Add DNSSEC wilcard test

diff --git a/regression-tests.recursor-dnssec/basicDNSSEC.py b/regression-tests.recursor-dnssec/basicDNSSEC.py
index b58ecc8da7b942bb9b8cd707c1b4e54611389e37..8a958103320aa498ffaf77ffaf5b36d452ea74c7 100644 (file)
--- a/regression-tests.recursor-dnssec/basicDNSSEC.py
+++ b/regression-tests.recursor-dnssec/basicDNSSEC.py
@@ -81,3 +81,11 @@ class BasicDNSSEC(RecursorTest):
 
         self.assertRcodeEqual(res, dns.rcode.NXDOMAIN)
         self.assertMessageIsAuthenticated(res)
+
+    def testSecureWildcardAnswer(self):
+        res = self.sendQuery('something.wildcard.secure.example.', 'A')
+        expected = dns.rrset.from_text('something.wildcard.secure.example.', 0, dns.rdataclass.IN, 'A', '192.0.2.10')
+
+        self.assertRcodeEqual(res, dns.rcode.NOERROR)
+        self.assertMatchingRRSIGInAnswer(res, expected)
+        self.assertMessageIsAuthenticated(res)

diff --git a/regression-tests.recursor-dnssec/recursortests.py b/regression-tests.recursor-dnssec/recursortests.py
index 8875190555250b15fea1ed6921c1403f61160455..ffbdd180f308d2714266fc09bbf5e00e752ef32f 100644 (file)
--- a/regression-tests.recursor-dnssec/recursortests.py
+++ b/regression-tests.recursor-dnssec/recursortests.py
@@ -98,6 +98,8 @@ ns.secure.example.       3600 IN A    {prefix}.9
 host1.secure.example.    3600 IN A    192.0.2.2
 
 host1.sub.secure.example. 3600 IN A    192.0.2.11
+
+*.wildcard.secure.example.    3600 IN A    192.0.2.10
         """,
         'bogus.example': """
 bogus.example.           3600 IN SOA  {soa}