]> granicus.if.org Git - pdns/commitdiff
auth: add test to make sure NSEC(3) generation is case insensitive
authorKees Monshouwer <mind04@monshouwer.org>
Wed, 3 May 2017 19:26:30 +0000 (21:26 +0200)
committermind04 <mind04@monshouwer.org>
Wed, 3 May 2017 19:32:43 +0000 (21:32 +0200)
test result before fix (auth-4.0.3):

--- ./tests/nsecx-upcase/expected_result        2017-05-03 21:17:26.000000000 +0200
+++ ./tests/nsecx-upcase/real_result    2017-05-03 21:29:10.231994921 +0200
@@ -2,8 +2,10 @@
 0      Z1234567890.wtest.com.  IN      RRSIG   3600    CNAME 13 2 3600 [expiry] [inception] [keytag] wtest.com. ...
 0      server1.wtest.com.      IN      A       3600    1.2.3.4
 0      server1.wtest.com.      IN      RRSIG   3600    A 13 3 3600 [expiry] [inception] [keytag] wtest.com. ...
-1      a.something.wtest.com.  IN      NSEC    86400   wtest.com. A RRSIG NSEC
-1      a.something.wtest.com.  IN      RRSIG   86400   NSEC 13 4 86400 [expiry] [inception] [keytag] wtest.com. ...
+1      *.wtest.com.    IN      NSEC    86400   e.wtest.com. CNAME RRSIG NSEC
+1      *.wtest.com.    IN      RRSIG   86400   NSEC 13 2 86400 [expiry] [inception] [keytag] wtest.com. ...
 2      .       IN      OPT     32768
 Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
 Reply to question for qname='Z1234567890.wtest.com.', qtype=A
./tests/nsecx-upcase/unbound-host.out:Z1234567890.wtest.com is an alias for server1.wtest.com. (BOGUS (security failure))
./tests/nsecx-upcase/unbound-host.out:server1.wtest.com has address 1.2.3.4 (BOGUS (security failure))

regression-tests/tests/nsecx-upcase/command [new file with mode: 0755]
regression-tests/tests/nsecx-upcase/description [new file with mode: 0644]
regression-tests/tests/nsecx-upcase/expected_result [new file with mode: 0644]
regression-tests/tests/nsecx-upcase/expected_result.narrow [new file with mode: 0644]
regression-tests/tests/nsecx-upcase/expected_result.nsec3 [new file with mode: 0644]
regression-tests/tests/nsecx-upcase/skip.nodnssec [new file with mode: 0644]

diff --git a/regression-tests/tests/nsecx-upcase/command b/regression-tests/tests/nsecx-upcase/command
new file mode 100755 (executable)
index 0000000..7dd8eeb
--- /dev/null
@@ -0,0 +1,2 @@
+#!/bin/sh
+cleandig Z1234567890.wtest.com A dnssec
diff --git a/regression-tests/tests/nsecx-upcase/description b/regression-tests/tests/nsecx-upcase/description
new file mode 100644 (file)
index 0000000..436cb7f
--- /dev/null
@@ -0,0 +1 @@
+Make sure NSEC(3) generation is case insensitive.
diff --git a/regression-tests/tests/nsecx-upcase/expected_result b/regression-tests/tests/nsecx-upcase/expected_result
new file mode 100644 (file)
index 0000000..c75115c
--- /dev/null
@@ -0,0 +1,9 @@
+0      Z1234567890.wtest.com.  IN      CNAME   3600    server1.wtest.com.
+0      Z1234567890.wtest.com.  IN      RRSIG   3600    CNAME 13 2 3600 [expiry] [inception] [keytag] wtest.com. ...
+0      server1.wtest.com.      IN      A       3600    1.2.3.4
+0      server1.wtest.com.      IN      RRSIG   3600    A 13 3 3600 [expiry] [inception] [keytag] wtest.com. ...
+1      a.something.wtest.com.  IN      NSEC    86400   wtest.com. A RRSIG NSEC
+1      a.something.wtest.com.  IN      RRSIG   86400   NSEC 13 4 86400 [expiry] [inception] [keytag] wtest.com. ...
+2      .       IN      OPT     32768   
+Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='Z1234567890.wtest.com.', qtype=A
diff --git a/regression-tests/tests/nsecx-upcase/expected_result.narrow b/regression-tests/tests/nsecx-upcase/expected_result.narrow
new file mode 100644 (file)
index 0000000..4ad19cd
--- /dev/null
@@ -0,0 +1,9 @@
+0      Z1234567890.wtest.com.  IN      CNAME   3600    server1.wtest.com.
+0      Z1234567890.wtest.com.  IN      RRSIG   3600    CNAME 13 2 3600 [expiry] [inception] [keytag] wtest.com. ...
+0      server1.wtest.com.      IN      A       3600    1.2.3.4
+0      server1.wtest.com.      IN      RRSIG   3600    A 13 3 3600 [expiry] [inception] [keytag] wtest.com. ...
+1      pv38thf7bl9rb2o5cf77jkuehfupln6u.wtest.com.     IN      NSEC3   86400   1 [flags] 1 abcd PV38THF7BL9RB2O5CF77JKUEHFUPLN70
+1      pv38thf7bl9rb2o5cf77jkuehfupln6u.wtest.com.     IN      RRSIG   86400   NSEC3 13 3 86400 [expiry] [inception] [keytag] wtest.com. ...
+2      .       IN      OPT     32768   
+Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='Z1234567890.wtest.com.', qtype=A
diff --git a/regression-tests/tests/nsecx-upcase/expected_result.nsec3 b/regression-tests/tests/nsecx-upcase/expected_result.nsec3
new file mode 100644 (file)
index 0000000..13894b5
--- /dev/null
@@ -0,0 +1,9 @@
+0      Z1234567890.wtest.com.  IN      CNAME   3600    server1.wtest.com.
+0      Z1234567890.wtest.com.  IN      RRSIG   3600    CNAME 13 2 3600 [expiry] [inception] [keytag] wtest.com. ...
+0      server1.wtest.com.      IN      A       3600    1.2.3.4
+0      server1.wtest.com.      IN      RRSIG   3600    A 13 3 3600 [expiry] [inception] [keytag] wtest.com. ...
+1      pd15qdsjjbfosu5fg2oqrnlb8r8oifl6.wtest.com.     IN      NSEC3   86400   1 [flags] 1 abcd SHEGK154N8362AG22AR9VDDRF3127M6I A RRSIG
+1      pd15qdsjjbfosu5fg2oqrnlb8r8oifl6.wtest.com.     IN      RRSIG   86400   NSEC3 13 3 86400 [expiry] [inception] [keytag] wtest.com. ...
+2      .       IN      OPT     32768   
+Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='Z1234567890.wtest.com.', qtype=A
diff --git a/regression-tests/tests/nsecx-upcase/skip.nodnssec b/regression-tests/tests/nsecx-upcase/skip.nodnssec
new file mode 100644 (file)
index 0000000..e69de29