WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-08-17 21:25:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
53499e4a882b7cd22fc8824ca864cafd0dde41be
unbound/testdata
T
History
W.C.A. Wijngaards 53499e4a88 - Fix handling of wildcard CNAMEs in the chain of trust. 
An improper wildcard in the chain of trust would send
  the retries to the wrong upstream. Also it could label
  the step in the chain of trust as secure, when it was not.
  Thanks to Qifan Zhang, Palo Alto Networks for the report.
2026-04-21 13:24:40 +02:00
..
00-lint.tdir
- Skip the 00-lint test. splint is not maintained; it either does not
2023-07-03 15:38:16 +02:00
01-doc.tdir
- Fix doc unit test for out of directory build.
2024-04-25 17:06:06 +02:00
02-unittest.tdir
- Skip unbound-dnstap-socket unit test when not compiled with
2024-06-04 16:59:58 +02:00
03-testbound.tdir
- Fix that cachedb does not store failures in the external cache.
2022-10-21 10:11:47 +02:00
04-checkconf.tdir
Fix documentation to adhere to RFC 5952
2026-01-06 16:10:37 +01:00
05-asynclook.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
06-ianaports.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
07-confroot.tdir
- Add missing common functions to tdir tests.
2024-05-15 11:20:36 +02:00
08-host-lib.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
09-unbound-control.tdir
- Fix unbound-control test so it counts the new flush_negative output,
2025-04-02 15:52:20 +02:00
10-unbound-anchor.tdir
Fix typos
2021-11-13 16:56:15 +02:00
acl_interface.tdir
- Fix #1154: Tag Incorrectly Applying for Other Interfaces
2024-10-16 15:56:33 +02:00
auth_axfr.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
auth_https_origin.tdir
- Fix #1353: auth-zone can not use empty label for $ORIGIN when
2025-09-29 14:24:31 +02:00
auth_https.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
auth_tls_failcert.tdir
- Enable the auth_tls.tdir and auth_tls_failcert.tdir tests.
2025-04-01 14:44:25 +02:00
auth_tls.tdir
- Enable the auth_tls.tdir and auth_tls_failcert.tdir tests.
2025-04-01 14:44:25 +02:00
blanks_cached_zone.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
blanks_https.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
cachedb_no_store.tdir
- Fix tests to use new common.sh functions, wait_logfile and
2023-12-06 16:32:06 +01:00
clang-analysis.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
cookie_file.tdir
- Fix cookie_file test sporadic fails for time change during
2024-10-10 09:45:48 +02:00
ctrl_itr.tdir
- Fix to use SSL_CTX_set_tlsext_ticket_key_evp_cb in OpenSSL
2020-07-08 16:22:39 +02:00
ctrl_pipe.tdir
- Fix to use SSL_CTX_set_tlsext_ticket_key_evp_cb in OpenSSL
2020-07-08 16:22:39 +02:00
dnscrypt_cert_chacha.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnscrypt_cert.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_reconnect.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tcp.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls_badcert.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls_badname.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls_clientauth.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls_peername.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap.tdir
- For #1175, update serve-expired tests.
2024-11-22 16:14:02 +01:00
doh_downstream_buffer_size.tdir
- Attempt to further fix doh_downstream_buffer_size.tdir flakiness.
2024-09-24 12:21:03 +02:00
doh_downstream_endpoint.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
doh_downstream_notls.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
doh_downstream_post.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
doh_downstream.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
doq_downstream.tdir
- Fix #1296: DNS over QUIC depends on a very outdated version of
2025-06-19 14:39:45 +02:00
dynlibmod.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
ede.tdir
- Cleanup ede.tdir test.
2024-07-23 20:22:25 +02:00
edns_cache.tdir
- Get ready for the DNS flag day: remove EDNS lame procedure, do not re-query
2019-01-16 10:23:13 +00:00
fast_reload_fwd.tdir
- Fix that ub_event has the facility to deal with callbacks for
2025-04-02 16:25:58 +02:00
fast_reload_most_options.tdir
Fast Reload Option (#1042)
2025-03-31 15:25:24 +02:00
fast_reload_thread.tdir
Fast Reload Option (#1042)
2025-03-31 15:25:24 +02:00
fwd_ancil.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_bogus.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_capsid_fallback.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_capsid_strip.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_capsid_white.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_capsid.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_compress_c00c.tdir
- Fix RFC7766 compliance when client sends EOF over TCP. It stops
2026-04-15 11:29:07 +02:00
fwd_edns_bksec.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_edns_probe.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_malformed.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_no_edns.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_oneport.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_tcp_tc6.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
fwd_tcp_tc.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_tcp.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_three_service.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
fwd_three.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_ttlexpire.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_udp_with_tcp_upstream.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_udp.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_udptmout.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_waitudp.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_zero.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
hostsfileosx.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
http_user_agent.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
ip_ratelimit.tdir
- Fix ip_ratelimit test to work with dig that enables DNS cookies.
2023-08-17 15:43:14 +02:00
ipset.tdir
- ipset-pf-support, fix to skip unit test if no pf dev.
2024-07-01 17:11:20 +02:00
local_nodefault.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
local_norec.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
local_nosnoop.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
log_servfail.tdir
- Fix typo in log_servfail.tdir test.
2024-12-03 16:03:05 +01:00
nss_compile.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
padding.tdir
- Fix tests to use new common.sh functions, wait_logfile and
2023-12-06 16:32:06 +01:00
proxy_protocol.tdir
PROXYv2 downstream support (#760)
2022-10-03 15:29:47 +02:00
pylib.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
pymod_thread.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
pymod.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
ratelimit.tdir
- Additional fix for CVE-2025-11411 (possible domain hijacking attack),
2025-11-26 11:09:40 +01:00
redis_reconnect_interval.tdir
- Redis checks for server down and throttles reconnects.
2025-07-24 11:06:00 +02:00
redis_replica.tdir
- Fix redis_replicat test for unused option defaults and log printout.
2025-04-04 10:57:53 +02:00
root_anchor.tdir
- Add missing common functions to tdir tests.
2024-05-15 11:20:36 +02:00
root_hints.tdir
- Add missing common functions to tdir tests.
2024-05-15 11:20:36 +02:00
root_zonemd.tdir
- Fix root_zonemd unit test, it checks that the root ZONEMD verifies,
2023-12-08 17:15:35 +01:00
rpz_reload.tdir
- Fix #1021 Inconsistent Behavior with Changing rpz-cname-override
2024-03-11 16:31:58 +01:00
speed_cache.tdir
Fixup speed_cache for 01-doc test.
2017-07-06 13:30:37 +00:00
speed_local.tdir
- Add duration variable for speed_local.test.
2023-01-30 11:33:58 +01:00
ssl_req_order.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
ssl_req_timeout.tdir
- Fix stream_ssl, ssl_req_order and ssl_req_timeout tests for
2020-09-30 11:29:57 +02:00
stat_timer.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
stat_values.tdir
- Fix that when discard timeout drops packet, they are accounted as
2025-11-12 11:49:04 +01:00
stream_ssl.tdir
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
stream_tcp.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
stub_auth_tc.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
stub_udp6.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
stub_udp_with_tcp_upstream.tdir
Add (stub|forward)-tcp-upstream options which enable using tcp transport only for specified stub/forward zones
2021-08-05 08:44:18 +02:00
stub_udp.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
subnet_cache_lookup.tdir
- unbound-control cache_lookup +t allows tld and root names. And
2025-08-15 13:03:31 +02:00
svcb.tdir
- For #739: minor cleanup for testcases.
2023-07-03 10:10:16 +02:00
tcp_conn_limit.tdir
- Patch to implement tcp-connection-limit from Jim Hague (Sinodun).
2018-08-07 11:57:42 +00:00
tcp_idle_timeout.tdir
- Fix tcp idle timeout test, for difference in the tcp reply code.
2019-01-21 09:36:01 +00:00
tcp_req_order.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
tcp_req_size.tdir
Fix test to check if server up afterwards
2020-02-06 10:25:47 +01:00
tcp_req_timeout.tdir
- Unit tests for ssl out of order processing.
2019-01-21 13:26:21 +00:00
tcp_reuse.tdir
- Fix tests to use new common.sh functions, wait_logfile and
2023-12-06 16:32:06 +01:00
tcp_sigpipe.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
tls_reuse_auth.tdir
- Fix that upstream TLS connections are not reused as TLS
2026-04-21 11:59:05 +02:00
tls_reuse.tdir
- Fix tests to use new common.sh functions, wait_logfile and
2023-12-06 16:32:06 +01:00
zonemd_reload.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
acl.rpl
access-control
2007-11-19 15:32:55 +00:00
auth_notify_lookup.rpl
- Add test for allow-notify with a host name.
2026-01-27 13:49:33 +01:00
auth_nsec3_ent_with_out_of_zone_data.rpl
Fix auth nsec3 code (#1280)
2025-05-12 14:26:47 +02:00
auth_nsec3_ent.rpl
- Fix auth-zone NSEC3 response for empty nonterminals with exact
2019-04-02 12:21:41 +00:00
auth_nsec3_wild_with_out_of_zone_data.rpl
Fix auth nsec3 code (#1280)
2025-05-12 14:26:47 +02:00
auth_nsec3_wild.rpl
- Fix auth-zone NSEC3 response for wildcard nodata answers,
2019-04-03 06:36:40 +00:00
auth_xfr_host.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
auth_xfr_ixfr.rpl
- auth zone notify work.
2018-04-16 15:10:30 +00:00
auth_xfr_ixfrisaxfr.rpl
- auth zone notify work.
2018-04-16 15:10:30 +00:00
auth_xfr_ixfrmismatch.rpl
Fix typos
2021-11-13 16:56:15 +02:00
auth_xfr_ixfrnotimpl.rpl
- auth zone notify work.
2018-04-16 15:10:30 +00:00
auth_xfr_notify.rpl
- Fix #4224: auth_xfr_notify.rpl test broken due to typo
2019-01-29 14:37:35 +00:00
auth_xfr_probesoa.rpl
auth zone test probe of SOA
2018-02-05 09:59:53 +00:00
auth_xfr.rpl
auth zone ixfr unit test, and fixes.
2018-02-05 09:42:42 +00:00
auth_zonefile_dnssec_fail.rpl
- Fix 'make test' to work for --disable-sha1 configure option.
2020-01-08 09:23:46 +01:00
auth_zonefile_dnssec.rpl
zonemd, zonemd-permissive-mode: yes logs the failure but does not block
2020-10-23 14:33:04 +02:00
auth_zonefile_down.rpl
zonemd, fix unit test to allow nonvalidating zone without zonemd with
2021-02-04 16:18:02 +01:00
auth_zonefile_noup.rpl
auth zone for downstream
2018-01-31 08:30:32 +00:00
auth_zonefile_root.rpl
Test authority zone with zonefile for root referrals (RFC7706)
2018-01-31 08:37:38 +00:00
auth_zonefile.rpl
auth zone for downstream
2018-01-31 08:30:32 +00:00
auth_zonemd_anchor_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_anchor.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_chain_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_chain.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_file_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_file_unknown.rpl
- Fix zonemd check to allow unsupported algorithms to load.
2022-04-08 09:29:37 +02:00
auth_zonemd_file.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_insecure_absent_reject.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_insecure_absent.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_insecure_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_insecure.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_nokey.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_permissive_mode.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_anchor_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_anchor.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_chain_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_chain_keyinxfr.rpl
- Fix zonemd verification of key that is not in DNS but in the zone
2021-08-13 14:43:11 +02:00
auth_zonemd_xfr_chain.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
autotrust_10key.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
autotrust_addpend_2exceed.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_early.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_nosign.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_nosignnew.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_once.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_twice.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_init_ds.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
autotrust_init_fail.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
autotrust_init_failsig.rpl
- Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.
2023-08-31 13:54:03 +02:00
autotrust_init_legacy.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_init_sigs.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
autotrust_init_zsk.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
autotrust_init.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
autotrust_missing_all.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_missing_returns.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_missing.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_probefail.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
autotrust_probefailsig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
autotrust_revoked_use.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_revoked_with_invalid.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_revtp_read.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
autotrust_revtp_use.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
autotrust_revtp.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
autotrust_rollalgo_unknown.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_rollalgo.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_rollover.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_valid_use.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
black_data.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
black_dnskey.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
black_ds_entry.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
black_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
black_ent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
black_key_entry.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
black_prime_entry.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
black_prime.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
cachedb_cached_ede.crpl
Merge branch 'master' into features/ede-caching-cachedb
2023-07-30 14:17:52 +02:00
cachedb_expired_client_timeout.crpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
cachedb_expired_reply_ttl.crpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
cachedb_expired.crpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
cachedb_servfail_cname.crpl
- For #1175, update serve-expired tests.
2024-11-22 16:14:02 +01:00
cachedb_subnet_change.crpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
cachedb_subnet_expired.crpl
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
cachedb_subnet_toecs_timeout.crpl
- Add unit tests for cachedb and subnet cache expired data.
2024-04-26 13:33:26 +02:00
cachedb_val_expired.crpl
- Fix to make the cachedb_val_expired.crpl succeed.
2026-02-23 12:52:10 +01:00
chaos_trustanchor.rpl
- Add trustanchor.unbound CH TXT that gets a response with a number
2017-03-16 09:17:58 +00:00
common.sh
- Fix to update common.sh for speed of kill_pid.
2025-04-04 11:55:42 +02:00
disable_edns_do.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
dname_unsigned_cname.rpl
- Fix that a DNAME with an unsigned CNAME is checked for
2026-04-21 13:19:13 +02:00
dns64_lookup.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
dns64_prefetch_cache.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
dns_error_reporting.rpl
DNS Error Reporting (RFC 9567) (#902)
2025-04-07 10:25:10 +02:00
domain_insec_ds.rpl
- Fix #1293: EDE 6 is attached to insecure cached answers when client sends
2025-06-20 14:09:30 +02:00
ds_wildcard_cname.rpl
- Fix handling of wildcard CNAMEs in the chain of trust.
2026-04-21 13:24:40 +02:00
ede_acl_refused.rpl
Add the basic EDE (RFC8914) cases (#604)
2022-05-06 12:48:53 +02:00
ede_cache_snoop_not_auth.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
ede_localzone_dname_expansion.rpl
Add the basic EDE (RFC8914) cases (#604)
2022-05-06 12:48:53 +02:00
edns_attached_once_per_upstream.rpl
- Fix EDNS to upstream where the same option could be attached more than
2022-01-14 13:55:34 +01:00
edns_client_string_opcode.rpl
Replace edns-client-tag with edns-client-string option
2020-09-30 23:17:53 +02:00
edns_client_string.rpl
Replace edns-client-tag with edns-client-string option
2020-09-30 23:17:53 +02:00
edns_downstream_cookies.rpl
- For #762: Interaction between DNS Cookies and source IP ratelimiting
2023-08-08 10:14:03 +02:00
edns_keepalive.rpl
Add the basic EDE (RFC8914) cases (#604)
2022-05-06 12:48:53 +02:00
fetch_glue_cname.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
fetch_glue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
fwd_0ttlservfail.rpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
fwd_any.rpl
Fix typos
2021-11-13 16:56:15 +02:00
fwd_cached.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
fwd_droptoomany.rpl
DoS protection.
2008-09-02 13:04:47 +00:00
fwd_error_retries.rpl
Add unit test for check the configuration of outbound max retries
2019-06-12 19:01:27 +02:00
fwd_error.rpl
Adapt some comments
2019-06-12 19:01:30 +02:00
fwd_jostle_out.rpl
DoS protection.
2008-09-02 13:04:47 +00:00
fwd_jostle.rpl
DoS protection.
2008-09-02 13:04:47 +00:00
fwd_lrudrop.rpl
send recursive queries to test cache drop off.
2007-08-27 11:26:03 +00:00
fwd_minimal.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
fwd_name_lookup.rpl
- Fix for #1114: Fix that cache fill for forward-host names is
2024-07-31 11:42:44 +02:00
fwd_no_cache.rpl
- Fix #4208: 'stub-no-cache' and 'forward-no-cache' not work.
2018-11-27 10:29:14 +00:00
fwd_notcached.rpl
do not allow cache snooping by default.
2008-09-01 13:48:24 +00:00
fwd_scrub_rrsig.rpl
- Fix to shorten RRSIG count in scrubber, this protects against
2026-04-15 11:41:28 +02:00
fwd_timeout.rpl
Adapt some comments
2019-06-12 19:01:30 +02:00
fwd_two.rpl
DoS protection.
2008-09-02 13:04:47 +00:00
fwd.rpl
Fix typos
2021-11-13 16:56:15 +02:00
host_file.template
testbed scripts.
2007-01-04 11:03:29 +00:00
ipsecmod_bogus_ipseckey.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_enabled.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_hook.sh
- Implemented opportunistic IPsec support module (ipsecmod).
2017-05-16 12:39:24 +00:00
ipsecmod_ignore_bogus_ipseckey.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_max_ttl.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_strict.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_whitelist.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_auth_tc.rpl
- Fix to stop responses with TC flag from resulting in partial
2022-10-06 10:01:09 +02:00
iter_class_any.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_cname_cache.rpl
testbound test for older fix added.
2009-02-05 14:31:16 +00:00
iter_cname_double.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_cname_minimise_nx.rpl
Fixed some syntax errors in rpl files.
2023-12-07 11:38:01 +01:00
iter_cname_minimise.rpl
- Fix #412: cache invalidation issue with CNAME+A.
2022-02-04 14:27:01 +01:00
iter_cname_nx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_cname_qnamecopy.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_cycle_noh.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_cycle.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_dname_insec.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
iter_dname_ttl0.rpl
- For #1411: Introduce a failing case in the rpl test so that it only
2026-03-04 13:22:42 +01:00
iter_dname_ttl.rpl
- Remove unused portion from iter_dname_ttl unit test.
2024-03-08 09:51:37 +01:00
iter_dname_yx.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
iter_dnsseclame_bug.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_dnsseclame_ds_ok.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_dnsseclame_ds.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_dnsseclame_ta_ok.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_dnsseclame_ta.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_domain_sale_nschange.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_domain_sale.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_donotq127.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_dp_ip6useless.rpl
- Fix to detect that no IPv6 support means that IPv6 addresses are
2022-02-25 10:27:56 +01:00
iter_dp_turnsuseless.rpl
- Fix resolution for domains like safesvc.com.cn. If the iterator
2010-05-19 12:59:27 +00:00
iter_ds_locate_ns_cname.rpl
- new approach to NS fetches for DS lookup that works with
2012-03-21 15:01:01 +00:00
iter_ds_locate_ns_detach.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_ds_locate_ns_nosoa.rpl
- new approach to NS fetches for DS lookup that works with
2012-03-21 15:01:01 +00:00
iter_ds_locate_ns.rpl
- fix to locate nameservers for DS lookup with NS fetches.
2012-03-19 15:44:21 +00:00
iter_ds_referral.rpl
- Fix that DS queries with referral replies are answered straight
2018-01-02 09:48:22 +00:00
iter_ds_reply.rpl
- Fix that DS queries with referral replies are answered straight
2018-01-02 09:48:22 +00:00
iter_emptydp_for_glue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_emptydp.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_failreply.rpl
- For #1193, introduce log-servfail.tdir and cleanup the log-servfail
2024-12-02 12:30:11 +01:00
iter_fwdfirst.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_fwdfirstequal.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_fwdfirstequaltcp.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_fwdstub.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_fwdstubauth.rpl
- Take configured auth zones into consideration when checking if a
2025-01-14 16:38:53 +01:00
iter_fwdstubroot.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ghost_grandchild_delegation.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ghost_sub.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ghost_timewindow.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_got6only.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_hint_lame.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ignore_empty.rpl
- Fix #946: Forwarder returns servfail on upstream response noerror no
2023-10-04 18:16:22 +02:00
iter_lame_aaaa.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_lame_noaa.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_lame_nosoa.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_lamescrub.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_max_global_quota.rpl
- Add iter-scrub-ns, iter-scrub-cname and max-global-quota
2024-08-20 14:08:52 +02:00
iter_minimise_chain.rpl
- Fix for cname chain length with qtype ANY and qname minimisation.
2025-05-19 13:17:21 +02:00
iter_mod.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_nat64_donotq.rpl
- Fix #1403: Inconsistency between do-nat64 and do-not-query-address
2026-02-11 16:01:30 +01:00
iter_nat64_prefix48.rpl
NAT64 support
2022-11-07 11:37:50 +00:00
iter_nat64_prefix.rpl
- For #722: Minor fixes, formatting and refactoring.
2023-05-01 18:23:13 +02:00
iter_nat64.rpl
NAT64 support
2022-11-07 11:37:50 +00:00
iter_ns_badip.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ns_spoof.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_nxns_cached.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_nxns_fallback.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_nxns_parentside.rpl
Fix typos (#1299)
2025-07-02 10:50:49 +02:00
iter_pc_a.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pc_aaaa.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcdiff.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcdirect.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pclame.rpl
- Fix storage of negative parent glue if that last resort fails.
2010-06-01 09:33:25 +00:00
iter_pcname.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcnamech.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcnamechrec.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcnamerec.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcttl.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_change2.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_change.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_childns.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_fail.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_ns.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_primenoglue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_priv_svcb.rpl
- Fix for DNS Rebinding Bypass via SVCB/HTTPS Records in Unbound.
2026-03-05 09:47:13 +01:00
iter_privaddr.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ranoaa_lame.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_reclame_one.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_reclame_two.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_recurse.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_req_qname.rpl
Fixup for problems with do-ip6: no and only ipv6 addresses.
2008-11-17 12:47:34 +00:00
iter_resolve_minimised_nx.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_resolve_minimised_refused.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_resolve_minimised_timeout.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_resolve_minimised.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_resolve.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_cname_an.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_dname_insec.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_dname_out_of_zone.rpl
- Fix to ignore out-of-zone DNAME records for CNAME synthesis. Thanks
2026-03-13 11:28:32 +01:00
iter_scrub_dname_rev.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_dname_sec.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_ns_fwd.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_scrub_ns_side.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_scrub_ns.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_scrub_promiscuous.rpl
- Fix for iterator RCODE handling of YXDOMAIN. This fixes
2026-04-21 10:09:02 +02:00
iter_scrub_rr_length.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_soamin.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_stub_leak.rpl
- Set defaults to yes for a number of options to increase speed and
2018-08-27 13:18:19 +00:00
iter_stub_noroot.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_stubfirst.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_stublastresort.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_svcb_malformed.rpl
- Add test case for malformed SVCB records. Thanks to
2026-04-21 09:41:53 +02:00
iter_timeout_ra_aaaa.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_unverified_glue_fallback.rpl
- Merge patch to fix for glue that is outside of zone, with
2024-08-23 08:56:48 +02:00
iter_unverified_glue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
Kexample.com.+003+02854.ds
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+003+02854.key
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+003+02854.private
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+005+16486.ds
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+16486.key
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+16486.private
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+30899.ds
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+005+30899.key
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+005+30899.private
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+005+55582.ds
more keys for autotrust testing.
2009-09-02 10:04:34 +00:00
Kexample.com.+005+55582.key
more keys for autotrust testing.
2009-09-02 10:04:34 +00:00
Kexample.com.+005+55582.private
more keys for autotrust testing.
2009-09-02 10:04:34 +00:00
Kexample.com.+005+60946.ds
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+60946.key
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+60946.private
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+007+57024.ds
Test that AD flags and NSEC3 optout does what we say.
2010-09-14 09:11:19 +00:00
Kexample.com.+007+57024.key
Test that AD flags and NSEC3 optout does what we say.
2010-09-14 09:11:19 +00:00
Kexample.com.+007+57024.private
Test that AD flags and NSEC3 optout does what we say.
2010-09-14 09:11:19 +00:00
Kexample.com.+008+01443.ds
SHA256 support.
2008-09-30 13:06:07 +00:00
Kexample.com.+008+01443.key
SHA256 support.
2008-09-30 13:06:07 +00:00
Kexample.com.+008+01443.private
SHA256 support.
2008-09-30 13:06:07 +00:00
Kexample.com.+008+29332.ds
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+29332.key
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+29332.private
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+55566.ds
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+55566.key
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+55566.private
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+009+48886.ds
Line endings.
2009-04-17 11:52:42 +00:00
Kexample.com.+009+48886.key
Line endings.
2009-04-17 11:52:42 +00:00
Kexample.com.+009+48886.private
Line endings.
2009-04-17 11:52:42 +00:00
Kexample.com.+012+60385.ds
GOST algorithm number 12.
2010-04-15 11:29:43 +00:00
Kexample.com.+012+60385.key
GOST algorithm number 12.
2010-04-15 11:29:43 +00:00
Kexample.com.+012+60385.private
GOST algorithm number 12.
2010-04-15 11:29:43 +00:00
local_acl_override.rpl
- Possibility to specify local-zone types for an acl/tag pair
2016-06-24 19:08:58 +00:00
local_acl_taglist_action.rpl
- access-control-tag-data implemented. verbose(4) prints tag debug.
2016-07-07 10:20:05 +00:00
local_acl_taglist.rpl
- access-control-tag-data implemented. verbose(4) prints tag debug.
2016-07-07 10:20:05 +00:00
local_cname.rpl
- Fix for consistent use of local zone CNAME alias for configured auth
2025-06-17 15:03:29 +02:00
local_cnameother.rpl
- Fix localdata and rpz localdata to match CNAME only if no direct
2024-03-19 10:21:10 +01:00
local_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
local_nodefault.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
local_transparent_sametype.rpl
- separate ldns into core ldns inside ldns/ subdirectory. No more
2013-10-31 15:09:26 +00:00
local_typetransparent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
localdata.rpl
- Allow local-data for classes other than IN to inherit a configured
2021-12-10 17:35:36 +01:00
long_qname.rpl
- Fix for the Jiggle Attack. The server is fixed to answer
2026-04-21 09:54:17 +02:00
net_signed_servfail.rpl
- Fix #4132: Openness/closeness of RANGE intervals in rpl files.
2018-10-25 09:01:53 +00:00
nomem_cnametopos.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
nsid_ascii.rpl
rpl tests for nsid
2021-01-19 17:18:26 +01:00
nsid_bogus.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
nsid_hex.rpl
rpl tests for nsid
2021-01-19 17:18:26 +01:00
nsid_not_set.rpl
rpl tests for nsid
2021-01-19 17:18:26 +01:00
refuse_xfr.rpl
- Fix for the Jiggle Attack. The server is fixed to answer
2026-04-21 09:54:17 +02:00
respip_dns64_lookup.rpl
- Fix for #1344: Fix that respip and dns64 can be enabled at the
2025-09-30 11:28:15 +02:00
root_key_sentinel.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
rpz_axfr.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
rpz_cached_cname.rpl
- Fix #954: Inconsistent RPZ handling for A record returned along with
2023-10-17 16:47:04 +02:00
rpz_clientip_override.rpl
- Fix rpz that the rpz override is taken in case of clientip triggers.
2024-03-13 16:04:58 +01:00
rpz_clientip.rpl
- rpz-triggers, the added soa for client ip modified answers is affected
2021-05-14 16:34:38 +02:00
rpz_cname_handle.rpl
- Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix that
2024-03-19 09:32:53 +01:00
rpz_cname_tag.rpl
- Fix for #1079: fix RPZ taglist in iterator callback that no client
2024-05-30 12:44:26 +02:00
rpz_cname_wild.rpl
- Fix #1332: CNAME chains are sometimes not followed when RPZs add a
2025-09-09 12:34:11 +02:00
rpz_ixfr.rpl
- Fix RPZ removal of client-ip, nsip, nsdname triggers from IXFR.
2023-05-19 14:38:41 +02:00
rpz_nsdname_override.rpl
- Fix rpz for cname override action after nsdname and nsip triggers.
2024-03-13 17:14:14 +01:00
rpz_nsdname.rpl
- Fix comment name in the rpz nsdname test.
2025-04-04 08:58:54 +02:00
rpz_nsip_override.rpl
- Add rpz unit test for nsip action override.
2024-03-18 14:11:43 +01:00
rpz_nsip.rpl
- Fix unit tests for rpz now that the AA flag returns successfully from
2022-01-05 13:39:06 +01:00
rpz_passthru_clientip.rpl
- Fix #1029: rpz trigger clientip and action rpz-passthru not working
2024-03-13 13:45:04 +01:00
rpz_passthru.rpl
- Fix for #628: fix rpz-passthru for qname trigger by localzone type.
2022-02-16 09:51:25 +01:00
rpz_qname_override.rpl
- add always_deny action, use this one for RPZ
2019-08-23 12:15:37 +02:00
rpz_qname_tcponly.rpl
RPZ: testbound: add qname and respip tcp-only examples
2020-11-03 11:03:29 +01:00
rpz_qname.rpl
- Fix #628: A rpz-passthru action is not ending RPZ zone processing.
2022-02-15 16:20:12 +01:00
rpz_qtype_cname.rpl
- Fix rpz for qtype CNAME after nameserver trigger.
2024-03-18 14:36:29 +01:00
rpz_respip_override.rpl
- add always_deny action, use this one for RPZ
2019-08-23 12:15:37 +02:00
rpz_respip_tcponly.rpl
RPZ: testbound: add qname and respip tcp-only examples
2020-11-03 11:03:29 +01:00
rpz_respip.rpl
- Fix RPZ IP responses with trigger rpz-drop on cache entries, that
2023-05-01 09:26:17 +02:00
rpz_rootwc.rpl
- Fix to allow rpz with wildcard that applies to all TLDs at once.
2021-02-25 16:54:32 +01:00
rpz_signal_nxdomain_ra.rpl
- Fix for #596: Fix rpz-signal-nxdomain-ra to work for clientip
2022-01-05 16:48:35 +01:00
rpz_val_block.rpl
- For #1193, introduce log-servfail.tdir and cleanup the log-servfail
2024-12-02 12:30:11 +01:00
rrset_rettl.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
rrset_untrusted.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
rrset_updated.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
rrset_use_cached.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_0ttl_nodata.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_0ttl_nxdomain.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_0ttl_servfail.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_cached_servfail_refresh.rpl
- For #1193, introduce log-servfail.tdir and cleanup the log-servfail
2024-12-02 12:30:11 +01:00
serve_expired_cached_servfail.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
serve_expired_client_timeout_servfail.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_client_timeout_val_bogus.rpl
Serve expired cache update fixes (#1174)
2024-12-31 16:28:12 +01:00
serve_expired_client_timeout_val_insecure_delegation.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
serve_expired_client_timeout.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_reply_ttl.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_ttl_client_timeout.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_ttl_reset.rpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
serve_expired_ttl.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
serve_expired_val_bogus.rpl
Serve expired cache update fixes (#1174)
2024-12-31 16:28:12 +01:00
serve_expired_zerottl.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_original_ttl.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
stop_nxdomain_minimised.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
stop_nxdomain.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
subnet_cached_ede.crpl
- For #790: clean testcase.
2023-07-31 09:41:57 +02:00
subnet_cached_servfail_timeout.crpl
- Fix for EDNS client subnet so that it does not store SERVFAIL in
2026-04-10 15:45:28 +02:00
subnet_cached_servfail.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_cached_size.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_cached.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_derived.crpl
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
subnet_format_ip4.crpl
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
subnet_global_prefetch_always_forward.crpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
subnet_global_prefetch_expired.crpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
subnet_global_prefetch_with_client_ecs.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_global_prefetch.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_max_source.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_noecs_mult.crpl
- Add unit tests for non-ecs aggregation.
2025-07-16 11:46:04 +02:00
subnet_noecs_refused.crpl
- Add unit tests for non-ecs aggregation.
2025-07-16 11:46:04 +02:00
subnet_noecs_support.crpl
- Add unit tests for non-ecs aggregation.
2025-07-16 11:46:04 +02:00
subnet_not_whitelisted.crpl
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
subnet_prefetch.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_prezero.crpl
- Fix edns subnet so that queries with a source prefix of zero cause
2023-10-09 12:21:22 +02:00
subnet_scopezero_bogus.crpl
- Fix validator to set unchecked when validation recursion
2026-02-25 10:59:33 +01:00
subnet_scopezero_global_nocache.crpl
- Fix edns subnet, that scope zero queries, when there is a
2026-01-06 09:33:00 +01:00
subnet_scopezero_global.crpl
- Fix edns subnet, so that the subquery without subnet is stored in
2025-08-06 12:08:44 +02:00
subnet_scopezero_noedns.crpl
- Fix edns subnet replies for scope zero answers to not get stored
2024-03-04 13:20:13 +01:00
subnet_scopezero.crpl
- Fix edns subnet so that scope 0 answers only match sourcemask 0
2022-08-02 14:13:55 +02:00
subnet_val_positive_client.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_val_positive.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_without_validator.crpl
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
test_ds.sha1
Nicer names for test files.
2009-08-11 10:33:56 +00:00
test_ds.sha384
- implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This
2012-02-08 13:22:44 +00:00
test_ldnsrr.1
- unit test for ldns wire to str and back with zones, root, nlnetlabs
2014-01-31 10:19:01 +00:00
test_ldnsrr.2
- unit test for ldns wire to str and back with zones, root, nlnetlabs
2014-01-31 10:19:01 +00:00
test_ldnsrr.3
- Fix #572: Fix unit test failure for systems with different
2014-04-07 09:18:29 +00:00
test_ldnsrr.4
- Fix encoding of RR type ATMA.
2025-01-21 12:27:15 +01:00
test_ldnsrr.5
Fix documentation to adhere to RFC 5952
2026-01-06 16:10:37 +01:00
test_ldnsrr.c1
- unit test for ldns wire to str and back with zones, root, nlnetlabs
2014-01-31 10:19:01 +00:00
test_ldnsrr.c2
- unit test for ldns wire to str and back with zones, root, nlnetlabs
2014-01-31 10:19:01 +00:00
test_ldnsrr.c3
- Fix representation of types GPOS and RESINFO, add rdf type for
2025-03-17 16:38:17 +01:00
test_ldnsrr.c4
- Fix encoding of RR type ATMA.
2025-01-21 12:27:15 +01:00
test_ldnsrr.c5
- Fix print of RR type NSAP-PTR, it is an unquoted string.
2025-03-20 15:51:03 +01:00
test_nsec3_hash.1
nsec3 hash function unit test.
2007-09-17 09:25:54 +00:00
test_packets.1
Smaller test data.
2007-04-18 13:48:29 +00:00
test_packets.2
Smaller test data.
2007-04-18 13:48:29 +00:00
test_packets.3
Smaller test data.
2007-04-18 13:48:29 +00:00
test_packets.4
RRSIG parse plans.
2007-04-20 09:58:32 +00:00
test_packets.5
- Fix assertion failure reported by Kai Storbeck from XS4ALL, the
2010-06-16 15:05:22 +00:00
test_packets.6
Assertion incorrect. Compressed packets can be larger.
2007-10-30 13:40:43 +00:00
test_packets.7
- Fix validation failure for qtype ANY caused by a RRSIG parse failure.
2010-04-22 15:01:02 +00:00
test_packets.8
- Be lenient and accept imgw.pl malformed packet (like BIND).
2010-11-08 18:32:55 +00:00
test_packets.9
- Fix parse error on negative SOA RRSIGs if badly ordered in the packet.
2011-12-15 13:37:13 +00:00
test_signatures.1
fixup canon compare. Include full AXFR data in signature test.
2007-08-16 10:05:52 +00:00
test_signatures.2
Jelte found DSA sig solution, copied from ldns to fit into unbound validator.
2008-04-14 15:34:09 +00:00
test_signatures.3
DSA test
2008-04-15 15:19:25 +00:00
test_signatures.4
DSA test
2008-04-15 15:19:25 +00:00
test_signatures.5
Fixup unbound. Now still a switch DSA(ldns) DSA(bind) ...
2008-04-15 18:01:14 +00:00
test_signatures.6
Fixup unbound. Now still a switch DSA(ldns) DSA(bind) ...
2008-04-15 18:01:14 +00:00
test_signatures.7
Fixup unbound. Now still a switch DSA(ldns) DSA(bind) ...
2008-04-15 18:01:14 +00:00
test_signatures.8
test to make sure unbound deals with capitals in signer name like bind does
2010-06-24 07:06:17 +00:00
test_signatures.9
unit test for timestamp failure with clang
2017-12-15 09:38:11 +00:00
test_sigs.ecdsa_p256
- implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This
2012-02-08 13:22:44 +00:00
test_sigs.ecdsa_p384
- implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This
2012-02-08 13:22:44 +00:00
test_sigs.ed448
- ED448 support.
2018-04-05 14:44:17 +00:00
test_sigs.ed25519
- Support for openssl EVP_DigestVerify.
2017-05-30 12:28:25 +00:00
test_sigs.gost
GOST algorithm number 12.
2010-04-15 11:29:43 +00:00
test_sigs.hinfo
Nicer names for test files.
2009-08-11 10:33:56 +00:00
test_sigs.revoked
- Fix that signatures are not allowed with revoked dnskeys.
2026-04-21 13:07:34 +02:00
test_sigs.rsasha256
Nicer names for test files.
2009-08-11 10:33:56 +00:00
test_sigs.rsasha256_draft
- separate ldns into core ldns inside ldns/ subdirectory. No more
2013-10-31 15:09:26 +00:00
test_sigs.rsasha512_draft
Nicer names for test files.
2009-08-11 10:33:56 +00:00
test_sigs.sha1_and_256
Nicer names for test files.
2009-08-11 10:33:56 +00:00
trust_cname_chain.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ttl_max_negative.rpl
- Introduce 'cache-min-negative-ttl' option to bound the minimum TTL for
2024-03-12 11:24:59 +01:00
ttl_max.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ttl_min_negative.rpl
- Introduce 'cache-min-negative-ttl' option to bound the minimum TTL for
2024-03-12 11:24:59 +01:00
ttl_min.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ttl_msg.rpl
Fix typos
2021-11-13 16:56:15 +02:00
ttl_zero_cacherep.rpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
val_adbit.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_adcopy.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_anchor_nx_nosig.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_anchor_nx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ans_dsent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ans_nx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_any_cname.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_any_dname.rpl
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
2024-02-13 13:02:08 +01:00
val_any_negcache.rpl
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
2024-02-13 13:02:08 +01:00
val_any.rpl
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
2024-02-13 13:02:08 +01:00
val_cname_loop1.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cname_loop2.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cname_loop3.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnameinsectopos.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamenx_dblnsec.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamenx_rcodenx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnameqtype_qmin.rpl
- Fix qname minimisation for reply with a DNAME for qtype CNAME that
2024-03-08 16:33:17 +01:00
val_cnameqtype.rpl
- Fix validator classification of qtype DNAME for positive and
2024-03-08 14:10:06 +01:00
val_cnametocloser_nosig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_cnametocloser.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_cnametocnamewctoposwc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_cnametodname.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametodnametocnametopos.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
val_cnametoinsecure.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
val_cnametonodata_nonsec.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_cnametonodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametonsec.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametonx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametooptin.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametooptout.rpl
- Fix consistency of unit test without roundrobin answers for the
2023-02-09 11:46:33 +01:00
val_cnametopos.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametoposnowc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_cnametoposwc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamewctonodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamewctonx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamewctoposwc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_deleg_nons.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_dname_twice.rpl
- Add unit test for validation of repeated use of a DNAME record.
2024-06-07 11:56:19 +02:00
val_dnameqtype_qmin.rpl
- Fix qname minimisation for reply with a DNAME for qtype CNAME that
2024-03-08 16:33:17 +01:00
val_dnameqtype.rpl
- Fix validator classification of qtype DNAME for positive and
2024-03-08 14:10:06 +01:00
val_dnametoolong.rpl
Fixup validation test; the YXDOMAIN is returned and the DNAME.
2017-03-13 08:29:08 +00:00
val_dnametopos.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
val_dnametoposwc.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
val_dnamewc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_ds_afterprime.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_ds_cname.rpl
- Fix handling of wildcard CNAMEs in the chain of trust.
2026-04-21 13:24:40 +02:00
val_ds_cnamesub.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_gost_downgrade.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_gost.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_sha2_downgrade.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_sha2_lenient.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_sha2.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_dsnsec.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_entds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_faildnskey_ok.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_faildnskey.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_failure_dnskey.rpl
Fix typos (#1299)
2025-07-02 10:50:49 +02:00
val_fwdds.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_keyprefetch_verify.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_keyprefetch.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_mal_wc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_dssoa.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_nodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_nta.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_nxdomain.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_ttl_prefetch.rpl
Changelog entry and unit test for fix of NSEC TTL and prefetch ttl.
2024-10-09 15:29:23 +02:00
val_negcache_ttl.rpl
- Fix and add comments in testdata/val_negcache_ttl.rpl.
2024-09-11 12:16:02 +02:00
val_noadwhennodo.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nodata_ent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata_entnx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata_entwc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata_failsig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nodata_failwc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nodata_hasdata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata_zonecut.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodatawc_badce.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodatawc_nodeny.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodatawc_one.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodatawc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nokeyprime.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_b1_nameerror_noce.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b1_nameerror_nonc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b1_nameerror_nowc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_b1_nameerror.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b2_nodata_nons.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_b2_nodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b3_optout_negcache.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nsec3_b3_optout_noce.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b3_optout_nonc.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b3_optout.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nsec3_b4_wild_wr.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
val_nsec3_b4_wild.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nsec3_b5_wcnodata_noce.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b5_wcnodata_nonc.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b5_wcnodata_nowc.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b5_wcnodata.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b21_nodataent_wr.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b21_nodataent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_cname_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_cname_par.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_cname_sub.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_cnametocnamewctoposwc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nsec3_entnodata_optout_badopt.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_entnodata_optout_match.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_nsec3_entnodata_optout.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_nsec3_iter_high.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_nodatawccname.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_nods_badopt.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_nods_badsig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_nods_negcache.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_nods_soa.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_nsec3_nods.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_optout_ad.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_optout_cache.rpl
Fix typos
2021-11-13 16:56:15 +02:00
val_nsec3_wcany_nodeny.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_wcany.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nx_failwc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nx_nodeny.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nx_nowc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nx_nsec3_collision.rpl
- Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.
2024-02-13 13:02:43 +01:00
val_nx_nsec3_params.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nx_overreach.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_pos_truncns.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_positive_nosigs.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
val_positive_wc_nodeny.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_positive_wc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_positive.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_qds_badanc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_qds_oneanc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_qds_twoanc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_refer_unsignadd.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_referd.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_referglue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_rrsig.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_scrub_rr_length.rpl
- For #1193, introduce log-servfail.tdir and cleanup the log-servfail
2024-12-02 12:30:11 +01:00
val_secds_nosig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_secds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_spurious_ns.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_stub_noroot.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_stubds.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_ta_algo_dnskey_dp.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_ta_algo_dnskey.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_ta_algo_missing_dp.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_ta_algo_missing.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_twocname.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_unalgo_anchor.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_unalgo_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_unsec_cname.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_unsecds_negcache.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_unsecds_qtypeds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_unsecds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_wild_pos.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
version_bind_hide.rpl
do not allow cache snooping by default.
2008-09-01 13:48:24 +00:00
version_bind.rpl
Tests can handle multiple hosts. Tests for chaos and iterator.
2007-07-25 12:31:04 +00:00
views.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
zonemd.example1.zone
zonemd, loop over zone and canonicalize data, test call in unit test.
2020-10-06 17:07:24 +02:00
zonemd.example2.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example3.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example4.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example5.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example6.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example7.zone
zonemd, fix that dnssec denial does not invalidate zone.
2020-10-21 11:51:30 +02:00
zonemd.example8.zone
zonemd, fix that dnssec denial does not invalidate zone.
2020-10-21 11:51:30 +02:00
zonemd.example9.zone
zonemd, unit tests for wrong DNSSEC signatures.
2020-10-21 13:17:42 +02:00
zonemd.example10.zone
zonemd, unit tests for wrong DNSSEC signatures.
2020-10-21 13:17:42 +02:00
zonemd.example11.zone
zonemd, unit tests for DNSSEC type bitmaps.
2020-10-21 14:23:44 +02:00
zonemd.example12.zone
zonemd, unit tests for DNSSEC type bitmaps.
2020-10-21 14:23:44 +02:00
zonemd.example13.zone
zonemd, unit tests for wrong NSEC RRSIGs.
2020-10-21 15:04:06 +02:00
zonemd.example14.zone
zonemd, unit tests for wrong NSEC RRSIGs.
2020-10-21 15:04:06 +02:00
zonemd.example15.zone
zonemd, unit tests for verifying DNSKEY with trust anchor failures.
2020-10-21 15:58:47 +02:00
zonemd.example16.zone
zonemd, fix to detect duplicate zonemd scheme and algo RRs.
2021-01-22 14:36:53 +01:00
zonemd.example17.zone
zonemd, unit test for capitalisation of owner and ns names.
2021-01-22 14:40:21 +01:00
zonemd.example_a1.zone
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
zonemd.example_a2.zone
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
zonemd.example_a3.zone
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
zonemd.example_a4.zone
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
zonemd.example_a5.zone
b.root renumbering (#1132)
2024-08-30 08:48:31 +02:00