Commit 0c0b91ee authored by Vladimír Čunát's avatar Vladimír Čunát

resolver/val_unknown_algorithm_insecure: fix with kresd

In current kresd implementation, in some cases it requires existence
of RRSIGs and DNSKEYs even if the zone uses an unknown algorithm.
There seems no indication that missing those records should be OK for
some future algorithms, so we fix the test instead of kresd, for now.
parent 7f998141
Pipeline #10170 failed with stage
in 1 minute and 37 seconds
......@@ -3,7 +3,7 @@ trust-anchor: . IN DS 17002 8 2 775F52082C6A93154F15799C7BC9A47C0DA27C9828BA1EBA
query-minimization: no
CONFIG_END
SCENARIO_BEGIN Test DNSSEC with unknown algorighm
SCENARIO_BEGIN Test DNSSEC with unknown algorithm
RANGE_BEGIN 10 40
......@@ -62,6 +62,7 @@ SECTION QUESTION
test. IN SOA
SECTION ANSWER
test. 86400 IN SOA rootns. you.test. 2017071100 1800 900 604800 86400
test. 86400 IN RRSIG SOA 253 1 86400 20170815084229 20170716084229 12062 test. UNUSABLE==
ENTRY_END
ENTRY_BEGIN
......@@ -75,6 +76,17 @@ test. 1 IN DS 12062 253 2 E18BD6A9E00A75C0FE17CFBB300AF4A34C1F3F1CCADDF5664600
test. 1 IN RRSIG DS 8 1 1 20170815084229 20170716084229 17002 . KIbj4XGbPWamI8atPM2x5EzAQu2KC+raKS5AYBuX+blxyOrIYtVhSc1Z poauPhDbofYNAMu9KqZmQkNjaOW9i5Z9NmGXQgTmC5l0TfGC4mc3a21E 3ykuQlVqVfOIkEvA+1boA19mGYw0IQ6MAP6NazDNvsOepCTAxyh0U5Va CvoD3QQMwSHImvhUwbC3Lao2kOIuIHVF1zge4SK+m9eBg6LCqtcD8nJJ gHIdO7r/o+d9miXjjfztRR0ZTaJGz4tZKXgOLJYxDcgjxLXF6unSB68e 1jsa+BncWwyvvkP75VZ9EvCpBgfCGdwg0eujFaRwa3PE1/nPqUaCgael 1qzbXQ==
ENTRY_END
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
test. IN DNSKEY
SECTION ANSWER
test. 86400 IN DNSKEY 257 3 253 UNUSABLE==
test. 86400 IN RRSIG DNSKEY 253 0 86400 20170815084229 20170716084229 12062 test. UNUSABLE==
ENTRY_END
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
......@@ -83,6 +95,7 @@ SECTION QUESTION
test2. IN SOA
SECTION ANSWER
test2. 86400 IN SOA rootns. you.test2. 2017071100 1800 900 604800 86400
test2. 86400 IN RRSIG SOA 255 1 86400 20170815084229 20170716084229 12062 test2. UNUSABLE==
ENTRY_END
ENTRY_BEGIN
......@@ -96,6 +109,17 @@ test2. 1 IN DS 12062 8 255 E18BD6A9E00A75C0FE17CFBB300AF4A34C1F3F1CCADDF566460
test2. 1 IN RRSIG DS 8 1 1 20170816080814 20170717080814 17002 . QKmpsz0Q+9n9GiVdyLosxo9gxNRWDR9RrZho5iYW+8TMkW/T4o5ifkjc 79BQkz48hEjrtKF4qvzWjSnM2YMnSGO63pjngjXSPw6zIoBuEihM9Tf/ SAvJfBFdf3m3XYfF5lleC1GbJfSxCLy8KTepS2JhZo6fvNQ+TfPOOBQT eWAVPaxd2VzbuHMz8mkF8QaNLZJhuaJ7EFx6UzcoDpBL5Lv7uPqtm/Nk ovfmu/NxOkbWsrijiB3YwcP5b/V9Qfgkt27P9o8PFx/u3NzSmirRrvm9 C0apwznU+h2xBQ8hy3VlDxkGeS4IA7cH6o7EeLmuIV7MqLsWmAfhNd6J uuVQ4Q==
ENTRY_END
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
test2. IN DNSKEY
SECTION ANSWER
test2. 86400 IN DNSKEY 257 3 255 UNUSABLE==
test2. 86400 IN RRSIG DNSKEY 255 0 86400 20170815084229 20170716084229 12062 test. UNUSABLE==
ENTRY_END
RANGE_END
......@@ -133,4 +157,4 @@ SECTION ANSWER
test2. 86400 IN SOA rootns. you.test2. 2017071100 1800 900 604800 86400
ENTRY_END
SCENARIO_END
\ No newline at end of file
SCENARIO_END
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment