Commit 4888d7cd authored by Petr Špaček's avatar Petr Špaček

Test for www.nicmexico.mx. AD flag

Test with real world Internet data:
Our attempt to resolve www.nic.mx A leads to CNAME www.nicmexico.mx.
Sub-tree nic.mx is not signed and nixmexico.mx is signed.
The answer must not have AD flag set!
The first resolution process may polute cache with insecure records.
Verify that answer for www.nicmexico.mx A has AD bit set!
parent 029f5102
......@@ -8,7 +8,7 @@ trust-anchor: ". 172800 IN DS 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a4185
stub-addr: 2001:dc3::35
CONFIG_END
SCENARIO_BEGIN www.nic.mx. CNAME kresd issue
SCENARIO_BEGIN www.nic.mx. CNAME kresd issue #144
; DNS root ; M.ROOT-SERVERS.NET.
RANGE_BEGIN 0 100
......@@ -232,7 +232,7 @@ ENTRY_END
STEP 11 CHECK_ANSWER
ENTRY_BEGIN
MATCH flags rcode question answer
MATCH rcode flags question answer
REPLY QR RD RA DO NOERROR
SECTION QUESTION
www.nic.mx. IN A
......@@ -245,4 +245,25 @@ www.nicmexico.mx. 171139 IN A 200.94.180.55
www.nicmexico.mx. 171139 IN RRSIG A 7 3 172800 20170221235959 20161221161902 14618 nicmexico.mx. s3THv+Ay2WrcOTG6bo+54Zc/rff/jhzcJKZ3ZRYMXhw3FToSvTOSqsIG1gzW/Sk6r2oikHH3nNluaMTAXfCULu2mHiQVAuFlnajFSMPcm8KvEyV0cCT7knkAFqb+ODkimPMufRHiOLbnhQk9/A25qK7J8rCB76IUmzk41hYRNBU=
ENTRY_END
STEP 20 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
www.nicmexico.mx. IN A
ENTRY_END
STEP 21 CHECK_ANSWER
ENTRY_BEGIN
MATCH rcode flags question answer
REPLY QR RD RA AD DO NOERROR
SECTION QUESTION
www.nicmexico.mx. IN A
SECTION ANSWER
www.nicmexico.mx. 170708 IN A 200.94.180.55
www.nicmexico.mx. 170708 IN A 200.94.180.56
www.nicmexico.mx. 170708 IN A 200.94.180.54
www.nicmexico.mx. 170708 IN A 200.94.180.57
www.nicmexico.mx. 172800 IN RRSIG A 7 3 172800 20170221235959 20161221161902 14618 nicmexico.mx. s3THv+Ay2WrcOTG6bo+54Zc/rff/jhzcJKZ3ZRYMXhw3FToSvTOSqsIG 1gzW/Sk6r2oikHH3nNluaMTAXfCULu2mHiQVAuFlnajFSMPcm8KvEyV0 cCT7knkAFqb+ODkimPMufRHiOLbnhQk9/A25qK7J8rCB76IUmzk41hYR NBU=
ENTRY_END
SCENARIO_END
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment