query for NSEC matching a CNAME
Knot traverses through CNAME if queried for NSEC.
;; Zone dump (Knot DNS 2.0.0-rc1)
nsec. 3600 SOA nsec. devnull.nsec. 5 60 60 2419200 3600
nsec. 3600 NS nsec.
nsec. 3600 A 127.0.0.1
nsec. 3600 DNSKEY 256 3 13 nF/ANPzkglQYocQJ/+LCortrgbew+8xnNca4tn6y1N0f52Q7OJQKNSi0xUn/uykEk5HUUXjzFQTVBxPhLxmMFA==
cname.nsec. 3600 CNAME nsec.
foo.nsec. 3600 A 2.2.2.2
*.wc.nsec. 3600 A 0.0.0.0
hit.wc.nsec. 3600 A 1.1.1.1
;; DNSSEC signatures
...
;; DNSSEC NSEC chain
nsec. 3600 NSEC cname.nsec. A NS SOA RRSIG NSEC DNSKEY
cname.nsec. 3600 NSEC foo.nsec. CNAME RRSIG NSEC
foo.nsec. 3600 NSEC *.wc.nsec. A RRSIG NSEC
*.wc.nsec. 3600 NSEC hit.wc.nsec. A RRSIG NSEC
hit.wc.nsec. 3600 NSEC nsec. A RRSIG NSEC
;; Written 26 records
;; Time 2015-06-29 17:35:19 CEST
Knot:
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 10791
;; Flags: qr aa; QUERY: 1; ANSWER: 2; AUTHORITY: 1; ADDITIONAL: 1
;; QUESTION SECTION:
;; cname.nsec. IN NSEC
;; ANSWER SECTION:
cname.nsec. 3600 IN CNAME nsec.
nsec. 3600 IN NSEC cname.nsec. A NS SOA RRSIG NSEC DNSKEY
;; AUTHORITY SECTION:
nsec. 3600 IN NS nsec.
;; ADDITIONAL SECTION:
nsec. 3600 IN A 127.0.0.1
;; Received 105 B
;; Time 2015-06-29 17:46:44 CEST
;; From ::1@53000(UDP) in 0.0 ms
BIND:
;; ->>HEADER<<- opcode: QUERY; status: NOERROR; id: 52301
;; Flags: qr aa; QUERY: 1; ANSWER: 1; AUTHORITY: 1; ADDITIONAL: 1
;; QUESTION SECTION:
;; cname.nsec. IN NSEC
;; ANSWER SECTION:
cname.nsec. 3600 IN NSEC foo.nsec. CNAME RRSIG NSEC
;; AUTHORITY SECTION:
nsec. 3600 IN NS nsec.
;; ADDITIONAL SECTION:
nsec. 3600 IN A 127.0.0.1
;; Received 88 B
;; Time 2015-06-29 17:47:05 CEST
;; From ::1@53002(UDP) in 0.3 ms