val_ta_sentinel.rpl 22.8 KB
Newer Older
1 2 3
stub-addr: 2001:503:ba3e::2:30
trust-anchor: . IN DS 48409 8 2 3D63A0C25BCE86621DE63636F11B35B908EFE8E9381E0E3E9DEFD89EA952C27D
trust-anchor: example. IN DS 4759 8 2 3384CAE149834F17054DD9150E8C33D3979C4092F5C1B8D35E17A3C36A83810F
4
val-override-date: 20180601000000
5
query-minimization: off
6
harden-glue: off
7 8
CONFIG_END

9
SCENARIO_BEGIN draft-ietf-dnsop-kskroll-sentinel-14 section 2
10 11 12 13 14 15 16 17 18 19 20 21 22


RANGE_BEGIN 1 1000
        ADDRESS 2001:503:ba3e::2:30
        ADDRESS 198.41.0.4

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
. IN SOA
SECTION ANSWER
23 24
.					      86400 IN SOA	rootns. you.test. 2017071101 1800 900 604800 86400
.					      86400 IN RRSIG	SOA 8 0 86400 20180629135151 20180530135151 48409 . vb9XrP5h9Ojhqbs1Rbdiwxvje/TVFafSZlLf372zpYdtSBI6f7x++GYI WNiUG8EFtchEmL8KNsrWbujpa8tXeWXtatW92kG1qZAnOA40Zw1DjnI8 ZI7volYyq/TMmufKcoNAXU2knAmpZhHDZ+TBOc5HK6TwKeQaRQ6hPwxB JKOjXw2mVjQFP5lck2m2LU9a7iubYRvncRDHmqfjJ9XsSfWi1AU2fmk/ ei/bhKnFMWVH2PXtQlsbxRS8+8SaEL6f4rQC1JqwQ8E03SAZdK7oJKOf GRRFOfYOx7JucTwiV18LAa/j0owSMvuPwYjGnk6BY7e4LTMK2vPgJ3yY lqLmTw==
25 26 27 28 29 30 31 32 33
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
. IN DNSKEY
SECTION ANSWER
34 35
.					      1814400 IN DNSKEY	257 3 8 AwEAAcliJP8Jh/RjL3c8eaUj8dzVdEksENKubqVA5FdrDJ2rC0O/bGG/ MVZt+WacE1o1mRVwTT/TrhhZUAzZ+qOcpB+IWxURsR4vVqVwakHMny7D 2aLXKoVXwTo/VhAQtHDw5G9bxGgwybPUtd5Vz6EIenUsmNYZ+Spde4l8 vpw7UISVL6q0C1mwHMN18P/1yfHmbkS19b6B1S9Y2aputccF1lso3yiF Ig7UNqqD4PNxSo4jByDnajQSP3qg/LSJSOnzBIumb8wc6svxgugy/pxr BFKgGGk4/JdJCKufdfU5jFX4fJ3HM37G/RccrtGhIf2Z1utoOyaILoa9 wT3O1WaYG/U=
.					      1814400 IN RRSIG	DNSKEY 8 0 1814400 20180629135151 20180530135151 48409 . HRj68PBD0cR2p1njZcMUBecR5DiBbueyhIX1oqc9K9Rig5i+ONuozacm 3F4kg9DhUYb/1W6+PSp9YLyrJtCZOFLqkTjPiOAyiE6zVAE/U5O5LRZ/ FjqRQoWuA1cFZtrLokaWmW9GS5Kb2+PUCJY5NRz27JFSvaRRkoHIFf4o mA6eQsuWt28Itx0VGPL9+mR+2B+IcnmN+DZb7mxoRknOh0WyNop4eiep oSZcCihYHOdesCtmrxoMkwGEHZpu8a6GN7jaeNXXNUulwQYfzUZJZQo1 Zr9cN7kzIZ5tAs9ffnPRcWVO61MQTxUtuGbipFpba6RhGmML8oO4JkOJ Itp6tg==
36 37 38 39 40 41 42 43 44
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
. IN NS
SECTION ANSWER
45 46
.					      518400 IN	NS	rootns.
.					      518400 IN	RRSIG	NS 8 0 518400 20180629135151 20180530135151 48409 . ZBLk+sK9ky+YBmzceXbBqEUyBc6nWfAtF6vCK/6cCfL1AxBYOoxdwE/G m0oRAl5WHRrreDSM2t79jcyyUZyyOcee2j/mLPjLdJPQr0Dw9KY+843L o4VSWV0L9adSzgXgvQF/p4yW2zNbHia7doA9GTDjkQFj2+7HgdJdGk8S I2GCx822fqzMCdS3XerIZ4EMz8Lt1sWaexdCgi0sCn9SvqzNHTaIXirW /apL0ohiBNp23LGa7+/7UvNrv+Y/gHpKk2bUytnS7soOocd9XpTekBY7 jlRlmnHTAdn9b9Zj2PHn72v1RYIywP33Qb9ze7i2v7s12uUR3lJt9sd/ WVeuXQ==
47
SECTION ADDITIONAL
48 49 50 51
rootns.					      518400 IN	A	198.41.0.4
rootns.					      518400 IN	AAAA	2001:503:ba3e::2:30
rootns.					      518400 IN	RRSIG	A 8 1 518400 20180629135151 20180530135151 48409 . QtR9Z2uVwFVlLy5xQzMVmhqdzZw5cSFbq3xOzhr42gkoD9BYfNyTuhz9 57Sc7kvyJalBHaq3OKoYvE+4anjR8bXk20nGvVjzRdiiqavK41yUpbxC xvo5fWUMj5Bg860AcApn4OOLdFjyKOjJX7ro7QvFdA/adt9WEwhQ3AJ9 PN+SHqtx35F49OUbgiNUEbShJ2VyjOL5bt41LZgffkjim+VB2OtO1hDG CqrKyUlbZ0vxGJhtVflt1Jj3atArHfHz4cuFJHLtSu9PK9piYlSQ54XH vPk0YZ2iKK9sNrVF50Vb7NmLFBCVPn/op0Kmr+u6QVREP6uWayoPtqab /NKvwQ==
rootns.					      518400 IN	RRSIG	AAAA 8 1 518400 20180629135151 20180530135151 48409 . bs+zTG/nH7uQrgW5qfY5p25uXNoPOsH94K/xNVSLm9h1165/AMekPPd8 KVPnCfyZLPhO+/XyZ5fDUd/2iMCT5m/HyjXR0+j92r6f9ePfAJVQX6U0 DJUa882LgYK7k4usmIIWpi66bpGDC1tlJF3WQ4G12Hc/cUmFTMDBTcM8 6CPPDoT00JZQL8u/66GwNYkWw4mmbiq9UAz03R7A983dUx2GLCAmXoGR Lr3hI3btZa5x+GdJhw5t6Mqi58tXSZfUmT7kpCw+K0H/RscQaVDaOLc6 kzBeVn/Lip60ZSd84kiNWKuSA56TfUbpk7VJclY8UI34COHQqNtD+lev wJ1WgQ==
52 53 54 55 56 57 58 59 60
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
rootns. IN NS
SECTION AUTHORITY
61 62 63 64
.					      86400 IN SOA	rootns. you.test. 2017071101 1800 900 604800 86400
.					      86400 IN RRSIG	SOA 8 0 86400 20180629135151 20180530135151 48409 . vb9XrP5h9Ojhqbs1Rbdiwxvje/TVFafSZlLf372zpYdtSBI6f7x++GYI WNiUG8EFtchEmL8KNsrWbujpa8tXeWXtatW92kG1qZAnOA40Zw1DjnI8 ZI7volYyq/TMmufKcoNAXU2knAmpZhHDZ+TBOc5HK6TwKeQaRQ6hPwxB JKOjXw2mVjQFP5lck2m2LU9a7iubYRvncRDHmqfjJ9XsSfWi1AU2fmk/ ei/bhKnFMWVH2PXtQlsbxRS8+8SaEL6f4rQC1JqwQ8E03SAZdK7oJKOf GRRFOfYOx7JucTwiV18LAa/j0owSMvuPwYjGnk6BY7e4LTMK2vPgJ3yY lqLmTw==
rootns.					      86400 IN NSEC	root-key-sentinel-is-ta-00000.test. A AAAA RRSIG NSEC
rootns.					      86400 IN RRSIG	NSEC 8 1 86400 20180629135151 20180530135151 48409 . noqU9JO9z5QXcedzsm7E6RZ5aIIocIH/jSedo6Zy+GImRTeHpc0le399 DUOsqGlcagx7EWRerScB+xmpL7DxKl0FFyeG0ORvPjJ6IyCFTecWjaKW YVurQnzALW+LhfsPSTxBMnnRhxT5Qrw4dtO0gx7fWyssKUnsMcBdmESs tALFNSfJpiV7so9cK2ssHsC+jkM0AQoemSKJrTesxm8FP1BGT27tz/vx yWIlOUGc8/gBgHo4hoXH1oyCrw9KU9kczRqw4CoCGJtZ2/k15BfmbPlC kLrvLibEmp6OYPVWfJRG79uDHhT+Tul07j26WmA+A7IWXSye8W51WbdH 7gJTKQ==
65 66 67 68 69 70 71 72 73
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
rootns. IN A
SECTION ANSWER
74 75
rootns.					      518400 IN	A	198.41.0.4
rootns.					      518400 IN	RRSIG	A 8 1 518400 20180629135151 20180530135151 48409 . QtR9Z2uVwFVlLy5xQzMVmhqdzZw5cSFbq3xOzhr42gkoD9BYfNyTuhz9 57Sc7kvyJalBHaq3OKoYvE+4anjR8bXk20nGvVjzRdiiqavK41yUpbxC xvo5fWUMj5Bg860AcApn4OOLdFjyKOjJX7ro7QvFdA/adt9WEwhQ3AJ9 PN+SHqtx35F49OUbgiNUEbShJ2VyjOL5bt41LZgffkjim+VB2OtO1hDG CqrKyUlbZ0vxGJhtVflt1Jj3atArHfHz4cuFJHLtSu9PK9piYlSQ54XH vPk0YZ2iKK9sNrVF50Vb7NmLFBCVPn/op0Kmr+u6QVREP6uWayoPtqab /NKvwQ==
76 77 78 79 80 81 82 83 84
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
rootns. IN AAAA
SECTION ANSWER
85 86
rootns.					      518400 IN	AAAA	2001:503:ba3e::2:30
rootns.					      518400 IN	RRSIG	AAAA 8 1 518400 20180629135151 20180530135151 48409 . bs+zTG/nH7uQrgW5qfY5p25uXNoPOsH94K/xNVSLm9h1165/AMekPPd8 KVPnCfyZLPhO+/XyZ5fDUd/2iMCT5m/HyjXR0+j92r6f9ePfAJVQX6U0 DJUa882LgYK7k4usmIIWpi66bpGDC1tlJF3WQ4G12Hc/cUmFTMDBTcM8 6CPPDoT00JZQL8u/66GwNYkWw4mmbiq9UAz03R7A983dUx2GLCAmXoGR Lr3hI3btZa5x+GdJhw5t6Mqi58tXSZfUmT7kpCw+K0H/RscQaVDaOLc6 kzBeVn/Lip60ZSd84kiNWKuSA56TfUbpk7VJclY8UI34COHQqNtD+lev wJ1WgQ==
87 88 89 90 91 92 93
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
94
root-key-sentinel-is-ta-48409.test. IN A
95
SECTION ANSWER
96 97
root-key-sentinel-is-ta-48409.test.	      1	IN A		192.0.2.1
root-key-sentinel-is-ta-48409.test.	      1	IN RRSIG	A 8 2 1 20180629135151 20180530135151 48409 . qWJh+EE/O2w382vLo53ci9i1O/rAzJUUnZPmLF+GCwmLLhDl6tlI3y5A cALqIHkK1vrXzD+mED78YpILzZ73izRFieY6DxMtAXViqH9U8KSy6KWp tAWUASDe1gj9DGdDeiKdTAIo/2qk1PiGdZNc2E9vQLIUTJNfwV8aZGIt PTgl/efGEIMGGFQW5RPbDZpcJLQ11/RUi9FHQyseZRwkCa8EiEfgvPJ2 /rwiCPUcM6BdYzKoZ53cAHBbeKkvgAOpQ88qDvtE12aF9F8anxdHd0Ru 2DlmrPPthn7/faXSBbBECIbnjNlWTiyF7r274SQKFCrT0rJx5N9c31n4 ZSIocg==
98 99 100 101 102 103 104
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
105
root-key-sentinel-is-ta-48409.test. IN AAAA
106
SECTION ANSWER
107 108
root-key-sentinel-is-ta-48409.test.	      1	IN AAAA		2001:db8::
root-key-sentinel-is-ta-48409.test.	      1	IN RRSIG	AAAA 8 2 1 20180629135151 20180530135151 48409 . J4gFrZRSHHDfMoA2zO22H6A55/893OnGO7h3H9znJGZtp7DxT2vxiGJw InBx5/zPubH87rqTa4AkK2GZuDEqVEDU/fjWOjGQOx16V0oeoHi5/R2R sPTzFnb+NvQnQZCRolMHD2keakdzB8b7dfEV80CrRh7uDsiO8aqhSdiV BFJLXFt5qFd+evKw2SG7l9FNMDzukUSAcFIJepM99X7qjQnKsLuzDjyF 4zhgMolAzAwIQzEi4B+G6IQknx5HsvmpNgkbBFjns+Q7ZYutNecPfiYU vaMpSXb5pztCVLbZQEymIXPgsnzdihlMbzh22TZapLbrDBUVEc2yr/QC Tz/CQA==
109 110 111 112 113 114 115
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
116
root-key-sentinel-is-ta-48409.test. IN TXT
117
SECTION ANSWER
118 119
root-key-sentinel-is-ta-48409.test.	      1	IN TXT		"it works"
root-key-sentinel-is-ta-48409.test.	      1	IN RRSIG	TXT 8 2 1 20180629135151 20180530135151 48409 . tl+oiYdq+UDlh6snkobPI/jQbrPM2tESEyDNIec7wCRvCEo6CLd+oMOA H4P7idKJ1Mey0eMl++YI29Vz2KVAIL0Hiamt32VDXyR5QYVVzNQquH5B /P4PDeoSadK1M+VThnSPT685+CLCbAZfu0Hi7+NulEeQLleBMtSGy0pF eG50H7fecNjqmQ2O/3jKRfD8l86+jba3B2FmpPvsxXgR7Ig5jC/XSpSY 0UMXyntDJz7QOSuhh4GcdNEeUqGVTurqnFjgRmZwReVZqeQzCS8Q+eQn cq23FtXxcAqJCFKN68yoorWmlZhZl0DPm4Zpup28wwlIapO+SGwScD0q KyHZYQ==
120 121 122 123 124 125 126
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
127
root-key-sentinel-not-ta-48409.test. IN A
128
SECTION ANSWER
129 130
root-key-sentinel-not-ta-48409.test.	      1	IN A		192.0.2.1
root-key-sentinel-not-ta-48409.test.	      1	IN RRSIG	A 8 2 1 20180629135151 20180530135151 48409 . N1vrpd062YN/PGLOmdAdgPOc2iPPBadtv+DlqoCJ8OUEtFH605m7AUlX HDV99dpT7j6I/N+Sp6pDMRIRl+rB/tFXNfQFoB7UliAsKQ9UuKxH/uyc /sZWxPmYb+4Xi1AKmkzvp7M3Babq7hTGG/PnngN3386Qd0MXiw11Tdl9 +HIan1Jz2jMrHuR2NZDILZOW10wYogYD3/DAx6bVaJMjDbIky5ikK2H/ 4QajIhtjuux4GfsFc7KjGzT1/Hqa9LqdsLetvQmKF4yGNjizOgnrHlbF GoICQ1KihXF3IGYcBUyIoMcmhAjz6D0/jQz/Blwx3zvEUj2Hf7Xj+haO ShdguQ==
131 132 133 134 135 136 137
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
138
root-key-sentinel-not-ta-48409.test. IN AAAA
139
SECTION ANSWER
140 141
root-key-sentinel-not-ta-48409.test.	      1	IN AAAA		2001:db8::
root-key-sentinel-not-ta-48409.test.	      1	IN RRSIG	AAAA 8 2 1 20180629135151 20180530135151 48409 . UYk1xmrw2A7ojKSTpwuF90WXsXOfNbRI8pi9tDPLmqr0OMn29AW051vG TyLd7L3ogsaoUEDiY2vYyvyZI3kPL9fSRDYgOIk7Cq3hp7k6wMM3IXS6 iIlYnjtvUFGDaE69EpUjwII22lSWaqOo0dCFnacJYWDfShdZcv7yssWG 9nZpki6aiBAjhYXY8tdMnpDJzq9O3zXPQR8xtuFW4S0aVdrHuSPRq935 DWXThocHxOza6OQp/ZkbemkoqAYjTlu0tyITwZsTknxgK1mtM+ArRmhS eykqVs3mmAGIWMN3qIW8SXKVRHI9PPjka0j6+KK+bfmeck0bI2Wu1f3C cnk+nQ==
142 143 144 145 146 147 148
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
149
root-key-sentinel-not-ta-48409.test. IN TXT
150
SECTION ANSWER
151 152
root-key-sentinel-not-ta-48409.test.	      1	IN TXT		"it works"
root-key-sentinel-not-ta-48409.test.	      1	IN RRSIG	TXT 8 2 1 20180629135151 20180530135151 48409 . NLK3/UMZZ+39KgwbFFoS6qR2QTEULMxDhlWpK1is+AU3CjUn1RNPRJaq m1MnfJdEq3+FFwVDkpmDGh8lQfTBn192oWlo2goHXZXwuoFN49FPHZ+l u42NWMDKtmS6r9JemJR68jH0jy/AsTMdvAbeodg06cbY6F5Q80EtAdkZ iOZPnqPenfxI+U8C2KgBNas7izGbQZF3FxHi7GZz+wrCGBcjcYX9pcD9 /rf1plZYudefFbxG+P97WfMScDD5vt0dUxz3Yt6YUC48jlyo9WYZDLC5 3qOuqah5oXS1lCGJDm+Kta4koVnm6W4pbCzT9XISwRWZ81rp0NbTrhHb Teu7Pw==
153 154 155 156 157 158 159
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
160
root-key-sentinel-is-ta-00000.test. IN A
161
SECTION ANSWER
162 163
root-key-sentinel-is-ta-00000.test.	      1	IN A		192.0.2.1
root-key-sentinel-is-ta-00000.test.	      1	IN RRSIG	A 8 2 1 20180629135151 20180530135151 48409 . iYK8FfKFt+aD2Mh+hvFxyE0lCs/jHMT8EWlhPGuiPekHkYnbTaRbGJhT sCeL3Cg1MHrtGr8BXSq1RMyKnn6Y0/bhF1nEjk1gB+vAFHUwWe0yX32U H7E139q68ZyrcUkpV+KkY+ltMSKAjBtGRkYZ9sJhFvll7YCD2HtAMPud KEWpTZS2D0fLATDzAJzJF/2qGMvRUIn0sk5+3HqVh7R3stbl4aSEw5Zp swJoSCs1DN5eaLh6Ovas51uDAa4t6Ove6owR/gR9isqdZCbilAaJ6497 xg4r/KsCu6eG7GAAw5XGh8rkpC5YbsCBlXB565Zk5oY4yBgBUiG/iXGC wyLyJA==
164 165 166 167 168 169 170
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
171
root-key-sentinel-is-ta-00000.test. IN AAAA
172
SECTION ANSWER
173 174
root-key-sentinel-is-ta-00000.test.	      1	IN AAAA		2001:db8::
root-key-sentinel-is-ta-00000.test.	      1	IN RRSIG	AAAA 8 2 1 20180629135151 20180530135151 48409 . QNF7LtVeew75AhniJ7S0ncsmrHWHCnRcU0H3uyCipyL20kHlpc1NOIUY md7BB02MXm+XOpJF/l/uc9v/C0iuAgOpFVp5kVjtp+gTu2mgceXstFuP 3tNmrL2pSRIWaN8+koS0MlAZCrH9+J9RSFrm5twtD7bIvGT0FVvy/RrR pRWPy9hbqjH6O5DFMdksdVTPLEYFXevAHGKvRa5beRXkrL9ANfVzvPYl q2RaO1aMX6+Cy7AquJpU7DUSReEUBr1f7mYVdd/6sjzoXrd893c+2Fc+ WFLVuWER3eTSrLAQ3b3Etz0lqM3MLrEXwjQFl2mw046nlh21T+u2Ds5s s1/b8g==
175 176 177 178 179 180 181
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
182
root-key-sentinel-is-ta-00000.test. IN TXT
183
SECTION ANSWER
184 185
root-key-sentinel-is-ta-00000.test.	      1	IN TXT		"it works"
root-key-sentinel-is-ta-00000.test.	      1	IN RRSIG	TXT 8 2 1 20180629135151 20180530135151 48409 . cGVwlSItiMGEOKkCWRLUn2od/cBvOlSwj8qxCppe4O1FRyTGgEFNV2nf 2zUkhL/agQhXI3qEjFOkq2b1l+4dM3BwDOF7IGhS3yXV3JGnIcwOC7si EMjRZGIvcEenjfugpIwkwkhTZdgIFoyCUr+g6YxA3iL6L77dftAmIkAV 6gvyarwgeYs0Wi+eEGfrZp2MxJjHDXKF+NfCy/fJnYx2n8SRpXya/Uu+ DJ+S4FQDTDyjDhN/+Tvcsb++sjvNfA4ZDwx5gpgNkRF0xsLHMoxCQagH gJBBziP0cq7l2fy5FVMpGNvdkkiYYG8to/2FF/65GhV+RuNcotD91zyW aeSxWw==
186 187 188 189 190 191 192
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
193
root-key-sentinel-not-ta-00000.test. IN A
194
SECTION ANSWER
195 196
root-key-sentinel-not-ta-00000.test.	      1	IN A		192.0.2.1
root-key-sentinel-not-ta-00000.test.	      1	IN RRSIG	A 8 2 1 20180629135151 20180530135151 48409 . YYqLZKzjD13hpj345YTNMYYEh3US2BY7DqK9YbNIZi4T0/0jAEFPamKW WcX0nPm5N5S+1VqKIdo/brqvOTaxsq7HnPxVfomg3wyaKNvwqxb2MUpa pYl25ORa7yOm3gwVZJ3NBjh65dLXzGn8t8b047ym7Fnz6JAJHUyM4/SH hZhvXYBX+i3Lojq7HDIReqAtH7zzWdKzKLCTNqAhuqfvEI3edVynpth2 SCMNDVaAUlzVfBLEAkHNp26mLSgcarc3vrb2khdDS13Kv0Ev4rj0w0v1 z0DnVs95Yl2XlnShzNTaW5w1F8f81oBbq2Ly2POxERr5cOCNSGIWMi+q XAt7bQ==
197 198 199 200 201 202 203
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
204
root-key-sentinel-not-ta-00000.test. IN AAAA
205
SECTION ANSWER
206 207
root-key-sentinel-not-ta-00000.test.	      1	IN AAAA		2001:db8::
root-key-sentinel-not-ta-00000.test.	      1	IN RRSIG	AAAA 8 2 1 20180629135151 20180530135151 48409 . mHz8sEjHOt+UrLPdGr3s+dake/eRQ6QmushFbLex2e6epkvmriVQwdWa QqG4h75UmjNnOlAwpHJA3oRyKxLJKmVgJIAQzhFc6sHLwEVl+kVyxGfu Q17Md+52E/d+mLMHohKRXljTaghp2uLHX8oDtBP+B2HhIDJK+uhfK63A MZ4k1L4jBGCvEGVMO7BhrpHV9zbY21MOb6EIp/F35jB+ftW7gilKxxBK t+Qt1pwtJcDGVC2xZST6fZ2yaR+U+YhOJ7t9j6WVVTWyFSa1CG3lzyRW PNduZeKYTYwox2uqqUxh+Nmzd1oZt7geIw8CGTYS0B++nVUdNJXJnP51 +evqJQ==
208 209 210 211 212 213 214
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
215
root-key-sentinel-not-ta-00000.test. IN TXT
216
SECTION ANSWER
217 218
root-key-sentinel-not-ta-00000.test.	      1	IN TXT		"it works"
root-key-sentinel-not-ta-00000.test.	      1	IN RRSIG	TXT 8 2 1 20180629135151 20180530135151 48409 . SjAFtdUPy+YU4sZnst5GNNYxjzWhBOVqUAfGIUv3uBo5qZW9ePecUJ8G ZkNUkdT7m+cHd0c1ssOBOT7snjwc3Sy3zD22b6/q3N8VowhDQDPkoDlB vt9raR7eXu273cEBDZTQ9P4Ya2Meu32Aftwa6VMQmXMl+qWXhYqffEt6 bJuoohnCVqOZihqgnoT+sRiDl49RgLb+GnZNbFk5EP9LXOrWcdxczKso tY384WCrniRmg4L6NM5DjnBtUVT+Qs6fhWGqQv23fPiLV8lt4i34aIf2 jAQkIE6KD4aNLlehct7eqFo1aeaiZumqEd9/GoqSat/RE7Qsh6hiRkfA /J7MLg==
219 220 221 222 223 224 225
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
226
root-key-sentinel-is-ta-04759.test. IN A
227
SECTION ANSWER
228 229
root-key-sentinel-is-ta-04759.test.	      1	IN A		192.0.2.33
root-key-sentinel-is-ta-04759.test.	      1	IN RRSIG	A 8 2 1 20180629135151 20180530135151 48409 . B3RxvVwGi4W0SJPOexXga1Bm4nDiL4u/ITn30YXMPg8yOVOFWQ2axvG/ HdMFU6VSzm5GGIh0e+KR9Jzcvyt2yC3081SrclIkque3LJM1Ar5wa3GO 2M1EC3TuKs+L0WjLXfUTGie7n3mYfoiT+QBfZ4v60JQaD4U+UetZ5Ocn 2rXvuC0Rk9LI+j1Us7u2somZy/swl0Luvg4e+bueHRpTAgKf4nLHFZ8A HEAK0Vy3FG0N4q/oPWx1i9hVNxEaJQIwVcW01KDbP2sqFUNUm3bpT8aH fKRK4hy7MKkDsLrkpcbVbhI4vq8D1GKMtiUjU2kRjQ4VEMzXzXHhPcUi jMf7qw==
230 231 232 233 234 235 236
ENTRY_END

ENTRY_BEGIN
MATCH opcode question
ADJUST copy_id
REPLY NOERROR QR AA DO
SECTION QUESTION
237
root-key-sentinel-not-ta-04759.test. IN A
238
SECTION ANSWER
239 240
root-key-sentinel-not-ta-04759.test.	      1	IN A		192.0.2.33
root-key-sentinel-not-ta-04759.test.	      1	IN RRSIG	A 8 2 1 20180629135151 20180530135151 48409 . sUfM6dehUU9p1QnVX9QIT3K2kvKoU9qGTMNKdVz84AdJJMGnqMbosBpE LusmcZtwcGNjU8jcFdal/t03b+z0jk5BoEG0lzgFGNSp1S1sDGHYTcrv hAHmWpN4a0BEV/ZIOuu1ZJ8s0vRajnAB75jpSGsRdPmCTG/TKeAUJoF+ gua4lLlHnDlLnIVXThL3THqWqoTwg7Ch12piwrklZXNHbSsgcKwwG4SB 8OGY13ewXpH90EYkAFgmLIsavY7Ddhu8ZcFiE5nh6JQrwi7rsAtsr3cx x2rJrMTSEGP1F103YLzxyI4sTiIOGLaxQ7rGuASLGDQW5Cy0mKGgUAXI B0e7NA==
241 242 243 244
ENTRY_END
RANGE_END

; sentinel does not affect qtypes different than A/AAAA
245
; +AD
246 247 248 249
STEP 111 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
250
root-key-sentinel-is-ta-48409.test. IN TXT
251 252 253 254 255 256 257
ENTRY_END

STEP 112 CHECK_ANSWER
ENTRY_BEGIN
REPLY QR RD RA AD NOERROR
MATCH opcode rcode flags question answer
SECTION QUESTION
258
root-key-sentinel-is-ta-48409.test. IN TXT
259
SECTION ANSWER
260
root-key-sentinel-is-ta-48409.test. IN TXT "it works"
261 262 263 264 265 266
ENTRY_END

STEP 121 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
267
root-key-sentinel-not-ta-48409.test. IN TXT
268 269 270 271 272 273 274
ENTRY_END

STEP 122 CHECK_ANSWER
ENTRY_BEGIN
REPLY QR RD RA AD NOERROR
MATCH opcode rcode flags question answer
SECTION QUESTION
275
root-key-sentinel-not-ta-48409.test. IN TXT
276
SECTION ANSWER
277
root-key-sentinel-not-ta-48409.test. IN TXT "it works"
278 279
ENTRY_END

280
; RD only
281 282
STEP 131 QUERY
ENTRY_BEGIN
283
REPLY RD
284
SECTION QUESTION
285
root-key-sentinel-is-ta-00000.test. IN TXT
286 287 288 289
ENTRY_END

STEP 132 CHECK_ANSWER
ENTRY_BEGIN
290
REPLY QR RD RA NOERROR
291 292
MATCH opcode rcode flags question answer
SECTION QUESTION
293
root-key-sentinel-is-ta-00000.test. IN TXT
294
SECTION ANSWER
295
root-key-sentinel-is-ta-00000.test. IN TXT "it works"
296 297 298 299
ENTRY_END

STEP 141 QUERY
ENTRY_BEGIN
300
REPLY RD
301
SECTION QUESTION
302
root-key-sentinel-not-ta-00000.test. IN TXT
303 304 305 306
ENTRY_END

STEP 142 CHECK_ANSWER
ENTRY_BEGIN
307
REPLY QR RD RA NOERROR
308 309
MATCH opcode rcode flags question answer
SECTION QUESTION
310
root-key-sentinel-not-ta-00000.test. IN TXT
311
SECTION ANSWER
312
root-key-sentinel-not-ta-00000.test. IN TXT "it works"
313 314
ENTRY_END

315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352
; +CD
STEP 143 QUERY
ENTRY_BEGIN
REPLY RD CD
SECTION QUESTION
root-key-sentinel-not-ta-00000.test. IN TXT
ENTRY_END

STEP 144 CHECK_ANSWER
ENTRY_BEGIN
REPLY QR RD RA CD NOERROR
MATCH opcode rcode flags question answer
SECTION QUESTION
root-key-sentinel-not-ta-00000.test. IN TXT
SECTION ANSWER
root-key-sentinel-not-ta-00000.test. IN TXT "it works"
ENTRY_END

; +CD+DO
STEP 145 QUERY
ENTRY_BEGIN
REPLY RD CD DO
SECTION QUESTION
root-key-sentinel-not-ta-00000.test. IN TXT
ENTRY_END

STEP 146 CHECK_ANSWER
ENTRY_BEGIN
REPLY QR RD RA CD DO NOERROR
MATCH opcode rcode flags question answer
SECTION QUESTION
root-key-sentinel-not-ta-00000.test. IN TXT
SECTION ANSWER
root-key-sentinel-not-ta-00000.test. IN TXT "it works"
root-key-sentinel-not-ta-00000.test. IN RRSIG TXT 8 2 1 20180629135151 20180530135151 48409 . SjAFtdUPy+YU4sZnst5GNNYxjzWhBOVq UAfGIUv3uBo5qZW9ePecUJ8GZkNUkdT7 m+cHd0c1ssOBOT7snjwc3Sy3zD22b6/q 3N8VowhDQDPkoDlBvt9raR7eXu273cEB DZTQ9P4Ya2Meu32Aftwa6VMQmXMl+qWX hYqffEt6bJuoohnCVqOZihqgnoT+sRiD l49RgLb+GnZNbFk5EP9LXOrWcdxczKso tY384WCrniRmg4L6NM5DjnBtUVT+Qs6f hWGqQv23fPiLV8lt4i34aIf2jAQkIE6K D4aNLlehct7eqFo1aeaiZumqEd9/GoqS at/RE7Qsh6hiRkfA/J7MLg==
ENTRY_END


353 354
; keyid 48409 is trusted
; is-ta hit for keyid 48409 -> NOERROR
355
; +AD
356 357 358 359
STEP 211 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
360
root-key-sentinel-is-ta-48409.test. IN A
361 362 363 364
ENTRY_END

STEP 212 CHECK_ANSWER
ENTRY_BEGIN
365
REPLY QR RD RA AD NOERROR
366 367
MATCH opcode rcode flags question answer
SECTION QUESTION
368
root-key-sentinel-is-ta-48409.test. IN A
369
SECTION ANSWER
370
root-key-sentinel-is-ta-48409.test. 1 IN A 192.0.2.1
371 372
ENTRY_END

373
; RD only
374 375
STEP 221 QUERY
ENTRY_BEGIN
376
REPLY RD
377
SECTION QUESTION
378
root-key-sentinel-is-ta-48409.test. IN AAAA
379 380 381 382
ENTRY_END

STEP 222 CHECK_ANSWER
ENTRY_BEGIN
383
REPLY QR RD RA NOERROR
384 385
MATCH opcode rcode flags question answer
SECTION QUESTION
386
root-key-sentinel-is-ta-48409.test. IN AAAA
387
SECTION ANSWER
388
root-key-sentinel-is-ta-48409.test. 1 IN AAAA 2001:db8::
389 390
ENTRY_END

391

392
; not-ta miss for keyid 48409 -> SERVFAIL
393
; +AD
394 395 396 397
STEP 311 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
398
root-key-sentinel-not-ta-48409.test. IN A
399 400 401 402
ENTRY_END

STEP 312 CHECK_ANSWER
ENTRY_BEGIN
403
REPLY QR RD RA SERVFAIL
404 405
MATCH opcode rcode flags question answer
SECTION QUESTION
406
root-key-sentinel-not-ta-48409.test. IN A
407 408
ENTRY_END

409
; query without AD must SERVFAIL as well
410
STEP 321 QUERY
411
ENTRY_BEGIN
412
REPLY RD
413
SECTION QUESTION
414
root-key-sentinel-not-ta-48409.test. IN AAAA
415 416 417 418
ENTRY_END

STEP 322 CHECK_ANSWER
ENTRY_BEGIN
419
REPLY QR RD RA SERVFAIL
420 421
MATCH opcode rcode flags question answer
SECTION QUESTION
422
root-key-sentinel-not-ta-48409.test. IN AAAA
423 424
ENTRY_END

425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462
; +CD must disable sentinel logic
STEP 323 QUERY
ENTRY_BEGIN
REPLY RD CD
SECTION QUESTION
root-key-sentinel-not-ta-48409.test. IN AAAA
ENTRY_END

STEP 324 CHECK_ANSWER
ENTRY_BEGIN
REPLY QR RD RA CD NOERROR
MATCH opcode rcode flags question answer
SECTION QUESTION
root-key-sentinel-not-ta-48409.test. IN AAAA
SECTION ANSWER
root-key-sentinel-not-ta-48409.test. IN AAAA 2001:db8::
ENTRY_END

; +CD+DO must disable sentinel logic as well
STEP 325 QUERY
ENTRY_BEGIN
REPLY RD CD DO
SECTION QUESTION
root-key-sentinel-not-ta-48409.test. IN AAAA
ENTRY_END

STEP 326 CHECK_ANSWER
ENTRY_BEGIN
REPLY QR RD RA CD DO NOERROR
MATCH opcode rcode flags question answer
SECTION QUESTION
root-key-sentinel-not-ta-48409.test. IN AAAA
SECTION ANSWER
root-key-sentinel-not-ta-48409.test. IN AAAA 2001:db8::
root-key-sentinel-not-ta-48409.test. IN RRSIG AAAA 8 2 1 20180629135151 20180530135151 48409 . UYk1xmrw2A7ojKSTpwuF90WXsXOfNbRI 8pi9tDPLmqr0OMn29AW051vGTyLd7L3o gsaoUEDiY2vYyvyZI3kPL9fSRDYgOIk7 Cq3hp7k6wMM3IXS6iIlYnjtvUFGDaE69 EpUjwII22lSWaqOo0dCFnacJYWDfShdZ cv7yssWG9nZpki6aiBAjhYXY8tdMnpDJ zq9O3zXPQR8xtuFW4S0aVdrHuSPRq935 DWXThocHxOza6OQp/ZkbemkoqAYjTlu0 tyITwZsTknxgK1mtM+ArRmhSeykqVs3m mAGIWMN3qIW8SXKVRHI9PPjka0j6+KK+ bfmeck0bI2Wu1f3Ccnk+nQ==
ENTRY_END


463
; keyid 0x0000 is not trusted
464
; is-ta miss for keyid 0x0000 -> SERVFAIL
465
; +AD
466 467 468 469
STEP 411 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
470
root-key-sentinel-is-ta-00000.test. IN A
471 472 473 474
ENTRY_END

STEP 412 CHECK_ANSWER
ENTRY_BEGIN
475
REPLY QR RD RA SERVFAIL
476 477
MATCH opcode rcode flags question answer
SECTION QUESTION
478
root-key-sentinel-is-ta-00000.test. IN A
479 480 481 482 483 484
ENTRY_END

STEP 422 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
485
root-key-sentinel-is-ta-00000.test. IN AAAA
486 487
ENTRY_END

488
STEP 423 CHECK_ANSWER
489
ENTRY_BEGIN
490
REPLY QR RD RA SERVFAIL
491 492
MATCH opcode rcode flags question answer
SECTION QUESTION
493
root-key-sentinel-is-ta-00000.test. IN AAAA
494 495
ENTRY_END

496
; +CD must disable sentinel logic
497
STEP 424 QUERY
498 499 500 501 502 503
ENTRY_BEGIN
REPLY RD CD
SECTION QUESTION
root-key-sentinel-is-ta-00000.test. IN AAAA
ENTRY_END

504
STEP 425 CHECK_ANSWER
505 506 507 508 509 510 511 512 513 514
ENTRY_BEGIN
REPLY QR RD RA CD NOERROR
MATCH opcode rcode flags question answer
SECTION QUESTION
root-key-sentinel-is-ta-00000.test. IN AAAA
SECTION ANSWER
root-key-sentinel-is-ta-00000.test. IN AAAA 2001:db8::
ENTRY_END


515
; not-ta hit for keyid 0x0000 -> NOERROR
516 517 518 519
STEP 511 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
520
root-key-sentinel-not-ta-00000.test. IN A
521 522 523 524
ENTRY_END

STEP 512 CHECK_ANSWER
ENTRY_BEGIN
525
REPLY QR RD RA AD NOERROR
526 527
MATCH opcode rcode flags question answer
SECTION QUESTION
528
root-key-sentinel-not-ta-00000.test. IN A
529
SECTION ANSWER
530
root-key-sentinel-not-ta-00000.test. IN A 192.0.2.1
531 532 533 534 535 536
ENTRY_END

STEP 521 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
537
root-key-sentinel-not-ta-00000.test. IN AAAA
538 539 540 541
ENTRY_END

STEP 522 CHECK_ANSWER
ENTRY_BEGIN
542
REPLY QR RD RA AD NOERROR
543 544
MATCH opcode rcode flags question answer
SECTION QUESTION
545
root-key-sentinel-not-ta-00000.test. IN AAAA
546
SECTION ANSWER
547
root-key-sentinel-not-ta-00000.test. IN AAAA 2001:db8::
548 549
ENTRY_END

550

551
; TA for non-root domains are interpreted correctly
552
; not-ta ignores existing non-root TA keyid 04759 -> NOERROR
553 554 555 556
STEP 611 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
557
root-key-sentinel-not-ta-04759.test. IN A
558 559 560 561
ENTRY_END

STEP 612 CHECK_ANSWER
ENTRY_BEGIN
562
REPLY QR RD RA AD NOERROR
563 564
MATCH opcode rcode flags question answer
SECTION QUESTION
565
root-key-sentinel-not-ta-04759.test. IN A
566
SECTION ANSWER
567
root-key-sentinel-not-ta-04759.test. 1 IN A 192.0.2.33
568 569
ENTRY_END

570
; is-ta ignores existing non-root TA keyid 04759 -> SERVFAIL
571 572 573 574
STEP 621 QUERY
ENTRY_BEGIN
REPLY RD AD
SECTION QUESTION
575
root-key-sentinel-is-ta-04759.test. IN A
576 577 578 579
ENTRY_END

STEP 622 CHECK_ANSWER
ENTRY_BEGIN
580
REPLY QR RD RA SERVFAIL
581 582
MATCH opcode rcode flags question answer
SECTION QUESTION
583
root-key-sentinel-is-ta-04759.test. IN A
584 585 586
ENTRY_END

SCENARIO_END