auth: add a test to make sure we lookup DS in the right zone

diff --git a/regression-tests/tests/ds-at-parent/command b/regression-tests/tests/ds-at-parent/command
new file mode 100755 (executable)
index 0000000..e86c9af
--- /dev/null
+++ b/regression-tests/tests/ds-at-parent/command
@@ -0,0 +1,2 @@
+#!/bin/sh
+cleandig something.secure-delegated.dnssec-parent.com DS

diff --git a/regression-tests/tests/ds-at-parent/description b/regression-tests/tests/ds-at-parent/description
new file mode 100644 (file)
index 0000000..bafcc9b
--- /dev/null
+++ b/regression-tests/tests/ds-at-parent/description
@@ -0,0 +1,2 @@
+This test tries to resolve a DS question for a name one label below apex.
+It was written specifically to verify that we look for DS in the right zone.

diff --git a/regression-tests/tests/ds-at-parent/expected_result b/regression-tests/tests/ds-at-parent/expected_result
new file mode 100644 (file)
index 0000000..97172cc
--- /dev/null
+++ b/regression-tests/tests/ds-at-parent/expected_result
@@ -0,0 +1,3 @@
+1      secure-delegated.dnssec-parent.com.     IN      SOA     3600    ns1.secure-delegated.dnssec-parent.com. ahu.example.com. 2005092501 28800 7200 604800 86400
+Rcode: 3 (Non-Existent domain), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
+Reply to question for qname='something.secure-delegated.dnssec-parent.com.', qtype=DS