mirror of
https://github.com/NLnetLabs/unbound.git
synced 2026-09-08 10:57:43 +02:00
Merge branch 'master' into features/rfc8914-ede
This commit is contained in:
@@ -81,7 +81,7 @@ while test $# -ne 0; do
|
||||
echo " -d dir use directory to store keys and certificates."
|
||||
echo " default: $DESTDIR"
|
||||
echo "please run this command using the same user id that the "
|
||||
echo "unboun daemon uses, it needs read privileges."
|
||||
echo "unbound daemon uses, it needs read privileges."
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
|
||||
Vendored
+1
-1
@@ -182,7 +182,7 @@ example.com. IN SOA ns.example.com. hostmaster.example.com. 2 3600 900 86400 360
|
||||
example.com. IN SOA ns.example.com. hostmaster.example.com. 1 3600 900 86400 3600
|
||||
www.example.com. IN A 1.2.3.4
|
||||
mail.example.com. 3600 IN A 1.2.3.6
|
||||
; this is the delete of the nonexistant entry
|
||||
; this is the delete of the nonexistent entry
|
||||
nonexist.example.com. 3600 IN A 1.2.3.4
|
||||
example.com. IN SOA ns.example.com. hostmaster.example.com. 2 3600 900 86400 3600
|
||||
EXTRA_PACKET
|
||||
|
||||
Vendored
+1
-1
@@ -28,7 +28,7 @@ REPLY RD
|
||||
SECTION QUESTION
|
||||
www.example.com. IN A
|
||||
ENTRY_END
|
||||
; unneccesary nothing steps.
|
||||
; unnecessary nothing steps.
|
||||
STEP 2 NOTHING
|
||||
STEP 3 NOTHING
|
||||
STEP 4 CHECK_ANSWER
|
||||
|
||||
Vendored
+1
-1
@@ -59,7 +59,7 @@ REPLY RD
|
||||
SECTION QUESTION
|
||||
www.example.com. IN A
|
||||
ENTRY_END
|
||||
; unneccesary nothing steps.
|
||||
; unnecessary nothing steps.
|
||||
STEP 20 NOTHING
|
||||
STEP 30 CHECK_ANSWER
|
||||
ENTRY_BEGIN
|
||||
|
||||
+5
-5
@@ -81,12 +81,12 @@ echo "> cat logfiles"
|
||||
cat petal.log
|
||||
cat unbound.log
|
||||
|
||||
# check petal.log for the correct number of occurences.
|
||||
# check petal.log for the correct number of occurrences.
|
||||
# It should be 2 User-Agents, one being the custom.
|
||||
echo "> check User-Agent occurences"
|
||||
occurences=`grep "User-Agent:" petal.log | wc -l`
|
||||
echo $occurences
|
||||
if test $occurences -eq 2; then
|
||||
echo "> check User-Agent occurrences"
|
||||
occurrences=`grep "User-Agent:" petal.log | wc -l`
|
||||
echo $occurrences
|
||||
if test $occurrences -eq 2; then
|
||||
echo "OK"
|
||||
else
|
||||
echo "Not OK"
|
||||
|
||||
Vendored
+1
-1
@@ -28,7 +28,7 @@ SECTION QUESTION
|
||||
SECTION ANSWER
|
||||
. IN NS K.ROOT-SERVERS.NET.
|
||||
SECTION ADDITIONAL
|
||||
; glue ommitted!
|
||||
; glue omitted!
|
||||
;K.ROOT-SERVERS.NET. IN A 193.0.14.129
|
||||
ENTRY_END
|
||||
|
||||
|
||||
Vendored
+1
-1
@@ -17,7 +17,7 @@ CONFIG_END
|
||||
SCENARIO_BEGIN Test scrub of reversed DNAME and CNAME in answer section
|
||||
|
||||
RANGE_BEGIN 0 100
|
||||
; all adresses
|
||||
; all addresses
|
||||
ENTRY_BEGIN
|
||||
MATCH opcode qtype qname
|
||||
ADJUST copy_id
|
||||
|
||||
Vendored
+1
-1
@@ -17,7 +17,7 @@ CONFIG_END
|
||||
SCENARIO_BEGIN Test scrub of secure DNAME in answer section
|
||||
|
||||
RANGE_BEGIN 0 100
|
||||
; all adresses
|
||||
; all addresses
|
||||
ENTRY_BEGIN
|
||||
MATCH opcode qtype qname
|
||||
ADJUST copy_id
|
||||
|
||||
Vendored
+54
@@ -45,9 +45,32 @@ server:
|
||||
local-data: "b.c.implicit. A 20.30.45.50"
|
||||
local-data: "c.c.implicit. A 20.30.44.50"
|
||||
|
||||
; create implicit data in the ANY domain
|
||||
; this should inherit the local_zone_type of the already configured
|
||||
; zone 'refuse.top.' and not be transparent
|
||||
local-data: "refuse.top. ANY TXT implicit_non_transparent"
|
||||
|
||||
stub-zone:
|
||||
name: "refuse.top"
|
||||
stub-addr: 1.2.3.4
|
||||
|
||||
CONFIG_END
|
||||
SCENARIO_BEGIN Test local data queries
|
||||
|
||||
RANGE_BEGIN 0 100
|
||||
ADDRESS 1.2.3.4
|
||||
; This entry should never be queried
|
||||
ENTRY_BEGIN
|
||||
MATCH opcode qtype qname
|
||||
ADJUST copy_id
|
||||
REPLY QR NOERROR
|
||||
SECTION QUESTION
|
||||
www.refuse.top. IN A
|
||||
SECTION ANSWER
|
||||
www.refuse.top. IN A 5.5.5.5
|
||||
ENTRY_END
|
||||
RANGE_END
|
||||
|
||||
; id.server.
|
||||
STEP 1 QUERY
|
||||
ENTRY_BEGIN
|
||||
@@ -390,4 +413,35 @@ SECTION ANSWER
|
||||
foo.null.top. IN AAAA ::0
|
||||
ENTRY_END
|
||||
|
||||
; refuse zone for implicit local-data with CLASS != IN
|
||||
STEP 64 QUERY
|
||||
ENTRY_BEGIN
|
||||
SECTION QUESTION
|
||||
refuse.top. ANY TXT
|
||||
ENTRY_END
|
||||
STEP 65 CHECK_ANSWER
|
||||
ENTRY_BEGIN
|
||||
MATCH all
|
||||
REPLY QR RA AA NOERROR
|
||||
SECTION QUESTION
|
||||
refuse.top. ANY TXT
|
||||
SECTION ANSWER
|
||||
refuse.top. ANY TXT implicit_non_transparent
|
||||
ENTRY_END
|
||||
|
||||
; refuse zone for implicit local-data with CLASS != IN
|
||||
STEP 66 QUERY
|
||||
ENTRY_BEGIN
|
||||
REPLY RD
|
||||
SECTION QUESTION
|
||||
www.refuse.top. ANY A
|
||||
ENTRY_END
|
||||
STEP 67 CHECK_ANSWER
|
||||
ENTRY_BEGIN
|
||||
MATCH all
|
||||
REPLY QR RA RD AA REFUSED
|
||||
SECTION QUESTION
|
||||
www.refuse.top. ANY A
|
||||
ENTRY_END
|
||||
|
||||
SCENARIO_END
|
||||
|
||||
+1
-1
@@ -27,7 +27,7 @@ fi
|
||||
|
||||
echo ""
|
||||
# test that unbound-anchor, the builtin certificate, works
|
||||
# so, force https with -F and the -c is a nonexistant file
|
||||
# so, force https with -F and the -c is a nonexistent file
|
||||
$PRE/unbound-anchor -a test.cert -c test.pem -v -F
|
||||
# check that the test.cert file is OK.
|
||||
if $PRE/unbound-host -f test.cert -t SOA -v . 2>&1 | grep "(secure)"; then
|
||||
|
||||
Vendored
+1
-1
@@ -80,7 +80,7 @@ else
|
||||
fi
|
||||
|
||||
|
||||
# check all the succes and write them
|
||||
# check all the success and write them
|
||||
if ! $PRE/readzone svcb.success-cases.zone > svcb.success-cases.zone.out
|
||||
then
|
||||
echo "Some particular success cases did not succeed to parse"
|
||||
|
||||
Vendored
+2
@@ -172,3 +172,5 @@ uri.arpa. 3600 IN ZONEMD 2018100702 1 1 ( 1291b78ddf7669b1a39d014
|
||||
root-servers.net. 3600000 IN ZONEMD 2018091100 1 1 ( f1ca0ccd91bd5573d9f431c00ee0101b2545c97602be0a97 8a3b11dbfc1c776d5b3e86ae3d973d6b5349ba7f04340f79 )
|
||||
; from ldns issue #121, 0.10m was parsed as 0.01m.
|
||||
foo. 12345 IN LOC 12 45 52.333 N 105 40 33.452 W -24m 0.1m 0.1m 0.1m
|
||||
; from ldns issue #147, fix #148, tab between quoted strings.
|
||||
foo 12345 IN HINFO "hohum" "weirdo"
|
||||
|
||||
Vendored
+2
@@ -212,3 +212,5 @@ uri.arpa. 3600 IN ZONEMD 2018100702 1 1 1291B78DDF7669B1A39D014D87626B709B55774C
|
||||
root-servers.net. 3600000 IN ZONEMD 2018091100 1 1 F1CA0CCD91BD5573D9F431C00EE0101B2545C97602BE0A978A3B11DBFC1C776D5B3E86AE3D973D6B5349BA7F04340F79
|
||||
03666F6F00001D00010000303900100011111182BD2D4D69530BD400988D20
|
||||
foo. 12345 IN LOC 12 45 52.333 N 105 40 33.452 W -24m 0.10m 0.10m 0.10m
|
||||
03666F6F00000D000100003039000D05686F68756D0677656972646F
|
||||
foo. 12345 IN HINFO "hohum" "weirdo"
|
||||
|
||||
Vendored
+1
-1
@@ -411,7 +411,7 @@ ENTRY_END
|
||||
; cause a lookup for nx1.example.com bypassing the cache.
|
||||
; with bug; this causes msg ttl for nx1 to be time(NOW)+ttl.
|
||||
; so 15+5 = 20
|
||||
; visiable in debug log as "msg ttl is %d"
|
||||
; visible in debug log as "msg ttl is %d"
|
||||
STEP 40 QUERY
|
||||
ENTRY_BEGIN
|
||||
REPLY RD
|
||||
|
||||
Vendored
+1
-1
@@ -219,7 +219,7 @@ STEP 20 TIME_PASSES ELAPSE 3400
|
||||
|
||||
; now the key gets prefetched and has to be verified with the anchor,
|
||||
; not with the key itself.
|
||||
; this answer is from cache enyway.
|
||||
; this answer is from cache anyway.
|
||||
STEP 30 QUERY
|
||||
ENTRY_BEGIN
|
||||
REPLY RD DO
|
||||
|
||||
Vendored
+1
-1
@@ -42,7 +42,7 @@ SECTION ANSWER
|
||||
SECTION AUTHORITY
|
||||
nsecwc.nlnetlabs.nl. 3600 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600
|
||||
nsecwc.nlnetlabs.nl. 3600 IN RRSIG SOA 8 3 3600 20200101000000 20171108114635 565 nsecwc.nlnetlabs.nl. bYibpCDg1LgrnYJgVahgu94LBqLIcNs4iC0SW8LV7pTI1hhuFKbLkO2O ekPdkJAWmu/KTytf8D+cdcK6X/9VS8QCVIF5S0hraHtNezu0f1B5ztg3 7Rqy+uJSucNKoykueAsz2z43GMgO0rGH3bqM7+3ii8p2E2rhzqEtG/D3 qyY=
|
||||
; NSEC has a label lenght of 3, indication that the original owner name is:
|
||||
; NSEC has a label length of 3, indication that the original owner name is:
|
||||
; *.nsecwc.nlnetlabs.nl. The NSEC therefore does no prove the NODATA answer.
|
||||
_25._tcp.mail.nsecwc.nlnetlabs.nl. 3600 IN NSEC delegation.nsecwc.nlnetlabs.nl. TXT RRSIG NSEC
|
||||
_25._tcp.mail.nsecwc.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 3 3600 20200101000000 20171108114635 565 nsecwc.nlnetlabs.nl. ddy1MRbshFuFJswlouNGHsZUF/tYu8BOCztY2JuHeTMyWL7rhRKp73q/ 1RAXMwywKsynT5ioY0bMtEQszeIEn29IYaPDHieLAobjF6BMu1kO7U2/ oEBrSHM/fx28BcaM5G4nfCIm3BlhQhWvk1NDHLn3Q26x4hF/dnmFOUet aXw=
|
||||
|
||||
Vendored
+2
-2
@@ -138,7 +138,7 @@ b6fuorg741ufili49mg9j4328ig53sqg.example.com. IN NSEC3 1 1 123 aabb00123456bbccd
|
||||
b6fuorg741ufili49mg9j4328ig53sqg.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AKHQ0gnNP5WDab1yqbd+Bt12CSSff88sqeDR40dvhiWOcYA8mmyjYNA=
|
||||
|
||||
; span around sub.example.com., same span as foo.example.com, but it has
|
||||
; just changed and it is now larger to accomodate sub.example.com.
|
||||
; just changed and it is now larger to accommodate sub.example.com.
|
||||
6obgmo062d9935unjnnj2su5otaj9334.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd 9r1f0ieoutlnjc03meng9e3bn2n0o9pd NS DS RRSIG
|
||||
6obgmo062d9935unjnnj2su5otaj9334.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. ABzruSKUUcJRNlYDqZ4UmQH/WnzeXt9Gozp3chS4cR0sqsEeGjL54eQ=
|
||||
|
||||
@@ -164,7 +164,7 @@ b6fuorg741ufili49mg9j4328ig53sqg.example.com. IN NSEC3 1 1 123 aabb00123456bbccd
|
||||
b6fuorg741ufili49mg9j4328ig53sqg.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. AKHQ0gnNP5WDab1yqbd+Bt12CSSff88sqeDR40dvhiWOcYA8mmyjYNA=
|
||||
|
||||
; span around sub.example.com., same span as foo.example.com, but it has
|
||||
; just changed and it is now larger to accomodate sub.example.com.
|
||||
; just changed and it is now larger to accommodate sub.example.com.
|
||||
6obgmo062d9935unjnnj2su5otaj9334.example.com. IN NSEC3 1 1 123 aabb00123456bbccdd 9r1f0ieoutlnjc03meng9e3bn2n0o9pd NS DS RRSIG
|
||||
6obgmo062d9935unjnnj2su5otaj9334.example.com. 3600 IN RRSIG NSEC3 3 3 3600 20070926135752 20070829135752 2854 example.com. ABzruSKUUcJRNlYDqZ4UmQH/WnzeXt9Gozp3chS4cR0sqsEeGjL54eQ=
|
||||
|
||||
|
||||
Reference in New Issue
Block a user