WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-08-17 21:25:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
f7637a4f1811f4a9331707d8a95cf0af65a97c0f
unbound/testdata
T
History
W.C.A. Wijngaards 13ec8d0f26 - Fix CVE-2026-42955, Extra fix for CVE-2026-40622 to also clamp 
the TTL of A/AAAA records disallowing a one-time 'ghost domain'
  delegation renewal via glue records. Thanks to Qifan Zhang, Palo
  Alto Networks, for the report.
2026-07-22 10:11:04 +02:00
..
00-lint.tdir
- Skip the 00-lint test. splint is not maintained; it either does not
2023-07-03 15:38:16 +02:00
01-doc.tdir
- Fix doc unit test for out of directory build.
2024-04-25 17:06:06 +02:00
02-unittest.tdir
- Skip unbound-dnstap-socket unit test when not compiled with
2024-06-04 16:59:58 +02:00
03-testbound.tdir
- Fix that cachedb does not store failures in the external cache.
2022-10-21 10:11:47 +02:00
04-checkconf.tdir
Fix documentation to adhere to RFC 5952
2026-01-06 16:10:37 +01:00
05-asynclook.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
06-ianaports.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
07-confroot.tdir
- Add missing common functions to tdir tests.
2024-05-15 11:20:36 +02:00
08-host-lib.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
09-unbound-control.tdir
- Fix unbound-control test so it counts the new flush_negative output,
2025-04-02 15:52:20 +02:00
10-unbound-anchor.tdir
Fix typos
2021-11-13 16:56:15 +02:00
acl_interface.tdir
- Fix #1154: Tag Incorrectly Applying for Other Interfaces
2024-10-16 15:56:33 +02:00
auth_axfr.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
auth_https_origin.tdir
- Fix #1353: auth-zone can not use empty label for $ORIGIN when
2025-09-29 14:24:31 +02:00
auth_https.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
auth_tls_failcert.tdir
- Enable the auth_tls.tdir and auth_tls_failcert.tdir tests.
2025-04-01 14:44:25 +02:00
auth_tls.tdir
- Enable the auth_tls.tdir and auth_tls_failcert.tdir tests.
2025-04-01 14:44:25 +02:00
blanks_cached_zone.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
blanks_https.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
cachedb_no_store.tdir
- Fix tests to use new common.sh functions, wait_logfile and
2023-12-06 16:32:06 +01:00
clang-analysis.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
cookie_file.tdir
- Fix cookie_file test sporadic fails for time change during
2024-10-10 09:45:48 +02:00
ctrl_itr.tdir
- Fix to use SSL_CTX_set_tlsext_ticket_key_evp_cb in OpenSSL
2020-07-08 16:22:39 +02:00
ctrl_pipe.tdir
- Fix to use SSL_CTX_set_tlsext_ticket_key_evp_cb in OpenSSL
2020-07-08 16:22:39 +02:00
dnscrypt_cert_chacha.tdir
- Fix CVE-2026-40691, Packet of death for DNSCrypt over TCP. Thanks
2026-07-22 10:09:50 +02:00
dnscrypt_cert.tdir
- Fix CVE-2026-40691, Packet of death for DNSCrypt over TCP. Thanks
2026-07-22 10:09:50 +02:00
dnstap_reconnect.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tcp.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls_badcert.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls_badname.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls_clientauth.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls_peername.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap_tls.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
dnstap.tdir
- For #1175, update serve-expired tests.
2024-11-22 16:14:02 +01:00
doh_downstream_buffer_size.tdir
- Attempt to further fix doh_downstream_buffer_size.tdir flakiness.
2024-09-24 12:21:03 +02:00
doh_downstream_endpoint.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
doh_downstream_notls.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
doh_downstream_post.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
doh_downstream.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
doq_downstream.tdir
- Fix #1296: DNS over QUIC depends on a very outdated version of
2025-06-19 14:39:45 +02:00
dynlibmod.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
ede.tdir
- Cleanup ede.tdir test.
2024-07-23 20:22:25 +02:00
edns_cache.tdir
- Get ready for the DNS flag day: remove EDNS lame procedure, do not re-query
2019-01-16 10:23:13 +00:00
fast_reload_fwd.tdir
- Fix that ub_event has the facility to deal with callbacks for
2025-04-02 16:25:58 +02:00
fast_reload_most_options.tdir
Fast Reload Option (#1042)
2025-03-31 15:25:24 +02:00
fast_reload_thread.tdir
Fast Reload Option (#1042)
2025-03-31 15:25:24 +02:00
fwd_ancil.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_bogus.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_capsid_fallback.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_capsid_strip.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_capsid_white.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_capsid.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_compress_c00c.tdir
- Fix RFC7766 compliance when client sends EOF over TCP. It stops
2026-04-15 11:29:07 +02:00
fwd_edns_bksec.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_edns_probe.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_malformed.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_no_edns.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_oneport.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_tcp_tc6.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
fwd_tcp_tc.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_tcp.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_three_service.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
fwd_three.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_ttlexpire.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_udp_with_tcp_upstream.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_udp.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
fwd_udptmout.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_waitudp.tdir
- Replace the obsolescent fgrep with grep -F in tests.
2023-11-24 15:51:17 +01:00
fwd_zero.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
hostsfileosx.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
http_user_agent.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
ip_ratelimit.tdir
- Fix ip_ratelimit test to work with dig that enables DNS cookies.
2023-08-17 15:43:14 +02:00
ipset.tdir
- ipset-pf-support, fix to skip unit test if no pf dev.
2024-07-01 17:11:20 +02:00
local_nodefault.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
local_norec.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
local_nosnoop.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
log_servfail.tdir
- Fix typo in log_servfail.tdir test.
2024-12-03 16:03:05 +01:00
nss_compile.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
padding.tdir
- Fix tests to use new common.sh functions, wait_logfile and
2023-12-06 16:32:06 +01:00
proxy_protocol.tdir
PROXYv2 downstream support (#760)
2022-10-03 15:29:47 +02:00
pylib.tdir
- Convert tdir tests to use the new skip_test functionality.
2022-09-20 14:45:20 +02:00
pymod_thread.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
pymod.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
ratelimit.tdir
- Additional fix for CVE-2025-11411 (possible domain hijacking attack),
2025-11-26 11:09:40 +01:00
redis_reconnect_interval.tdir
- Redis checks for server down and throttles reconnects.
2025-07-24 11:06:00 +02:00
redis_replica.tdir
- Fix redis_replicat test for unused option defaults and log printout.
2025-04-04 10:57:53 +02:00
root_anchor.tdir
- Add missing common functions to tdir tests.
2024-05-15 11:20:36 +02:00
root_hints.tdir
- Add missing common functions to tdir tests.
2024-05-15 11:20:36 +02:00
root_zonemd.tdir
- Fix root_zonemd unit test, it checks that the root ZONEMD verifies,
2023-12-08 17:15:35 +01:00
rpz_reload.tdir
- Fix #1021 Inconsistent Behavior with Changing rpz-cname-override
2024-03-11 16:31:58 +01:00
speed_cache.tdir
Fixup speed_cache for 01-doc test.
2017-07-06 13:30:37 +00:00
speed_local.tdir
- Add duration variable for speed_local.test.
2023-01-30 11:33:58 +01:00
ssl_req_order.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
ssl_req_timeout.tdir
- Fix stream_ssl, ssl_req_order and ssl_req_timeout tests for
2020-09-30 11:29:57 +02:00
stat_timer.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
stat_values.tdir
- Fix that when discard timeout drops packet, they are accounted as
2025-11-12 11:49:04 +01:00
stream_ssl.tdir
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
stream_tcp.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
stub_auth_tc.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
stub_udp6.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
stub_udp_with_tcp_upstream.tdir
Add (stub|forward)-tcp-upstream options which enable using tcp transport only for specified stub/forward zones
2021-08-05 08:44:18 +02:00
stub_udp.tdir
tests in tdir format.
2017-07-06 13:27:30 +00:00
subnet_cache_lookup.tdir
- unbound-control cache_lookup +t allows tld and root names. And
2025-08-15 13:03:31 +02:00
svcb.tdir
- For #739: minor cleanup for testcases.
2023-07-03 10:10:16 +02:00
tcp_conn_limit.tdir
- Patch to implement tcp-connection-limit from Jim Hague (Sinodun).
2018-08-07 11:57:42 +00:00
tcp_idle_timeout.tdir
- Fix tcp idle timeout test, for difference in the tcp reply code.
2019-01-21 09:36:01 +00:00
tcp_req_order.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
tcp_req_size.tdir
Fix test to check if server up afterwards
2020-02-06 10:25:47 +01:00
tcp_req_timeout.tdir
- Unit tests for ssl out of order processing.
2019-01-21 13:26:21 +00:00
tcp_reuse.tdir
- Fix tests to use new common.sh functions, wait_logfile and
2023-12-06 16:32:06 +01:00
tcp_sigpipe.tdir
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
tls_reuse_auth.tdir
- Fix that upstream TLS connections are not reused as TLS
2026-04-21 11:59:05 +02:00
tls_reuse.tdir
- Fix tests to use new common.sh functions, wait_logfile and
2023-12-06 16:32:06 +01:00
zonemd_reload.tdir
- Use 127.0.0.1 explicitly in tests to avoid delays and errors on newer
2023-11-24 15:34:25 +01:00
acl.rpl
access-control
2007-11-19 15:32:55 +00:00
auth_notify_lookup.rpl
- Add test for allow-notify with a host name.
2026-01-27 13:49:33 +01:00
auth_nsec3_ent_with_out_of_zone_data.rpl
Fix auth nsec3 code (#1280)
2025-05-12 14:26:47 +02:00
auth_nsec3_ent.rpl
- Fix auth-zone NSEC3 response for empty nonterminals with exact
2019-04-02 12:21:41 +00:00
auth_nsec3_wild_with_out_of_zone_data.rpl
Fix auth nsec3 code (#1280)
2025-05-12 14:26:47 +02:00
auth_nsec3_wild.rpl
- Fix auth-zone NSEC3 response for wildcard nodata answers,
2019-04-03 06:36:40 +00:00
auth_xfr_host.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
auth_xfr_ixfr.rpl
- auth zone notify work.
2018-04-16 15:10:30 +00:00
auth_xfr_ixfrisaxfr.rpl
- auth zone notify work.
2018-04-16 15:10:30 +00:00
auth_xfr_ixfrmismatch.rpl
Fix typos
2021-11-13 16:56:15 +02:00
auth_xfr_ixfrnotimpl.rpl
- auth zone notify work.
2018-04-16 15:10:30 +00:00
auth_xfr_notify.rpl
- Fix #4224: auth_xfr_notify.rpl test broken due to typo
2019-01-29 14:37:35 +00:00
auth_xfr_probesoa.rpl
auth zone test probe of SOA
2018-02-05 09:59:53 +00:00
auth_xfr.rpl
auth zone ixfr unit test, and fixes.
2018-02-05 09:42:42 +00:00
auth_zonefile_dnssec_fail.rpl
- Fix 'make test' to work for --disable-sha1 configure option.
2020-01-08 09:23:46 +01:00
auth_zonefile_dnssec.rpl
zonemd, zonemd-permissive-mode: yes logs the failure but does not block
2020-10-23 14:33:04 +02:00
auth_zonefile_down.rpl
zonemd, fix unit test to allow nonvalidating zone without zonemd with
2021-02-04 16:18:02 +01:00
auth_zonefile_noup.rpl
auth zone for downstream
2018-01-31 08:30:32 +00:00
auth_zonefile_root.rpl
Test authority zone with zonefile for root referrals (RFC7706)
2018-01-31 08:37:38 +00:00
auth_zonefile.rpl
auth zone for downstream
2018-01-31 08:30:32 +00:00
auth_zonemd_anchor_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_anchor.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_chain_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_chain.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_file_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_file_unknown.rpl
- Fix zonemd check to allow unsupported algorithms to load.
2022-04-08 09:29:37 +02:00
auth_zonemd_file.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_insecure_absent_reject.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_insecure_absent.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_insecure_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_insecure.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_nokey.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_permissive_mode.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_anchor_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_anchor.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_chain_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_chain_keyinxfr.rpl
- Fix zonemd verification of key that is not in DNS but in the zone
2021-08-13 14:43:11 +02:00
auth_zonemd_xfr_chain.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr_fail.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
auth_zonemd_xfr.rpl
- zonemd-check: yesno option, default no, enables the processing
2021-05-27 14:20:53 +02:00
autotrust_10key.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
autotrust_addpend_2exceed.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_early.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_nosign.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_nosignnew.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_once.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_addpend_twice.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_init_ds.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
autotrust_init_fail.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
autotrust_init_failsig.rpl
- Fix #927: unbound 1.18.0 make test error. Fix make test without SHA1.
2023-08-31 13:54:03 +02:00
autotrust_init_legacy.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_init_sigs.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
autotrust_init_zsk.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
autotrust_init.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
autotrust_missing_all.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_missing_returns.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_missing.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_probefail.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
autotrust_probefailsig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
autotrust_revoked_use.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_revoked_with_invalid.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_revtp_read.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
autotrust_revtp_use.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
autotrust_revtp.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
autotrust_rollalgo_unknown.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_rollalgo.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_rollover.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
autotrust_valid_use.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
black_data.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
black_dnskey.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
black_ds_entry.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
black_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
black_ent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
black_key_entry.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
black_prime_entry.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
black_prime.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
cachedb_cached_ede.crpl
Merge branch 'master' into features/ede-caching-cachedb
2023-07-30 14:17:52 +02:00
cachedb_expired_client_timeout.crpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
cachedb_expired_reply_ttl.crpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
cachedb_expired.crpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
cachedb_servfail_cname.crpl
- For #1175, update serve-expired tests.
2024-11-22 16:14:02 +01:00
cachedb_subnet_change.crpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
cachedb_subnet_expired.crpl
- Fix for the DNSBomb vulnerability CVE-2024-33655. Thanks to Xiang Li
2024-05-01 10:10:58 +02:00
cachedb_subnet_toecs_timeout.crpl
- Add unit tests for cachedb and subnet cache expired data.
2024-04-26 13:33:26 +02:00
cachedb_val_expired.crpl
- Fix to make the cachedb_val_expired.crpl succeed.
2026-02-23 12:52:10 +01:00
chaos_trustanchor.rpl
- Add trustanchor.unbound CH TXT that gets a response with a number
2017-03-16 09:17:58 +00:00
common.sh
- Fix to update common.sh for speed of kill_pid.
2025-04-04 11:55:42 +02:00
disable_edns_do.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
dname_unsigned_cname.rpl
- Fix that a DNAME with an unsigned CNAME is checked for
2026-04-21 13:19:13 +02:00
dns64_lookup.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
dns64_prefetch_cache.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
dns_error_reporting.rpl
DNS Error Reporting (RFC 9567) (#902)
2025-04-07 10:25:10 +02:00
domain_insec_ds.rpl
- Fix #1293: EDE 6 is attached to insecure cached answers when client sends
2025-06-20 14:09:30 +02:00
ds_wildcard_cname.rpl
- Fix handling of wildcard CNAMEs in the chain of trust.
2026-04-21 13:24:40 +02:00
ede_acl_refused.rpl
Add the basic EDE (RFC8914) cases (#604)
2022-05-06 12:48:53 +02:00
ede_cache_snoop_not_auth.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
ede_localzone_dname_expansion.rpl
Add the basic EDE (RFC8914) cases (#604)
2022-05-06 12:48:53 +02:00
edns_attached_once_per_upstream.rpl
- Fix EDNS to upstream where the same option could be attached more than
2022-01-14 13:55:34 +01:00
edns_client_string_opcode.rpl
Replace edns-client-tag with edns-client-string option
2020-09-30 23:17:53 +02:00
edns_client_string.rpl
Replace edns-client-tag with edns-client-string option
2020-09-30 23:17:53 +02:00
edns_downstream_cookies.rpl
- For #762: Interaction between DNS Cookies and source IP ratelimiting
2023-08-08 10:14:03 +02:00
edns_keepalive.rpl
Add the basic EDE (RFC8914) cases (#604)
2022-05-06 12:48:53 +02:00
fetch_glue_cname.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
fetch_glue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
fwd_0ttlservfail.rpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
fwd_any.rpl
Fix typos
2021-11-13 16:56:15 +02:00
fwd_cached.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
fwd_droptoomany.rpl
DoS protection.
2008-09-02 13:04:47 +00:00
fwd_error_retries.rpl
Add unit test for check the configuration of outbound max retries
2019-06-12 19:01:27 +02:00
fwd_error.rpl
Adapt some comments
2019-06-12 19:01:30 +02:00
fwd_jostle_out.rpl
DoS protection.
2008-09-02 13:04:47 +00:00
fwd_jostle.rpl
DoS protection.
2008-09-02 13:04:47 +00:00
fwd_lrudrop.rpl
send recursive queries to test cache drop off.
2007-08-27 11:26:03 +00:00
fwd_minimal.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
fwd_name_lookup.rpl
- Fix for #1114: Fix that cache fill for forward-host names is
2024-07-31 11:42:44 +02:00
fwd_no_cache.rpl
- Fix #4208: 'stub-no-cache' and 'forward-no-cache' not work.
2018-11-27 10:29:14 +00:00
fwd_notcached.rpl
do not allow cache snooping by default.
2008-09-01 13:48:24 +00:00
fwd_scrub_rrsig.rpl
- Fix to shorten RRSIG count in scrubber, this protects against
2026-04-15 11:41:28 +02:00
fwd_timeout.rpl
Adapt some comments
2019-06-12 19:01:30 +02:00
fwd_two.rpl
DoS protection.
2008-09-02 13:04:47 +00:00
fwd.rpl
Fix typos
2021-11-13 16:56:15 +02:00
host_file.template
testbed scripts.
2007-01-04 11:03:29 +00:00
ipsecmod_bogus_ipseckey.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_enabled.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_hook.sh
- Implemented opportunistic IPsec support module (ipsecmod).
2017-05-16 12:39:24 +00:00
ipsecmod_ignore_bogus_ipseckey.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_max_ttl.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_strict.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ipsecmod_whitelist.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_auth_tc.rpl
- Fix to stop responses with TC flag from resulting in partial
2022-10-06 10:01:09 +02:00
iter_class_any.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_cname_cache.rpl
testbound test for older fix added.
2009-02-05 14:31:16 +00:00
iter_cname_double.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_cname_minimise_nx.rpl
Fixed some syntax errors in rpl files.
2023-12-07 11:38:01 +01:00
iter_cname_minimise.rpl
- Fix #412: cache invalidation issue with CNAME+A.
2022-02-04 14:27:01 +01:00
iter_cname_nx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_cname_qnamecopy.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_cycle_noh.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_cycle.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_dname_insec.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
iter_dname_ttl0.rpl
- For #1411: Introduce a failing case in the rpl test so that it only
2026-03-04 13:22:42 +01:00
iter_dname_ttl.rpl
- Remove unused portion from iter_dname_ttl unit test.
2024-03-08 09:51:37 +01:00
iter_dname_yx.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
iter_dnsseclame_bug.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_dnsseclame_ds_ok.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_dnsseclame_ds.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_dnsseclame_ta_ok.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_dnsseclame_ta.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_domain_sale_nschange.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_domain_sale.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_donotq127.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_dp_ip6useless.rpl
- Fix to detect that no IPv6 support means that IPv6 addresses are
2022-02-25 10:27:56 +01:00
iter_dp_turnsuseless.rpl
- Fix resolution for domains like safesvc.com.cn. If the iterator
2010-05-19 12:59:27 +00:00
iter_ds_locate_ns_cname.rpl
- new approach to NS fetches for DS lookup that works with
2012-03-21 15:01:01 +00:00
iter_ds_locate_ns_detach.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
iter_ds_locate_ns_nosoa.rpl
- new approach to NS fetches for DS lookup that works with
2012-03-21 15:01:01 +00:00
iter_ds_locate_ns.rpl
- fix to locate nameservers for DS lookup with NS fetches.
2012-03-19 15:44:21 +00:00
iter_ds_referral.rpl
- Fix that DS queries with referral replies are answered straight
2018-01-02 09:48:22 +00:00
iter_ds_reply.rpl
- Fix that DS queries with referral replies are answered straight
2018-01-02 09:48:22 +00:00
iter_emptydp_for_glue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_emptydp.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_failreply.rpl
- For #1193, introduce log-servfail.tdir and cleanup the log-servfail
2024-12-02 12:30:11 +01:00
iter_fwdfirst.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_fwdfirstequal.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_fwdfirstequaltcp.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_fwdstub.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_fwdstubauth.rpl
- Take configured auth zones into consideration when checking if a
2025-01-14 16:38:53 +01:00
iter_fwdstubroot.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ghost_grandchild_delegation.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ghost_sub.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ghost_timewindow.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_got6only.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_hint_lame.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ignore_empty.rpl
- Fix #946: Forwarder returns servfail on upstream response noerror no
2023-10-04 18:16:22 +02:00
iter_lame_aaaa.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_lame_noaa.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_lame_nosoa.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_lamescrub.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_max_global_quota.rpl
- Add iter-scrub-ns, iter-scrub-cname and max-global-quota
2024-08-20 14:08:52 +02:00
iter_minimise_chain.rpl
- Fix for cname chain length with qtype ANY and qname minimisation.
2025-05-19 13:17:21 +02:00
iter_mod.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_nat64_donotq.rpl
- Fix #1403: Inconsistency between do-nat64 and do-not-query-address
2026-02-11 16:01:30 +01:00
iter_nat64_prefix48.rpl
NAT64 support
2022-11-07 11:37:50 +00:00
iter_nat64_prefix.rpl
- For #722: Minor fixes, formatting and refactoring.
2023-05-01 18:23:13 +02:00
iter_nat64.rpl
NAT64 support
2022-11-07 11:37:50 +00:00
iter_ns_badip.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ns_spoof.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_nxns_cached.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_nxns_fallback.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_nxns_parentside.rpl
Fix typos (#1299)
2025-07-02 10:50:49 +02:00
iter_pc_a.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pc_aaaa.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcdiff.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcdirect.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pclame.rpl
- Fix storage of negative parent glue if that last resort fails.
2010-06-01 09:33:25 +00:00
iter_pcname.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcnamech.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcnamechrec.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcnamerec.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_pcttl.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_change2.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_change.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_childns.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch_fail.rpl
- Fix CVE-2026-42955, Extra fix for CVE-2026-40622 to also clamp
2026-07-22 10:11:04 +02:00
iter_prefetch_ns.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_prefetch.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_primenoglue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_priv_svcb.rpl
- Fix for DNS Rebinding Bypass via SVCB/HTTPS Records in Unbound.
2026-03-05 09:47:13 +01:00
iter_privaddr.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_ranoaa_lame.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_reclame_one.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_reclame_two.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_recurse.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_req_qname.rpl
Fixup for problems with do-ip6: no and only ipv6 addresses.
2008-11-17 12:47:34 +00:00
iter_resolve_minimised_nx.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_resolve_minimised_refused.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_resolve_minimised_timeout.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_resolve_minimised.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_resolve.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_cname_an.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_dname_insec.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_dname_out_of_zone.rpl
- Fix to ignore out-of-zone DNAME records for CNAME synthesis. Thanks
2026-03-13 11:28:32 +01:00
iter_scrub_dname_rev.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_dname_sec.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_scrub_ns_fwd.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_scrub_ns_side.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_scrub_ns.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_scrub_promiscuous.rpl
- Fix for iterator RCODE handling of YXDOMAIN. This fixes
2026-04-21 10:09:02 +02:00
iter_scrub_rr_length.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_soamin.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_stub_leak.rpl
- Set defaults to yes for a number of options to increase speed and
2018-08-27 13:18:19 +00:00
iter_stub_noroot.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_stubfirst.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_stublastresort.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
iter_svcb_malformed.rpl
- Add test case for malformed SVCB records. Thanks to
2026-04-21 09:41:53 +02:00
iter_timeout_ra_aaaa.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
iter_unverified_glue_fallback.rpl
- Merge patch to fix for glue that is outside of zone, with
2024-08-23 08:56:48 +02:00
iter_unverified_glue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
Kexample.com.+003+02854.ds
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+003+02854.key
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+003+02854.private
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+005+16486.ds
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+16486.key
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+16486.private
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+30899.ds
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+005+30899.key
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+005+30899.private
sign test tool.
2007-08-29 12:09:14 +00:00
Kexample.com.+005+55582.ds
more keys for autotrust testing.
2009-09-02 10:04:34 +00:00
Kexample.com.+005+55582.key
more keys for autotrust testing.
2009-09-02 10:04:34 +00:00
Kexample.com.+005+55582.private
more keys for autotrust testing.
2009-09-02 10:04:34 +00:00
Kexample.com.+005+60946.ds
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+60946.key
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+005+60946.private
- TRAFFIC keyword for testbound. Simplifies test generation.
2009-09-02 13:11:52 +00:00
Kexample.com.+007+57024.ds
Test that AD flags and NSEC3 optout does what we say.
2010-09-14 09:11:19 +00:00
Kexample.com.+007+57024.key
Test that AD flags and NSEC3 optout does what we say.
2010-09-14 09:11:19 +00:00
Kexample.com.+007+57024.private
Test that AD flags and NSEC3 optout does what we say.
2010-09-14 09:11:19 +00:00
Kexample.com.+008+01443.ds
SHA256 support.
2008-09-30 13:06:07 +00:00
Kexample.com.+008+01443.key
SHA256 support.
2008-09-30 13:06:07 +00:00
Kexample.com.+008+01443.private
SHA256 support.
2008-09-30 13:06:07 +00:00
Kexample.com.+008+29332.ds
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+29332.key
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+29332.private
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+55566.ds
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+55566.key
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+008+55566.private
add test for being lenient with NSEC empty non-terminal Name Error responses with rcode=NXDOMAIN while it should be rcode=NOERROR
2014-02-20 09:48:08 +00:00
Kexample.com.+009+48886.ds
Line endings.
2009-04-17 11:52:42 +00:00
Kexample.com.+009+48886.key
Line endings.
2009-04-17 11:52:42 +00:00
Kexample.com.+009+48886.private
Line endings.
2009-04-17 11:52:42 +00:00
Kexample.com.+012+60385.ds
GOST algorithm number 12.
2010-04-15 11:29:43 +00:00
Kexample.com.+012+60385.key
GOST algorithm number 12.
2010-04-15 11:29:43 +00:00
Kexample.com.+012+60385.private
GOST algorithm number 12.
2010-04-15 11:29:43 +00:00
local_acl_override.rpl
- Possibility to specify local-zone types for an acl/tag pair
2016-06-24 19:08:58 +00:00
local_acl_taglist_action.rpl
- access-control-tag-data implemented. verbose(4) prints tag debug.
2016-07-07 10:20:05 +00:00
local_acl_taglist.rpl
- access-control-tag-data implemented. verbose(4) prints tag debug.
2016-07-07 10:20:05 +00:00
local_cname.rpl
- Fix for consistent use of local zone CNAME alias for configured auth
2025-06-17 15:03:29 +02:00
local_cnameother.rpl
- Fix localdata and rpz localdata to match CNAME only if no direct
2024-03-19 10:21:10 +01:00
local_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
local_nodefault.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
local_transparent_sametype.rpl
- separate ldns into core ldns inside ldns/ subdirectory. No more
2013-10-31 15:09:26 +00:00
local_typetransparent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
localdata.rpl
- Allow local-data for classes other than IN to inherit a configured
2021-12-10 17:35:36 +01:00
long_qname.rpl
- Fix for the Jiggle Attack. The server is fixed to answer
2026-04-21 09:54:17 +02:00
net_signed_servfail.rpl
- Fix #4132: Openness/closeness of RANGE intervals in rpl files.
2018-10-25 09:01:53 +00:00
nomem_cnametopos.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
nsid_ascii.rpl
rpl tests for nsid
2021-01-19 17:18:26 +01:00
nsid_bogus.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
nsid_hex.rpl
rpl tests for nsid
2021-01-19 17:18:26 +01:00
nsid_not_set.rpl
rpl tests for nsid
2021-01-19 17:18:26 +01:00
refuse_xfr.rpl
- Fix for the Jiggle Attack. The server is fixed to answer
2026-04-21 09:54:17 +02:00
respip_dns64_lookup.rpl
- Fix for #1344: Fix that respip and dns64 can be enabled at the
2025-09-30 11:28:15 +02:00
root_key_sentinel.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
rpz_axfr.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
rpz_cached_cname.rpl
- Fix #954: Inconsistent RPZ handling for A record returned along with
2023-10-17 16:47:04 +02:00
rpz_clientip_override.rpl
- Fix rpz that the rpz override is taken in case of clientip triggers.
2024-03-13 16:04:58 +01:00
rpz_clientip.rpl
- rpz-triggers, the added soa for client ip modified answers is affected
2021-05-14 16:34:38 +02:00
rpz_cname_handle.rpl
- Fix rpz so that rpz CNAME can apply after rpz CNAME. And fix that
2024-03-19 09:32:53 +01:00
rpz_cname_tag.rpl
- Fix for #1079: fix RPZ taglist in iterator callback that no client
2024-05-30 12:44:26 +02:00
rpz_cname_wild.rpl
- Fix #1332: CNAME chains are sometimes not followed when RPZs add a
2025-09-09 12:34:11 +02:00
rpz_ixfr.rpl
- Fix RPZ removal of client-ip, nsip, nsdname triggers from IXFR.
2023-05-19 14:38:41 +02:00
rpz_nsdname_override.rpl
- Fix rpz for cname override action after nsdname and nsip triggers.
2024-03-13 17:14:14 +01:00
rpz_nsdname.rpl
- Fix comment name in the rpz nsdname test.
2025-04-04 08:58:54 +02:00
rpz_nsip_override.rpl
- Add rpz unit test for nsip action override.
2024-03-18 14:11:43 +01:00
rpz_nsip.rpl
- Fix unit tests for rpz now that the AA flag returns successfully from
2022-01-05 13:39:06 +01:00
rpz_passthru_clientip.rpl
- Fix #1029: rpz trigger clientip and action rpz-passthru not working
2024-03-13 13:45:04 +01:00
rpz_passthru.rpl
- Fix for #628: fix rpz-passthru for qname trigger by localzone type.
2022-02-16 09:51:25 +01:00
rpz_qname_override.rpl
- add always_deny action, use this one for RPZ
2019-08-23 12:15:37 +02:00
rpz_qname_tcponly.rpl
RPZ: testbound: add qname and respip tcp-only examples
2020-11-03 11:03:29 +01:00
rpz_qname.rpl
- Fix #628: A rpz-passthru action is not ending RPZ zone processing.
2022-02-15 16:20:12 +01:00
rpz_qtype_cname.rpl
- Fix rpz for qtype CNAME after nameserver trigger.
2024-03-18 14:36:29 +01:00
rpz_respip_override.rpl
- add always_deny action, use this one for RPZ
2019-08-23 12:15:37 +02:00
rpz_respip_tcponly.rpl
RPZ: testbound: add qname and respip tcp-only examples
2020-11-03 11:03:29 +01:00
rpz_respip.rpl
- Fix RPZ IP responses with trigger rpz-drop on cache entries, that
2023-05-01 09:26:17 +02:00
rpz_rootwc.rpl
- Fix to allow rpz with wildcard that applies to all TLDs at once.
2021-02-25 16:54:32 +01:00
rpz_signal_nxdomain_ra.rpl
- Fix for #596: Fix rpz-signal-nxdomain-ra to work for clientip
2022-01-05 16:48:35 +01:00
rpz_val_block.rpl
- For #1193, introduce log-servfail.tdir and cleanup the log-servfail
2024-12-02 12:30:11 +01:00
rrset_rettl.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
rrset_untrusted.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
rrset_updated.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
rrset_use_cached.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_0ttl_nodata.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_0ttl_nxdomain.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_0ttl_servfail.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_cached_servfail_refresh.rpl
- For #1193, introduce log-servfail.tdir and cleanup the log-servfail
2024-12-02 12:30:11 +01:00
serve_expired_cached_servfail.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
serve_expired_client_timeout_servfail.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_client_timeout_val_bogus.rpl
Serve expired cache update fixes (#1174)
2024-12-31 16:28:12 +01:00
serve_expired_client_timeout_val_insecure_delegation.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
serve_expired_client_timeout.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_reply_ttl.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_ttl_client_timeout.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired_ttl_reset.rpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
serve_expired_ttl.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
serve_expired_val_bogus.rpl
Serve expired cache update fixes (#1174)
2024-12-31 16:28:12 +01:00
serve_expired_zerottl.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_expired.rpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
serve_original_ttl.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
stop_nxdomain_minimised.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
stop_nxdomain.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
subnet_cached_ede.crpl
- For #790: clean testcase.
2023-07-31 09:41:57 +02:00
subnet_cached_servfail_timeout.crpl
- Fix for EDNS client subnet so that it does not store SERVFAIL in
2026-04-10 15:45:28 +02:00
subnet_cached_servfail.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_cached_size.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_cached.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_derived.crpl
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
subnet_format_ip4.crpl
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
subnet_global_prefetch_always_forward.crpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
subnet_global_prefetch_expired.crpl
Merge branch 'branch-1.24.1'
2025-10-22 12:44:59 +02:00
subnet_global_prefetch_with_client_ecs.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_global_prefetch.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_max_source.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_noecs_mult.crpl
- Add unit tests for non-ecs aggregation.
2025-07-16 11:46:04 +02:00
subnet_noecs_refused.crpl
- Add unit tests for non-ecs aggregation.
2025-07-16 11:46:04 +02:00
subnet_noecs_support.crpl
- Add unit tests for non-ecs aggregation.
2025-07-16 11:46:04 +02:00
subnet_not_whitelisted.crpl
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
subnet_prefetch.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_prezero.crpl
- Fix edns subnet so that queries with a source prefix of zero cause
2023-10-09 12:21:22 +02:00
subnet_scopezero_bogus.crpl
- Fix validator to set unchecked when validation recursion
2026-02-25 10:59:33 +01:00
subnet_scopezero_global_nocache.crpl
- Fix edns subnet, that scope zero queries, when there is a
2026-01-06 09:33:00 +01:00
subnet_scopezero_global.crpl
- Fix edns subnet, so that the subquery without subnet is stored in
2025-08-06 12:08:44 +02:00
subnet_scopezero_noedns.crpl
- Fix edns subnet replies for scope zero answers to not get stored
2024-03-04 13:20:13 +01:00
subnet_scopezero.crpl
- Fix edns subnet so that scope 0 answers only match sourcemask 0
2022-08-02 14:13:55 +02:00
subnet_val_positive_client.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_val_positive.crpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
subnet_without_validator.crpl
- Fix unit tests for spurious empty messages.
2023-02-09 10:38:55 +01:00
test_ds.sha1
Nicer names for test files.
2009-08-11 10:33:56 +00:00
test_ds.sha384
- implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This
2012-02-08 13:22:44 +00:00
test_ldnsrr.1
- unit test for ldns wire to str and back with zones, root, nlnetlabs
2014-01-31 10:19:01 +00:00
test_ldnsrr.2
- unit test for ldns wire to str and back with zones, root, nlnetlabs
2014-01-31 10:19:01 +00:00
test_ldnsrr.3
- Fix #572: Fix unit test failure for systems with different
2014-04-07 09:18:29 +00:00
test_ldnsrr.4
- Fix encoding of RR type ATMA.
2025-01-21 12:27:15 +01:00
test_ldnsrr.5
Fix documentation to adhere to RFC 5952
2026-01-06 16:10:37 +01:00
test_ldnsrr.c1
- unit test for ldns wire to str and back with zones, root, nlnetlabs
2014-01-31 10:19:01 +00:00
test_ldnsrr.c2
- unit test for ldns wire to str and back with zones, root, nlnetlabs
2014-01-31 10:19:01 +00:00
test_ldnsrr.c3
- Fix representation of types GPOS and RESINFO, add rdf type for
2025-03-17 16:38:17 +01:00
test_ldnsrr.c4
- Fix encoding of RR type ATMA.
2025-01-21 12:27:15 +01:00
test_ldnsrr.c5
- Fix print of RR type NSAP-PTR, it is an unquoted string.
2025-03-20 15:51:03 +01:00
test_nsec3_hash.1
nsec3 hash function unit test.
2007-09-17 09:25:54 +00:00
test_packets.1
Smaller test data.
2007-04-18 13:48:29 +00:00
test_packets.2
Smaller test data.
2007-04-18 13:48:29 +00:00
test_packets.3
Smaller test data.
2007-04-18 13:48:29 +00:00
test_packets.4
RRSIG parse plans.
2007-04-20 09:58:32 +00:00
test_packets.5
- Fix assertion failure reported by Kai Storbeck from XS4ALL, the
2010-06-16 15:05:22 +00:00
test_packets.6
Assertion incorrect. Compressed packets can be larger.
2007-10-30 13:40:43 +00:00
test_packets.7
- Fix validation failure for qtype ANY caused by a RRSIG parse failure.
2010-04-22 15:01:02 +00:00
test_packets.8
- Be lenient and accept imgw.pl malformed packet (like BIND).
2010-11-08 18:32:55 +00:00
test_packets.9
- Fix parse error on negative SOA RRSIGs if badly ordered in the packet.
2011-12-15 13:37:13 +00:00
test_signatures.1
fixup canon compare. Include full AXFR data in signature test.
2007-08-16 10:05:52 +00:00
test_signatures.2
Jelte found DSA sig solution, copied from ldns to fit into unbound validator.
2008-04-14 15:34:09 +00:00
test_signatures.3
DSA test
2008-04-15 15:19:25 +00:00
test_signatures.4
DSA test
2008-04-15 15:19:25 +00:00
test_signatures.5
Fixup unbound. Now still a switch DSA(ldns) DSA(bind) ...
2008-04-15 18:01:14 +00:00
test_signatures.6
Fixup unbound. Now still a switch DSA(ldns) DSA(bind) ...
2008-04-15 18:01:14 +00:00
test_signatures.7
Fixup unbound. Now still a switch DSA(ldns) DSA(bind) ...
2008-04-15 18:01:14 +00:00
test_signatures.8
test to make sure unbound deals with capitals in signer name like bind does
2010-06-24 07:06:17 +00:00
test_signatures.9
unit test for timestamp failure with clang
2017-12-15 09:38:11 +00:00
test_sigs.ecdsa_p256
- implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This
2012-02-08 13:22:44 +00:00
test_sigs.ecdsa_p384
- implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This
2012-02-08 13:22:44 +00:00
test_sigs.ed448
- ED448 support.
2018-04-05 14:44:17 +00:00
test_sigs.ed25519
- Support for openssl EVP_DigestVerify.
2017-05-30 12:28:25 +00:00
test_sigs.gost
GOST algorithm number 12.
2010-04-15 11:29:43 +00:00
test_sigs.hinfo
Nicer names for test files.
2009-08-11 10:33:56 +00:00
test_sigs.revoked
- Fix that signatures are not allowed with revoked dnskeys.
2026-04-21 13:07:34 +02:00
test_sigs.rsasha256
Nicer names for test files.
2009-08-11 10:33:56 +00:00
test_sigs.rsasha256_draft
- separate ldns into core ldns inside ldns/ subdirectory. No more
2013-10-31 15:09:26 +00:00
test_sigs.rsasha512_draft
Nicer names for test files.
2009-08-11 10:33:56 +00:00
test_sigs.sha1_and_256
Nicer names for test files.
2009-08-11 10:33:56 +00:00
trust_cname_chain.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ttl_max_negative.rpl
- Introduce 'cache-min-negative-ttl' option to bound the minimum TTL for
2024-03-12 11:24:59 +01:00
ttl_max.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ttl_min_negative.rpl
- Introduce 'cache-min-negative-ttl' option to bound the minimum TTL for
2024-03-12 11:24:59 +01:00
ttl_min.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
ttl_msg.rpl
Fix typos
2021-11-13 16:56:15 +02:00
ttl_zero_cacherep.rpl
A few changes for TTL processing:
2025-09-15 10:03:35 +02:00
val_adbit.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_adcopy.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_anchor_nx_nosig.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_anchor_nx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ans_dsent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ans_nx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_any_cname.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_any_dname.rpl
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
2024-02-13 13:02:08 +01:00
val_any_negcache.rpl
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
2024-02-13 13:02:08 +01:00
val_any.rpl
- Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to
2024-02-13 13:02:08 +01:00
val_cname_loop1.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cname_loop2.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cname_loop3.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnameinsectopos.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamenx_dblnsec.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamenx_rcodenx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnameqtype_qmin.rpl
- Fix qname minimisation for reply with a DNAME for qtype CNAME that
2024-03-08 16:33:17 +01:00
val_cnameqtype.rpl
- Fix validator classification of qtype DNAME for positive and
2024-03-08 14:10:06 +01:00
val_cnametocloser_nosig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_cnametocloser.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_cnametocnamewctoposwc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_cnametodname.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametodnametocnametopos.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
val_cnametoinsecure.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
val_cnametonodata_nonsec.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_cnametonodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametonsec.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametonx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametooptin.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametooptout.rpl
- Fix consistency of unit test without roundrobin answers for the
2023-02-09 11:46:33 +01:00
val_cnametopos.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnametoposnowc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_cnametoposwc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamewctonodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamewctonx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_cnamewctoposwc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_deleg_nons.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_dname_twice.rpl
- Add unit test for validation of repeated use of a DNAME record.
2024-06-07 11:56:19 +02:00
val_dnameqtype_qmin.rpl
- Fix qname minimisation for reply with a DNAME for qtype CNAME that
2024-03-08 16:33:17 +01:00
val_dnameqtype.rpl
- Fix validator classification of qtype DNAME for positive and
2024-03-08 14:10:06 +01:00
val_dnametoolong.rpl
Fixup validation test; the YXDOMAIN is returned and the DNAME.
2017-03-13 08:29:08 +00:00
val_dnametopos.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
val_dnametoposwc.rpl
- Use the origin (DNAME) TTL for syntesized CNAMEs as per RFC 6672.
2023-12-06 23:40:01 +01:00
val_dnamewc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_ds_afterprime.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_ds_cname.rpl
- Fix handling of wildcard CNAMEs in the chain of trust.
2026-04-21 13:24:40 +02:00
val_ds_cnamesub.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_gost_downgrade.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_gost.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_sha2_downgrade.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_sha2_lenient.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_ds_sha2.crpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_dsnsec.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_entds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_faildnskey_ok.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_faildnskey.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_failure_dnskey.rpl
Fix typos (#1299)
2025-07-02 10:50:49 +02:00
val_fwdds.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_keyprefetch_verify.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_keyprefetch.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_mal_wc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_dssoa.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_nodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_nta.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_nxdomain.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_negcache_ttl_prefetch.rpl
Changelog entry and unit test for fix of NSEC TTL and prefetch ttl.
2024-10-09 15:29:23 +02:00
val_negcache_ttl.rpl
- Fix and add comments in testdata/val_negcache_ttl.rpl.
2024-09-11 12:16:02 +02:00
val_noadwhennodo.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nodata_ent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata_entnx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata_entwc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata_failsig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nodata_failwc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nodata_hasdata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata_zonecut.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodatawc_badce.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodatawc_nodeny.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodatawc_one.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nodatawc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nokeyprime.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_b1_nameerror_noce.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b1_nameerror_nonc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b1_nameerror_nowc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_b1_nameerror.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b2_nodata_nons.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_b2_nodata.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b3_optout_negcache.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nsec3_b3_optout_noce.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b3_optout_nonc.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b3_optout.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nsec3_b4_wild_wr.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
val_nsec3_b4_wild.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nsec3_b5_wcnodata_noce.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b5_wcnodata_nonc.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b5_wcnodata_nowc.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b5_wcnodata.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nsec3_b21_nodataent_wr.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_b21_nodataent.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_cname_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_cname_par.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_cname_sub.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_cnametocnamewctoposwc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_nsec3_entnodata_optout_badopt.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_entnodata_optout_match.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_nsec3_entnodata_optout.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_nsec3_iter_high.rpl
- Fix CVE-2026-33278, Possible remote code execution during DNSSEC
2026-05-20 10:13:08 +02:00
val_nsec3_nodatawccname.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_nods_badopt.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_nods_badsig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nsec3_nods_negcache.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_nods_soa.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_nsec3_nods.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_optout_ad.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_optout_cache.rpl
Fix typos
2021-11-13 16:56:15 +02:00
val_nsec3_wcany_nodeny.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nsec3_wcany.rpl
- Explicitly use 'rrset-roundrobin: no' for test cases.
2020-04-22 19:27:20 +02:00
val_nx_failwc.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nx_nodeny.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nx_nowc.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_nx_nsec3_collision.rpl
- Fix CVE-2026-33278, Possible remote code execution during DNSSEC
2026-05-20 10:13:08 +02:00
val_nx_nsec3_params.rpl
- Fix CVE-2026-33278, Possible remote code execution during DNSSEC
2026-05-20 10:13:08 +02:00
val_nx_overreach.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_nx.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_pos_truncns.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_positive_nosigs.rpl
- Fix to ignore entirely empty responses, and try at another authority.
2023-02-09 09:56:40 +01:00
val_positive_wc_nodeny.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_positive_wc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_positive.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_qds_badanc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_qds_oneanc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_qds_twoanc.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_refer_unsignadd.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_referd.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_referglue.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_rrsig.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_scrub_rr_length.rpl
- For #1193, introduce log-servfail.tdir and cleanup the log-servfail
2024-12-02 12:30:11 +01:00
val_secds_nosig.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_secds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_spurious_ns.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_stub_noroot.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_stubds.rpl
- Set trust-anchor-signaling default to yes
2017-10-05 10:17:25 +00:00
val_ta_algo_dnskey_dp.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_ta_algo_dnskey.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_ta_algo_missing_dp.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_ta_algo_missing.rpl
Review for #759:
2023-07-19 15:20:44 +02:00
val_twocname.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_unalgo_anchor.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
val_unalgo_ds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_unsec_cname.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_unsecds_negcache.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_unsecds_qtypeds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_unsecds.rpl
- Qname minimisation default changed to yes.
2018-05-17 10:33:19 +00:00
val_wild_pos.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
version_bind_hide.rpl
do not allow cache snooping by default.
2008-09-01 13:48:24 +00:00
version_bind.rpl
Tests can handle multiple hosts. Tests for chaos and iterator.
2007-07-25 12:31:04 +00:00
views.rpl
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by Yuxiao Wu,
2025-10-22 10:54:57 +02:00
zonemd.example1.zone
zonemd, loop over zone and canonicalize data, test call in unit test.
2020-10-06 17:07:24 +02:00
zonemd.example2.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example3.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example4.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example5.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example6.zone
zonemd, unit test more zones.
2020-10-19 16:26:22 +02:00
zonemd.example7.zone
zonemd, fix that dnssec denial does not invalidate zone.
2020-10-21 11:51:30 +02:00
zonemd.example8.zone
zonemd, fix that dnssec denial does not invalidate zone.
2020-10-21 11:51:30 +02:00
zonemd.example9.zone
zonemd, unit tests for wrong DNSSEC signatures.
2020-10-21 13:17:42 +02:00
zonemd.example10.zone
zonemd, unit tests for wrong DNSSEC signatures.
2020-10-21 13:17:42 +02:00
zonemd.example11.zone
zonemd, unit tests for DNSSEC type bitmaps.
2020-10-21 14:23:44 +02:00
zonemd.example12.zone
zonemd, unit tests for DNSSEC type bitmaps.
2020-10-21 14:23:44 +02:00
zonemd.example13.zone
zonemd, unit tests for wrong NSEC RRSIGs.
2020-10-21 15:04:06 +02:00
zonemd.example14.zone
zonemd, unit tests for wrong NSEC RRSIGs.
2020-10-21 15:04:06 +02:00
zonemd.example15.zone
zonemd, unit tests for verifying DNSKEY with trust anchor failures.
2020-10-21 15:58:47 +02:00
zonemd.example16.zone
zonemd, fix to detect duplicate zonemd scheme and algo RRs.
2021-01-22 14:36:53 +01:00
zonemd.example17.zone
zonemd, unit test for capitalisation of owner and ns names.
2021-01-22 14:40:21 +01:00
zonemd.example_a1.zone
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
zonemd.example_a2.zone
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
zonemd.example_a3.zone
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
zonemd.example_a4.zone
zonemd, unit test, succeeds at verifying examples of zonemd draft-12.
2020-10-09 12:18:25 +02:00
zonemd.example_a5.zone
b.root renumbering (#1132)
2024-08-30 08:48:31 +02:00