparam-file "../ns2/dhparam3072.pem";
+       key-file "../CA/certs/srv01.crt01.example.com.key";
+       cert-file "../CA/certs/srv01.crt01.example.com.pem";
+       dhparam-file "../dhparam3072.pem";
+};
+
+tls tls-no-subject-alt-name {
+       protocols { TLSv1.2; };
+       ciphers "HIGH:!kRSA:!aNULL:!eNULL:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SHA1:!SHA256:!SHA384";
+       prefer-server-ciphers yes;
+       key-file "../CA/certs/srv01.crt02-no-san.example.com.key";
+       cert-file "../CA/certs/srv01.crt02-no-san.example.com.pem";
+       dhparam-file "../dhparam3072.pem";
+};
+
+tls tls-expired {
+       protocols { TLSv1.2; };
+       ciphers "HIGH:!kRSA:!aNULL:!eNULL:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SHA1:!SHA256:!SHA384";
+       prefer-server-ciphers yes;
+       key-file "../CA/certs/srv01.crt03-expired.example.com.key";
+       cert-file "../CA/certs/srv01.crt03-expired.example.com.pem";
+       dhparam-file "../dhparam3072.pem";
+};
+
+tls tls-forward-secrecy-mutual-tls {
+       protocols { TLSv1.2; };
+       ciphers "HIGH:!kRSA:!aNULL:!eNULL:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SHA1:!SHA256:!SHA384";
+       prefer-server-ciphers yes;
+       key-file "../CA/certs/srv01.crt01.example.com.key";
+       cert-file "../CA/certs/srv01.crt01.example.com.pem";
+       dhparam-file "../dhparam3072.pem";
+       ca-file "../CA/CA.pem";
 };
 
 options {
@@ -55,6 +83,11 @@ options {
        listen-on-v6 { none; };
        listen-on port @EXTRAPORT1@ tls tls-pfs-aes256 { 10.53.0.1; };             // DoT
        listen-on-v6 port @EXTRAPORT1@ tls tls-pfs-aes256 { fd92:7065:b8e:ffff::1;};
+       listen-on port @EXTRAPORT2@ tls tls-no-subject-alt-name { 10.53.0.1; };             // DoT
+       listen-on port @EXTRAPORT3@ tls tls-no-subject-alt-name http local { 10.53.0.1; };  // DoH
+       listen-on port @EXTRAPORT4@ tls tls-expired { 10.53.0.1; };             // DoT
+       listen-on port @EXTRAPORT5@ tls tls-forward-secrecy-mutual-tls { 10.53.0.1; }; // DoT
+       listen-on port @EXTRAPORT6@ tls tls-forward-secrecy-mutual-tls http local { 10.53.0.1; }; // DoH
        recursion no;
        notify explicit;
        also-notify { 10.53.0.2 port @PORT@; };
@@ -80,3 +113,57 @@ zone "example2" {
        file "example.db";
        allow-transfer port @EXTRAPORT1@ transport tls { any; };
 };
+
+zone "example3" {
+       type primary;
+       file "example.db";
+       allow-transfer port @EXTRAPORT3@ transport tls { any; };
+};
+
+zone "example4" {
+       type primary;
+       file "example.db";
+       allow-transfer transport tls { any; };
+};
+
+zone "example5" {
+       type primary;
+       file "example.db";
+       allow-transfer transport tls { any; };
+};
+
+zone "example6" {
+       type primary;
+       file "example.db";
+       allow-transfer transport tls { any; };
+};
+
+zone "example7" {
+       type primary;
+       file "example.db";
+       allow-transfer transport tls { any; };
+};
+
+zone "example8" {
+       type primary;
+       file "example.db";
+       allow-transfer transport tls { any; };
+};
+
+zone "example9" {
+       type primary;
+       file "example.db";
+       allow-transfer port @EXTRAPORT5@ transport tls { any; };
+};
+
+zone "example10" {
+       type primary;
+       file "example.db";
+       allow-transfer port @EXTRAPORT5@ transport tls { any; };
+};
+
+zone "example11" {
+       type primary;
+       file "example.db";
+       allow-transfer port @EXTRAPORT5@ transport tls { any; };
+};

diff --git a/bin/tests/system/doth/ns2/named.conf.in b/bin/tests/system/doth/ns2/named.conf.in
index 6fe45dbdf974a22692692b9b7e04349a2bf1fef4..0c5ec7d73bedc5edef6cfd1d7272cbec2f3f910d 100644 (file)
--- a/bin/tests/system/doth/ns2/named.conf.in
+++ b/bin/tests/system/doth/ns2/named.conf.in
@@ -18,9 +18,9 @@ controls {
 };
 
 tls local {
-       key-file "key.pem";
-       cert-file "cert.pem";
-       dhparam-file "dhparam3072.pem";
+       key-file "../CA/certs/srv02.crt01.example.com.key";
+       cert-file "../CA/certs/srv02.crt01.example.com.pem";
+       dhparam-file "../dhparam3072.pem";
 };
 
 http local {
@@ -56,9 +56,126 @@ zone "." {
        file "../../common/root.hint";
 };
 
+tls tls-example-primary {
+       hostname "srv01.crt01.example.com"; // enable Strict TLS
+       ca-file "../CA/CA.pem";
+};
+
 zone "example" {
        type secondary;
-       primaries { 10.53.0.1 tls ephemeral; };
+       primaries { 10.53.0.1 tls tls-example-primary; };
        file "example.db";
        allow-transfer { any; };
 };
+
+# the server's certificate does not contain SubjectAltName, which is required for DoT
+tls tls-example-primary-no-san {
+       hostname "srv01.crt02-no-san.example.com"; // enable Strict TLS
+       ca-file "../CA/CA.pem";
+};
+
+zone "example3" {
+       type secondary;
+       primaries { 10.53.0.1 port @EXTRAPORT2@ tls tls-example-primary-no-san; };
+       file "example3.db";
+       allow-transfer { any; };
+};
+
+# As you can see, the "hostname" is missing, but "ca-file" is
+# specified. As the result, the primaries server certificate will be
+# verified using the IP address instead of hostname. That is fine,
+# because the server certificate is issued with IP address in the
+# SubjectAltName section.
+tls tls-example-primary-strict-tls-no-hostname {
+       ca-file "../CA/CA.pem"; // enable Strict TLS
+};
+
+zone "example4" {
+       type secondary;
+       primaries { 10.53.0.1 tls tls-example-primary-strict-tls-no-hostname; };
+       file "example4.db";
+       allow-transfer { any; };
+};
+
+tls tls-example-primary-strict-tls-ipv4 {
+       hostname "10.53.0.1"; # the IP is in the server's cert SAN
+       ca-file "../CA/CA.pem"; # enable Strict TLS
+};
+
+zone "example5" {
+       type secondary;
+       primaries { 10.53.0.1 tls tls-example-primary-strict-tls-ipv4; };
+       file "example5.db";
+       allow-transfer { any; };
+};
+
+tls tls-example-primary-strict-tls-ipv6 {
+       hostname "fd92:7065:b8e:ffff::1"; # the IP is in the server's cert SAN
+       ca-file "../CA/CA.pem"; # enable Strict TLS
+};
+
+zone "example6" {
+       type secondary;
+       primaries { 10.53.0.1 tls tls-example-primary-strict-tls-ipv6; };
+       file "example6.db";
+       allow-transfer { any; };
+};
+
+tls tls-example-primary-strict-tls-wrong-host {
+       hostname "not-present.example.com"; # this is not present in the server's cert SAN
+       ca-file "../CA/CA.pem"; # enable Strict TLS
+};
+
+zone "example7" {
+       type secondary;
+       primaries { 10.53.0.1 tls tls-example-primary-strict-tls-wrong-host; };
+       file "example7.db";
+       allow-transfer { any; };
+};
+
+tls tls-example-primary-strict-tls-expired {
+       hostname "srv01.crt03-expired.example.com";
+       ca-file "../CA/CA.pem";
+};
+
+zone "example8" {
+       type secondary;
+       primaries { 10.53.0.1 port @EXTRAPORT4@ tls tls-example-primary-strict-tls-expired; };
+       file "example8.db";
+       allow-transfer { any; };
+};
+
+tls tls-example-primary-mutual-tls {
+    hostname "srv01.crt01.example.com";
+       ca-file "../CA/CA.pem";
+       cert-file "../CA/certs/srv01.client02-ns2.example.com.pem";
+       key-file "../CA/certs/srv01.client02-ns2.example.com.key";
+};
+
+zone "example9" {
+       type secondary;
+       primaries { 10.53.0.1 port @EXTRAPORT5@ tls tls-example-primary-mutual-tls; };
+       file "example9.db";
+       allow-transfer { any; };
+};
+
+zone "example10" {
+       type secondary;
+       primaries { 10.53.0.1 port @EXTRAPORT5@ tls tls-example-primary; };
+       file "example10.db";
+       allow-transfer { any; };
+};
+
+tls tls-example-primary-mutual-tls-expired {
+    hostname "srv01.crt01.example.com";
+       ca-file "../CA/CA.pem";
+       cert-file "../CA/certs/srv01.client03-ns2-expired.example.com.pem";
+       key-file "../CA/certs/srv01.client03-ns2-expired.example.com.key";
+};
+
+zone "example11" {
+       type secondary;
+       primaries { 10.53.0.1 port @EXTRAPORT5@ tls tls-example-primary-mutual-tls-expired; };
+       file "example11.db";
+       allow-transfer { any; };
+};

diff --git a/bin/tests/system/doth/ns3/named.conf.in b/bin/tests/system/doth/ns3/named.conf.in
index b0deaa0c81d2eb34e35ea765b4cac425a3a37bc4..74d3957e2d85bfc83ca408bf995b9def6dabfca0 100644 (file)
--- a/bin/tests/system/doth/ns3/named.conf.in
+++ b/bin/tests/system/doth/ns3/named.conf.in
@@ -18,9 +18,9 @@ controls {
 };
 
 tls local {
-       key-file "../ns2/key.pem";
-       cert-file "../ns2/cert.pem";
-       dhparam-file "../ns2/dhparam3072.pem";
+       key-file "../CA/certs/srv03.crt01.example.com.key";
+       cert-file "../CA/certs/srv03.crt01.example.com.pem";
+       dhparam-file "../dhparam3072.pem";
 };
 
 http local {

diff --git a/bin/tests/system/doth/ns4/named.conf.in b/bin/tests/system/doth/ns4/named.conf.in
index 23aa98528a064760217b42bc0e5f136cb7996bfe..077226a488fcf5ec2428fd4ae654c839c52ce808 100644 (file)
--- a/bin/tests/system/doth/ns4/named.conf.in
+++ b/bin/tests/system/doth/ns4/named.conf.in
@@ -25,9 +25,9 @@ controls {
 };
 
 tls local {
-       key-file "../ns2/key.pem";
-       cert-file "../ns2/cert.pem";
-       dhparam-file "../ns2/dhparam3072.pem";
+       key-file "../CA/certs/srv04.crt01.example.com.key";
+       cert-file "../CA/certs/srv04.crt01.example.com.pem";
+       dhparam-file "../dhparam3072.pem";
 };
 
 http local {

diff --git a/bin/tests/system/doth/tests.sh b/bin/tests/system/doth/tests.sh
index a69e2e57b38429589ee32168eb2f24b8b7466cf8..a92baeff0a68786e20639367506848f9d7e77ab6 100644 (file)
--- a/bin/tests/system/doth/tests.sh
+++ b/bin/tests/system/doth/tests.sh
@@ -16,6 +16,38 @@
 
 common_dig_options="+noadd +nosea +nostat +noquest +nocmd"
 msg_xfrs_not_allowed=";; zone transfers over the established TLS connection are not allowed"
+msg_peer_verification_failed=";; TLS peer certificate verification"
+
+ca_file="./CA/CA.pem"
+
+if [ -x "$PYTHON" ]; then
+       OPENSSL_VERSION=$("$PYTHON" "$TOP_SRCDIR/bin/tests/system/doth/get_openssl_version.py")
+       OPENSSL_VERSION_MAJOR=$(echo "$OPENSSL_VERSION" | cut -d ' ' -f 1)
+       OPENSSL_VERSION_MINOR=$(echo "$OPENSSL_VERSION" | cut -d ' ' -f 2)
+fi
+
+# According to the RFC 8310, Section 8.1, Subject field MUST
+# NOT be inspected when verifying a hostname when using
+# DoT. Only SubjectAltName must be checked instead. That is
+# not the case for HTTPS, though.
+
+# Unfortunately, some quite old versions of OpenSSL (< 1.1.1)
+# might lack the functionality to implement that. It should
+# have very little real-world consequences, as most of the
+# production-ready certificates issued by real CAs will have
+# SubjectAltName set. In such a case, the Subject field is
+# ignored.
+#
+# On the platforms with too old TLS versions, e.g. RedHat 7, we should
+# ignore the tests checking the correct handling of absence of
+# SubjectAltName.
+if [ -n "$OPENSSL_VERSION" ]; then
+       if [ $OPENSSL_VERSION_MAJOR -gt 1 ]; then
+               run_san_tests=1
+       elif  [ $OPENSSL_VERSION_MAJOR -eq 1 ] && [ $OPENSSL_VERSION_MINOR -ge 1 ]; then
+               run_san_tests=1
+       fi
+fi
 
 dig_with_tls_opts() {
        # shellcheck disable=SC2086
@@ -73,6 +105,120 @@ fi
 if test $ret != 0 ; then echo_i "failed"; fi
 status=$((status+ret))
 
+if [ -n "$run_san_tests" ]; then
+       n=$((n + 1))
+       echo_i "testing incoming XoT functionality (from the first secondary, no SubjectAltName, failure expected) ($n)"
+       ret=0
+       if retry_quiet 10 wait_for_tls_xfer 2 example3; then
+               grep "^;" "dig.out.ns2.example3.test$n" | cat_i
+               test -f "ns2/example3.db" && ret=1
+       else
+               echo_i "timed out waiting for zone transfer"
+       fi
+       if [ $ret != 0 ]; then echo_i "failed"; fi
+       status=$((status + ret))
+fi
+
+n=$((n + 1))
+echo_i "testing incoming XoT functionality (from the first secondary, StrictTLS via implicit IP) ($n)"
+ret=0
+if retry_quiet 10 wait_for_tls_xfer 2 example4; then
+       grep "^;" "dig.out.ns2.example4.test$n" | cat_i
+       test -f "ns2/example4.db" || ret=1
+else
+       echo_i "timed out waiting for zone transfer"
+       ret=1
+fi
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "testing incoming XoT functionality (from the first secondary, StrictTLS via specified IPv4) ($n)"
+ret=0
+if retry_quiet 10 wait_for_tls_xfer 2 example5; then
+       grep "^;" "dig.out.ns2.example5.test$n" | cat_i
+       test -f "ns2/example5.db" || ret=1
+else
+       echo_i "timed out waiting for zone transfer"
+       ret=1
+fi
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "testing incoming XoT functionality (from the first secondary, StrictTLS via specified IPv6) ($n)"
+ret=0
+if retry_quiet 10 wait_for_tls_xfer 2 example6; then
+       grep "^;" "dig.out.ns2.example6.test$n" | cat_i
+       test -f "ns2/example6.db" || ret=1
+else
+       echo_i "timed out waiting for zone transfer"
+       ret=1
+fi
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "testing incoming XoT functionality (from the first secondary, wrong hostname, failure expected) ($n)"
+ret=0
+if retry_quiet 10 wait_for_tls_xfer 2 example7; then
+       grep "^;" "dig.out.ns2.example7.test$n" | cat_i
+       test -f "ns2/example7.db" && ret=1
+else
+       echo_i "timed out waiting for zone transfer"
+fi
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "testing incoming XoT functionality (from the first secondary, expired certificate, failure expected) ($n)"
+ret=0
+if retry_quiet 10 wait_for_tls_xfer 2 example8; then
+       grep "^;" "dig.out.ns2.example8.test$n" | cat_i
+       test -f "ns2/example8.db" && ret=1
+else
+       echo_i "timed out waiting for zone transfer"
+fi
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "testing incoming XoT functionality (from the first secondary, MutualTLS) ($n)"
+ret=0
+if retry_quiet 10 wait_for_tls_xfer 2 example9; then
+       grep "^;" "dig.out.ns2.example9.test$n" | cat_i
+       test -f "ns2/example9.db" || ret=1
+else
+       echo_i "timed out waiting for zone transfer"
+       ret=1
+fi
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "testing incoming XoT functionality (from the first secondary, MutualTLS, no client cert, failure expected) ($n)"
+ret=0
+if retry_quiet 10 wait_for_tls_xfer 2 example10; then
+       grep "^;" "dig.out.ns2.example10.test$n" | cat_i
+       test -f "ns2/example10.db" && ret=1
+else
+       echo_i "timed out waiting for zone transfer"
+fi
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "testing incoming XoT functionality (from the first secondary, MutualTLS, expired client cert, failure expected) ($n)"
+ret=0
+if retry_quiet 10 wait_for_tls_xfer 2 example11; then
+       grep "^;" "dig.out.ns2.example11.test$n" | cat_i
+       test -f "ns2/example11.db" && ret=1
+else
+       echo_i "timed out waiting for zone transfer"
+fi
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
 n=$((n+1))
 echo_i "testing incoming XoT functionality (from the second secondary) ($n)"
 ret=0
@@ -474,6 +620,128 @@ grep "status: NOERROR" dig.out.test$n > /dev/null || ret=1
 if [ $ret != 0 ]; then echo_i "failed"; fi
 status=$((status + ret))
 
+n=$((n + 1))
+echo_i "checking DoT query (with TLS verification enabled) ($n)"
+ret=0
+dig_with_tls_opts +tls-ca="$ca_file" +tls-hostname="srv01.crt01.example.com" @10.53.0.1 . SOA > dig.out.test$n
+grep "status: NOERROR" dig.out.test$n > /dev/null || ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "checking DoH query (with TLS verification enabled, self-signed cert, failure expected) ($n)"
+ret=0
+dig_with_https_opts +tls-ca="$ca_file" +tls-hostname="srv01.crt01.example.com" @10.53.0.1 . SOA > dig.out.test$n
+grep "$msg_peer_verification_failed" dig.out.test$n > /dev/null || ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "checking DoT query (with TLS verification using the system's CA store, failure expected) ($n)"
+ret=0
+dig_with_tls_opts +tls-ca +tls-hostname="srv01.crt01.example.com" @10.53.0.1 . SOA > dig.out.test$n
+grep "$msg_peer_verification_failed" dig.out.test$n > /dev/null || ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "checking DoH query (with TLS verification using the system's CA store, failure expected) ($n)"
+ret=0
+dig_with_https_opts +tls-ca +tls-hostname="srv01.crt01.example.com" @10.53.0.1 . SOA > dig.out.test$n
+grep "$msg_peer_verification_failed" dig.out.test$n > /dev/null || ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+# the primary server's certificate contains the IP address in the
+# SubjectAltName section
+n=$((n + 1))
+echo_i "checking DoT query (with TLS verification, hostname is not specified, IP address is used instead) ($n)"
+ret=0
+dig_with_tls_opts +tls-ca="$ca_file" @10.53.0.1 . SOA > dig.out.test$n
+grep "$msg_peer_verification_failed" dig.out.test$n > /dev/null && ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+if [ -n "$run_san_tests" ]; then
+       # SubjectAltName is required for DoT as according to RFC 8310, Subject
+       # field MUST NOT be inspected when verifying hostname for DoT.
+       n=$((n + 1))
+       echo_i "checking DoT query (with TLS verification enabled when SubjectAltName is not set, failure expected) ($n)"
+       ret=0
+       dig_with_tls_opts +tls-ca="$ca_file" +tls-hostname="srv01.crt02-no-san.example.com" @10.53.0.1 . SOA > dig.out.test$n
+       grep "$msg_peer_verification_failed" dig.out.test$n > /dev/null || ret=1
+       if [ $ret != 0 ]; then echo_i "failed"; fi
+       status=$((status + ret))
+
+       n=$((n + 1))
+       echo_i "checking DoT XFR over a TLS port where SubjectAltName is not set (failure expected) ($n)"
+       ret=0
+       # shellcheck disable=SC2086
+       dig_with_tls_opts +tls-ca="$ca_file" +tls-hostname="srv01.crt02-no-san.example.com" -p "${EXTRAPORT2}" +comm @10.53.0.1 . AXFR > dig.out.test$n
+       grep "$msg_peer_verification_failed" dig.out.test$n > /dev/null || ret=1
+       if [ $ret != 0 ]; then echo_i "failed"; fi
+       status=$((status + ret))
+fi
+
+# SubjectAltName is not required for HTTPS. Having a properly set
+# Common Name in the Subject field is enough.
+n=$((n + 1))
+echo_i "checking DoH query (when SubjectAltName is not set) ($n)"
+ret=0
+dig_with_https_opts +tls-ca="$ca_file" +tls-hostname="srv01.crt02-no-san.example.com" -p "${EXTRAPORT3}" +comm @10.53.0.1 . SOA > dig.out.test$n
+grep "status: NOERROR" dig.out.test$n > /dev/null || ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "checking DoT query (expired certificate, Opportunistic TLS) ($n)"
+ret=0
+dig_with_tls_opts +tls -p "${EXTRAPORT4}" +comm @10.53.0.1 . SOA > dig.out.test$n
+grep "status: NOERROR" dig.out.test$n > /dev/null || ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "checking DoT query (expired certificate, Strict TLS, failure expected) ($n)"
+ret=0
+dig_with_tls_opts +tls-ca="$ca_file" -p "${EXTRAPORT4}" +comm @10.53.0.1 . SOA > dig.out.test$n
+grep "$msg_peer_verification_failed" dig.out.test$n > /dev/null || ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n+1))
+echo_i "testing XoT server functionality (using dig, client certificate required, failure expected) ($n)"
+ret=0
+dig_with_tls_opts +tls-ca="$ca_file" -p "${EXTRAPORT5}" example8. -b 10.53.0.10 @10.53.0.1 axfr > dig.out.ns1.test$n
+grep "; Transfer failed." dig.out.ns1.test$n > /dev/null || ret=1
+if test $ret != 0 ; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n+1))
+echo_i "testing XoT server functionality (using dig, client certificate used) ($n)"
+ret=0
+dig_with_tls_opts +tls-ca="$ca_file" +tls-certfile="./CA/certs/srv01.client01.example.com.pem" +tls-keyfile="./CA/certs/srv01.client01.example.com.key" -p "${EXTRAPORT5}" example8. -b 10.53.0.10 @10.53.0.1 axfr > dig.out.ns1.test$n
+digcomp dig.out.ns1.test$n example8.axfr.good > /dev/null || ret=1
+if test $ret != 0 ; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "checking DoH query (client certificate required, failure expected) ($n)"
+ret=0
+dig_with_https_opts +tls-ca="$ca_file" -p "${EXTRAPORT6}" +comm @10.53.0.1 . SOA > dig.out.test$n
+grep "status: NOERROR" dig.out.test$n > /dev/null && ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
+n=$((n + 1))
+echo_i "checking DoH query (client certificate used) ($n)"
+ret=0
+# shellcheck disable=SC2086
+dig_with_https_opts +https +tls-ca="$ca_file" +tls-certfile="./CA/certs/srv01.client01.example.com.pem" +tls-keyfile="./CA/certs/srv01.client01.example.com.key" -p "${EXTRAPORT6}" +comm @10.53.0.1 . SOA > dig.out.test$n
+grep "status: NOERROR" dig.out.test$n > /dev/null || ret=1
+if [ $ret != 0 ]; then echo_i "failed"; fi
+status=$((status + ret))
+
 test_opcodes() {
        EXPECT_STATUS="$1"
        shift

diff --git a/bin/tests/system/start.pl b/bin/tests/system/start.pl
index 3ea6e23761f012efb45d1888b64699fabafb897e..12613b1d1ecbfacdf5e68b408b0996fea7989624 100755 (executable)
--- a/bin/tests/system/start.pl
+++ b/bin/tests/system/start.pl
@@ -204,12 +204,12 @@ sub start_server {
        my $child = `$command`;
        chomp($child);
 
-       # wait up to 40 seconds for the server to start and to write the
+       # wait up to 60 seconds for the server to start and to write the
        # pid file otherwise kill this server and any others that have
        # already been started
        my $tries = 0;
        while (!-s $pid_file) {
-               if (++$tries > 400) {
+               if (++$tries > 600) {
                        print "I:$test:Couldn't start server $command (pid=$child)\n";
                        print "I:$test:failed\n";
                        kill "ABRT", $child if ("$child" ne "");