Commit 8ad34a41 authored by Daniel Salzman's avatar Daniel Salzman

tests-extra: add NSEC Name error case - wildcard NSEC with delegation boundary

parent 568ce67c
......@@ -24,5 +24,14 @@ xx.example. 3600 IN A 192.0.2.10
xx.example. 3600 IN HINFO "KLH-10" "TOPS-20"
xx.example. 3600 IN AAAA 2001:db8::f00:baaa
x.w.example. 3600 IN MX 1 xx.example.
*.to-apex.example. 3600 IN CNAME example. ; Wildcard expansion leading to apex
*.to-nxdomain.example. 3600 IN CNAME nxdomain.example. ; Wildcard expansion leading to nonexistent name
; Extra records (beyond the RFC)
*.to-apex.example. 3600 IN CNAME example. ; Wildcard expansion leading to apex
*.to-nxdomain.example. 3600 IN CNAME nxdomain.example. ; Wildcard expansion leading to nonexistent name
\000.nsec-deleg.z.z.example. 3600 IN NS ns1.a.example.
;*.nsec-deleg.z.z.example.
a.nsec-deleg.z.z.example. 3600 IN A 192.0.2.1
;b.nsec-deleg.z.z.example.
c.nsec-deleg.z.z.example. 3600 IN A 192.0.2.1
......@@ -116,4 +116,9 @@ resp = knot.dig("y.w.example", "A", dnssec=True)
resp.check(rcode="NOERROR", flags="QR AA", eflags="DO")
resp.cmp(bind)
# Wildcard NSEC with delegation boundary (Knot specific).
resp = knot.dig("b.nsec-deleg.z.z.example", "A", dnssec=True)
resp.check(rcode="NXDOMAIN", flags="QR AA", eflags="DO")
resp.cmp(bind)
t.end()
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment