Commit 89596dc8 authored by Petr Špaček's avatar Petr Špaček

resolver: fix nsec_wildcard_no_data_response to actually test something

MATCH specification was totally ignoring the response so the test did
effectivelly nothing. Fixing MATCH clauses uncovered that delegations
were incorrect and that queries for localhost addresses have to be
allowed for the test to work. After that it turned out that NODATA proof
was not passing validation for some reason so I had to re-sign the zone.

The test was completely reworked to test:
- proper NODATA answer covered by wildcard
- NODATA answer missing NSEC record
- fake NODATA answer which replaces synthesized answer from wildcard
parent 1514da74
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment