feat: add full Zonemaster stack with Docker and Spanish UI
- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI) - Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend - Dockerfile.gui: Astro static build served via nginx - docker-compose.yml: backend (internal) + frontend (port 5353) - nginx.conf: root redirects to /es/, /api/ proxied to backend - zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,22 @@
|
||||
; Shared, $ORIGIN must implicit.
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2025103000 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
|
||||
@ TXT "Placeholder"
|
||||
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
; EOF
|
||||
13
zonemaster/test-zone-data/DNSSEC-TP/dnssec01/README.md
Normal file
13
zonemaster/test-zone-data/DNSSEC-TP/dnssec01/README.md
Normal file
@@ -0,0 +1,13 @@
|
||||
[This directory](.), i.e. the same directory as this README file, holds zone
|
||||
files and configuration files to implement the test zones for the scenarios
|
||||
defined in [DNSSEC01 test scenario specification].
|
||||
|
||||
For these test zones the following files are found in [This directory](.):
|
||||
* Zone files for `dnssec01.xa` and other related zones.
|
||||
* CoreDNS configuration file
|
||||
* Zone file and hint file for local root zone.
|
||||
* Output from `zonemaster-cli` on all test scenarios in
|
||||
[test-zones-output.md](test-zones-output.md).
|
||||
|
||||
[DNSSEC01 test scenario specification]: ../../../docs/public/specifications/test-zones/DNSSEC-TP/dnssec01.md
|
||||
|
||||
369
zonemaster/test-zone-data/DNSSEC-TP/dnssec01/dnssec01.cfg
Normal file
369
zonemaster/test-zone-data/DNSSEC-TP/dnssec01/dnssec01.cfg
Normal file
@@ -0,0 +1,369 @@
|
||||
# | 127.15.1.0/24 | DNSSEC01 scenarios |
|
||||
# | 127.15.1.21 | ns1.dnssec01.xa |
|
||||
# | 127.15.1.22 | ns2.dnssec01.xa |
|
||||
# | 127.15.1.31 | scenario specific parent (if any) |
|
||||
# | 127.15.1.32 | scenario specific parent (if any) |
|
||||
# | 127.15.1.41 | ns1 for scenario child |
|
||||
# | 127.15.1.42 | ns2 for chenario child |
|
||||
|
||||
## root
|
||||
.:53 {
|
||||
bind 127.15.1.27 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:27 # ns1
|
||||
bind 127.15.1.28 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:28 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/root-zone.zone .
|
||||
}
|
||||
|
||||
# Resolver using test case local root
|
||||
. {
|
||||
bind 127.15.1.53
|
||||
unbound {
|
||||
option root-hints DNSSEC-TP/dnssec01/hintfile.zone
|
||||
}
|
||||
log
|
||||
}
|
||||
|
||||
dnssec01.xa:53 { #
|
||||
bind 127.15.1.21 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:21 # ns1
|
||||
bind 127.15.1.22 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:22 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/dnssec01.xa.zone dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-DEPRECATED-1
|
||||
algo-deprecated-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-deprecated-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-DEPRECATED-3
|
||||
algo-deprecated-3.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-deprecated-3.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-RESERVED-128
|
||||
algo-reserved-128.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-reserved-128.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-RESERVED-188
|
||||
algo-reserved-188.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-reserved-188.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-RESERVED-252
|
||||
algo-reserved-252.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-reserved-252.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-UNASSIGNED-7
|
||||
algo-unassigned-7.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-unassigned-7.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-UNASSIGNED-67
|
||||
algo-unassigned-67.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-unassigned-67.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-UNASSIGNED-127
|
||||
algo-unassigned-127.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-unassigned-127.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-PRIVATE-253
|
||||
algo-private-253.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-private-253.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-PRIVATE-254
|
||||
algo-private-254.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-private-254.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-NOT-DS-0
|
||||
algo-not-ds-0.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-not-ds-0.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-OK-2
|
||||
algo-ok-2.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-ok-2.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-OK-4
|
||||
algo-ok-4.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-ok-4.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-OK-5
|
||||
algo-ok-5.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-ok-5.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ALGO-OK-6
|
||||
algo-ok-6.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone algo-ok-6.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
## MIXED-ALGO-1
|
||||
mixed-algo-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone mixed-algo-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
## SHARED-IP-1
|
||||
shared-ip-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.31 # ns1a and ns1b
|
||||
bind fda1:b2:c3:0:127:15:1:31 # ns1a and ns1b
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/shared-ip-1.dnssec01.xa.zone shared-ip-1.dnssec01.xa
|
||||
}
|
||||
child.shared-ip-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone child.shared-ip-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
## SHARED-IP-2
|
||||
shared-ip-2.dnssec01.xa:53 { #
|
||||
bind 127.15.1.31 # ns1/dns1
|
||||
bind fda1:b2:c3:0:127:15:1:31 # ns1/dns1
|
||||
bind 127.15.1.32 # ns2/dns2
|
||||
bind fda1:b2:c3:0:127:15:1:32 # ns2/dns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/shared-ip-2.dnssec01.xa.zone shared-ip-2.dnssec01.xa
|
||||
}
|
||||
child.shared-ip-2.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone child.shared-ip-2.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# NO-RESPONSE-1
|
||||
no-response-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.31 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:31 # ns1
|
||||
bind 127.15.1.32 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:32 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/no-response-1.dnssec01.xa.zone no-response-1.dnssec01.xa
|
||||
acl child.no-response-1.dnssec01.xa { #
|
||||
drop type DS
|
||||
}
|
||||
}
|
||||
child.no-response-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone child.no-response-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# NO-VALID-RESPONSE-1
|
||||
no-valid-response-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.31 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:31 # ns1
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/no-valid-response-1.dnssec01.xa.zone no-valid-response-1.dnssec01.xa
|
||||
template IN DS child.no-valid-response-1.dnssec01.xa. {
|
||||
rcode SERVFAIL
|
||||
}
|
||||
}
|
||||
no-valid-response-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.32 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:32 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/no-valid-response-1.dnssec01.xa.zone no-valid-response-1.dnssec01.xa
|
||||
template IN DS child.no-valid-response-1.dnssec01.xa. {
|
||||
rcode REFUSED
|
||||
}
|
||||
}
|
||||
child.no-valid-response-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone child.no-valid-response-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# PARENT-SERVER-NO-DS-1
|
||||
parent-server-no-ds-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.31 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:31 # ns1
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/parent-server-no-ds-1.dnssec01.xa_ns1.zone parent-server-no-ds-1.dnssec01.xa
|
||||
}
|
||||
parent-server-no-ds-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.32 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:32 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/parent-server-no-ds-1.dnssec01.xa_ns2.zone parent-server-no-ds-1.dnssec01.xa
|
||||
}
|
||||
child.parent-server-no-ds-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone child.parent-server-no-ds-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# PARENT-ZONE-NO-DS-1
|
||||
parent-zone-no-ds-1.dnssec01.xa:53 { #
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone parent-zone-no-ds-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# UNDEL-NO-UNDEL-DS-1
|
||||
undel-no-undel-ds-1.dnssec01.xa:53 { # Not delegated
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone undel-no-undel-ds-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# UNDEL-WITH-UNDEL-DS-1
|
||||
undel-with-undel-ds-1.dnssec01.xa:53 { # Not delegated, DS to be provided
|
||||
bind 127.15.1.41 # ns1
|
||||
bind fda1:b2:c3:0:127:15:1:41 # ns1
|
||||
bind 127.15.1.42 # ns2
|
||||
bind fda1:b2:c3:0:127:15:1:42 # ns2
|
||||
log
|
||||
file DNSSEC-TP/dnssec01/CHILD.dnssec01.xa.zone undel-with-undel-ds-1.dnssec01.xa
|
||||
}
|
||||
|
||||
|
||||
# ROOT-NO-UNDEL-DS-1
|
||||
#
|
||||
# Reuse the existing root zone defined above. No special configuration is required.
|
||||
|
||||
|
||||
# ROOT-WITH-UNDEL-DS-1
|
||||
#
|
||||
# Reuse the existing root zone defined above. No special configuration is required.
|
||||
# DS to be provided.
|
||||
|
||||
|
||||
|
||||
|
||||
235
zonemaster/test-zone-data/DNSSEC-TP/dnssec01/dnssec01.xa.zone
Normal file
235
zonemaster/test-zone-data/DNSSEC-TP/dnssec01/dnssec01.xa.zone
Normal file
@@ -0,0 +1,235 @@
|
||||
$ORIGIN dnssec01.xa. ; Must end with "."
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2025100800 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
|
||||
ns1 A 127.15.1.21
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:21
|
||||
ns2 A 127.15.1.22
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:22
|
||||
|
||||
$ORIGIN algo-deprecated-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 8 1 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 1
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-deprecated-3.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 3 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 3
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-reserved-128.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 128 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 128
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-reserved-188.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 188 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 188
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-reserved-252.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 252 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 252
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-unassigned-7.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 7 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 7
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-unassigned-67.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 67 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 67
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-unassigned-127.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 127 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 127
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-private-253.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 253 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 253
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-private-254.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 254 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 254
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-not-ds-0.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 0 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 0
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-ok-2.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 2 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 2
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-ok-4.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 4 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 4
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-ok-5.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 5 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 5
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN algo-ok-6.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 6 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 6
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN mixed-algo-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 1 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 1
|
||||
@ DS 42581 13 2 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 2
|
||||
@ DS 42581 13 253 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 253
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
$ORIGIN shared-ip-1.dnssec01.xa. ; Parent of test zone child.shared-ip-1.dnssec01.xa.
|
||||
@ NS ns1a
|
||||
@ NS ns1b
|
||||
ns1a A 127.15.1.31
|
||||
ns1a AAAA fda1:b2:c3:0:127:15:1:31
|
||||
ns1b A 127.15.1.31
|
||||
ns1b AAAA fda1:b2:c3:0:127:15:1:31
|
||||
|
||||
|
||||
$ORIGIN shared-ip-2.dnssec01.xa. ; Parent of test zone child.shared-ip-2.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.1.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
ns2 A 127.15.1.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
|
||||
$ORIGIN no-response-1.dnssec01.xa. ; Parent of test zone child.no-response-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.1.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
ns2 A 127.15.1.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
|
||||
$ORIGIN no-valid-response-1.dnssec01.xa. ; Parent of test zone child.no-response-response-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.1.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
ns2 A 127.15.1.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
|
||||
$ORIGIN parent-server-no-ds-1.dnssec01.xa. ; Parent of test zone child.parent-server-no-ds-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.1.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
ns2 A 127.15.1.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
|
||||
$ORIGIN parent-zone-no-ds-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
|
||||
@@ -0,0 +1,8 @@
|
||||
; Hint file for DNSSEC01 local root
|
||||
|
||||
. 3600 NS root-ns1.xa.
|
||||
. 3600 NS root-ns2.xa.
|
||||
root-ns1.xa. 3600 A 127.15.1.27
|
||||
root-ns1.xa. 3600 AAAA fda1:b2:c3::127:15:1:27
|
||||
root-ns2.xa. 3600 A 127.15.1.28
|
||||
root-ns2.xa. 3600 AAAA fda1:b2:c3::127:15:1:28
|
||||
@@ -0,0 +1,29 @@
|
||||
$ORIGIN no-response-1.dnssec01.xa.
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2025090301 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.1.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
ns2 A 127.15.1.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
$ORIGIN child.no-response-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 2 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 2
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
; EOF
|
||||
@@ -0,0 +1,29 @@
|
||||
$ORIGIN no-valid-response-1.dnssec01.xa.
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2025090300 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.1.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
ns2 A 127.15.1.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
$ORIGIN child.no-valid-response-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 2 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 2
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
; EOF
|
||||
@@ -0,0 +1,30 @@
|
||||
$ORIGIN parent-server-no-ds-1.dnssec01.xa. ; ns1
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2025090108 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
dns1 A 127.15.1.31
|
||||
dns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
dns2 A 127.15.1.32
|
||||
dns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
$ORIGIN child.parent-server-no-ds-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
; EOF
|
||||
|
||||
|
||||
@@ -0,0 +1,31 @@
|
||||
$ORIGIN parent-server-no-ds-1.dnssec01.xa. ; ns2
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2025090106 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
dns1 A 127.15.1.31
|
||||
dns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
dns2 A 127.15.1.32
|
||||
dns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
$ORIGIN child.parent-server-no-ds-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 2 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 2
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
; EOF
|
||||
|
||||
|
||||
32
zonemaster/test-zone-data/DNSSEC-TP/dnssec01/root-zone.zone
Normal file
32
zonemaster/test-zone-data/DNSSEC-TP/dnssec01/root-zone.zone
Normal file
@@ -0,0 +1,32 @@
|
||||
$ORIGIN .
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1. admin.xa. (
|
||||
2025082200 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
NS root-ns1.xa.
|
||||
NS root-ns2.xa.
|
||||
|
||||
|
||||
root-ns1.xa. A 127.15.1.27
|
||||
root-ns1.xa. AAAA fda1:b2:c3::127:15:1:27
|
||||
|
||||
root-ns2.xa. A 127.15.1.28
|
||||
root-ns2.xa. AAAA fda1:b2:c3::127:15:1:28
|
||||
|
||||
$ORIGIN dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
|
||||
ns1 A 127.15.1.21
|
||||
ns1 AAAA fda1:b2:c3::127:15:1:21
|
||||
ns2 A 127.15.1.22
|
||||
ns1 AAAA fda1:b2:c3::127:15:1:22
|
||||
|
||||
|
||||
|
||||
;EOF
|
||||
@@ -0,0 +1,29 @@
|
||||
$ORIGIN shared-ip-1.dnssec01.xa.
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2025083100 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
@ NS ns1a
|
||||
@ NS ns1b
|
||||
ns1a A 127.15.1.31
|
||||
ns1a AAAA fda1:b2:c3:0:127:15:1:31
|
||||
ns1b A 127.15.1.31
|
||||
ns1b AAAA fda1:b2:c3:0:127:15:1:31
|
||||
|
||||
$ORIGIN child.shared-ip-1.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 2 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 2
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
; EOF
|
||||
@@ -0,0 +1,29 @@
|
||||
$ORIGIN shared-ip-2.dnssec01.xa.
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2025083101 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
@ NS dns1
|
||||
@ NS dns2
|
||||
dns1 A 127.15.1.31
|
||||
dns1 AAAA fda1:b2:c3:0:127:15:1:31
|
||||
dns2 A 127.15.1.32
|
||||
dns2 AAAA fda1:b2:c3:0:127:15:1:32
|
||||
|
||||
$ORIGIN child.shared-ip-2.dnssec01.xa.
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
@ DS 42581 13 2 F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 ; 2
|
||||
ns1 A 127.15.1.41
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:1:41
|
||||
ns2 A 127.15.1.42
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
|
||||
; EOF
|
||||
@@ -0,0 +1,370 @@
|
||||
# DNSSEC01 Test scenario output
|
||||
|
||||
# Table of contents
|
||||
* [Introduction](#introduction)
|
||||
* [All message tags](#all-message-tags)
|
||||
* [All scenarios](#all-scenarios)
|
||||
* [zonemaster-cli commands and their output for each test scenario](#zonemaster-cli-commands-and-their-output-for-each-test-scenario)
|
||||
|
||||
## Introduction
|
||||
|
||||
In this file the output of running `zonemaster-cli` for every test zone is
|
||||
found. This file is created during the development of the test zones and should
|
||||
be updated as the implementation of the test case or the test scenarios or test
|
||||
zones are updated or corrected.
|
||||
|
||||
During development and any update this document serves as tracking and log tool.
|
||||
It also serves as a template for future development of test zones for
|
||||
scenarios for other test cases.
|
||||
|
||||
## All message tags
|
||||
|
||||
* DS01_DS_ALGO_2_MISSING
|
||||
* DS01_DS_ALGO_DEPRECATED
|
||||
* DS01_DS_ALGO_NOT_DS
|
||||
* DS01_DS_ALGO_OK
|
||||
* DS01_DS_ALGO_PRIVATE
|
||||
* DS01_DS_ALGO_RESERVED
|
||||
* DS01_DS_ALGO_UNASSIGNED
|
||||
* DS01_NO_RESPONSE
|
||||
* DS01_PARENT_SERVER_NO_DS
|
||||
* DS01_PARENT_ZONE_NO_DS
|
||||
* DS01_ROOT_N_NO_UNDEL_DS
|
||||
* DS01_UNDEL_N_NO_UNDEL_DS
|
||||
|
||||
|
||||
## All scenarios
|
||||
|
||||
| Scenario name | Zone name |
|
||||
|:----------------------|:-----------------------------------------|
|
||||
| ALGO-DEPRECATED-1 | algo-deprecated-1.dnssec01.xa. |
|
||||
| ALGO-DEPRECATED-3 | algo-deprecated-3.dnssec01.xa. |
|
||||
| ALGO-RESERVED-128 | algo-reserved-128.dnssec01.xa. |
|
||||
| ALGO-RESERVED-188 | algo-reserved-188.dnssec01.xa. |
|
||||
| ALGO-RESERVED-252 | algo-reserved-252.dnssec01.xa. |
|
||||
| ALGO-UNASSIGNED-7 | algo-unassigned-7.dnssec01.xa. |
|
||||
| ALGO-UNASSIGNED-67 | algo-unassigned-67.dnssec01.xa. |
|
||||
| ALGO-UNASSIGNED-127 | algo-unassigned-127.dnssec01.xa. |
|
||||
| ALGO-PRIVATE-253 | algo-private-253.dnssec01.xa. |
|
||||
| ALGO-PRIVATE-254 | algo-private-254.dnssec01.xa. |
|
||||
| ALGO-NOT-DS-0 | algo-not-ds-0.dnssec01.xa. |
|
||||
| ALGO-OK-2 | algo-ok-2.dnssec01.xa. |
|
||||
| ALGO-OK-4 | algo-ok-4.dnssec01.xa. |
|
||||
| ALGO-OK-5 | algo-ok-5.dnssec01.xa. |
|
||||
| ALGO-OK-6 | algo-ok-6.dnssec01.xa. |
|
||||
| MIXED-ALGO-1 | mixed-algo-1.dnssec01.xa. |
|
||||
| SHARED-IP-1 | child.shared-ip-1.dnssec01.xa. |
|
||||
| SHARED-IP-2 | child.shared-ip-2.dnssec01.xa. |
|
||||
| NO-RESPONSE-1 | child.no-response-1.dnssec01.xa. |
|
||||
| NO-VALID-RESPONSE-1 | child.no-valid-response-1.dnssec01.xa. |
|
||||
| PARENT-SERVER-NO-DS-1 | child.parent-server-no-ds-1.dnssec01.xa. |
|
||||
| PARENT-ZONE-NO-DS-1 | parent-zone-no-ds-1.dnssec01.xa. |
|
||||
| UNDEL-NO-UNDEL-DS-1 | undel-no-undel-ds-1.dnssec01.xa. |
|
||||
| UNDEL-WITH-UNDEL-DS-1 | undel-with-undel-ds-1.dnssec01.xa. |
|
||||
| ROOT-NO-UNDEL-DS-1 | . |
|
||||
| ROOT-WITH-UNDEL-DS-1 | . |
|
||||
|
||||
|
||||
## zonemaster-cli commands and their output for each test scenario
|
||||
|
||||
All commands are run from the same directory as this file is in. To be meaningful
|
||||
the `zonemaster-cli` command should be run with the following options:
|
||||
```
|
||||
--hints=hintfile.zone --test=dnssec01 --level=info
|
||||
```
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-DEPRECATED-1 | DS01_DS_ALGO_DEPRECATED, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-DEPRECATED-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_DEPRECATED ds_algo_descr=SHA-1; ds_algo_num=1; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-DEPRECATED-3 | DS01_DS_ALGO_DEPRECATED, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-DEPRECATED-3.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_DEPRECATED ds_algo_descr=GOST R 34.11-94; ds_algo_num=3; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-NOT-DS-0 | DS01_DS_ALGO_NOT_DS, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-NOT-DS-0.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_NOT_DS ds_algo_descr=Reserved; ds_algo_num=0; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-OK-2 | DS01_DS_ALGO_OK | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-OK-2.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-OK-4 | DS01_DS_ALGO_OK, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-OK-4.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SHA-384; ds_algo_num=4; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-OK-5 | DS01_DS_ALGO_OK, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-OK-5.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=GOST R 34.11-2012; ds_algo_num=5; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-OK-6 | DS01_DS_ALGO_OK, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-OK-6.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SM3; ds_algo_num=6; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-PRIVATE-253 | DS01_DS_ALGO_PRIVATE, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-PRIVATE-253.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_PRIVATE ds_algo_descr=Reserved for Private Use; ds_algo_num=253; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-PRIVATE-254 | DS01_DS_ALGO_PRIVATE, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-PRIVATE-254.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_PRIVATE ds_algo_descr=Reserved for Private Use; ds_algo_num=254; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-RESERVED-128 | DS01_DS_ALGO_RESERVED, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-RESERVED-128.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_RESERVED ds_algo_descr=Reserved; ds_algo_num=128; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-RESERVED-188 | DS01_DS_ALGO_RESERVED, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-RESERVED-188.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_RESERVED ds_algo_descr=Reserved; ds_algo_num=188; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-RESERVED-252 | DS01_DS_ALGO_RESERVED, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-RESERVED-252.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.04 ERROR DNSSEC01 DS01_DS_ALGO_RESERVED ds_algo_descr=Reserved; ds_algo_num=252; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.04 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-UNASSIGNED-7 | DS01_DS_ALGO_UNASSIGNED, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-UNASSIGNED-7.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_UNASSIGNED ds_algo_descr=Unassigned; ds_algo_num=7; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-UNASSIGNED-67 | DS01_DS_ALGO_UNASSIGNED, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-UNASSIGNED-67.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 ERROR DNSSEC01 DS01_DS_ALGO_UNASSIGNED ds_algo_descr=Unassigned; ds_algo_num=67; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.05 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ALGO-UNASSIGNED-127 | DS01_DS_ALGO_UNASSIGNED, DS01_DS_ALGO_2_MISSING | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-UNASSIGNED-127.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.04 ERROR DNSSEC01 DS01_DS_ALGO_UNASSIGNED ds_algo_descr=Unassigned; ds_algo_num=127; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.04 NOTICE DNSSEC01 DS01_DS_ALGO_2_MISSING keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| MIXED-ALGO-1 | DS01_DS_ALGO_DEPRECATED, DS01_DS_ALGO_PRIVATE, DS01_DS_ALGO_OK | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw MIXED-ALGO-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.04 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.04 ERROR DNSSEC01 DS01_DS_ALGO_DEPRECATED ds_algo_descr=SHA-1; ds_algo_num=1; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
0.04 ERROR DNSSEC01 DS01_DS_ALGO_PRIVATE ds_algo_descr=Reserved for Private Use; ds_algo_num=253; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| SHARED-IP-1 | DS01_DS_ALGO_OK | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.shared-ip-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.08 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=ns1a.shared-ip-1.dnssec01.xa/127.15.1.31;ns1a.shared-ip-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;ns1b.shared-ip-1.dnssec01.xa/127.15.1.31;ns1b.shared-ip-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| SHARED-IP-2 | DS01_DS_ALGO_OK | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.shared-ip-2.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.08 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=dns1.shared-ip-2.dnssec01.xa/127.15.1.31;dns1.shared-ip-2.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;dns2.shared-ip-2.dnssec01.xa/127.15.1.32;dns2.shared-ip-2.dnssec01.xa/fda1:b2:c3:0:127:15:1:32;ns1.shared-ip-2.dnssec01.xa/127.15.1.31;ns1.shared-ip-2.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;ns2.shared-ip-2.dnssec01.xa/127.15.1.32;ns2.shared-ip-2.dnssec01.xa/fda1:b2:c3:0:127:15:1:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| NO-RESPONSE-1 | DS01_NO_RESPONSE | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.no-response-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
40.11 WARNING DNSSEC01 DS01_NO_RESPONSE ns_list=ns1.no-response-1.dnssec01.xa/127.15.1.31;ns1.no-response-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;ns2.no-response-1.dnssec01.xa/127.15.1.32;ns2.no-response-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| NO-VALID-RESPONSE-1 | DS01_NO_RESPONSE | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.no-valid-response-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.08 WARNING DNSSEC01 DS01_NO_RESPONSE ns_list=ns1.no-valid-response-1.dnssec01.xa/127.15.1.31;ns1.no-valid-response-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;ns2.no-valid-response-1.dnssec01.xa/127.15.1.32;ns2.no-valid-response-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| PARENT-SERVER-NO-DS-1 | DS01_PARENT_SERVER_NO_DS, DS01_DS_ALGO_OK | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.parent-server-no-ds-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.08 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=ns2.parent-server-no-ds-1.dnssec01.xa/127.15.1.32;ns2.parent-server-no-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:32
|
||||
0.08 ERROR DNSSEC01 DS01_PARENT_SERVER_NO_DS ns_list=ns1.parent-server-no-ds-1.dnssec01.xa/127.15.1.31;ns1.parent-server-no-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| PARENT-ZONE-NO-DS-1 | DS01_PARENT_ZONE_NO_DS | 2) |
|
||||
```
|
||||
$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw PARENT-ZONE-NO-DS-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.05 NOTICE DNSSEC01 DS01_PARENT_ZONE_NO_DS ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| UNDEL-NO-UNDEL-DS-1 | DS01_UNDEL_N_NO_UNDEL_DS | 2) |
|
||||
|
||||
* Undelegated data:
|
||||
* ns1.undel-no-undel-ds-1.dnssec01.xa/127.15.1.41
|
||||
* ns1.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:41
|
||||
* ns2.undel-no-undel-ds-1.dnssec01.xa/127.15.1.42
|
||||
* ns2.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:42
|
||||
```
|
||||
$ zonemaster-cli --show-testcase --level INFO --test dnssec01 --hints hintfile.zone --raw --ns=ns1.undel-no-undel-ds-1.dnssec01.xa/127.15.1.41 --ns=ns1.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:127.15.1.41 --ns=ns1.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:41 --ns=ns2.undel-no-undel-ds-1.dnssec01.xa/127.15.1.42 --ns=ns2.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:42 undel-no-undel-ds-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.01 INFO DNSSEC01 DS01_UNDEL_N_NO_UNDEL_DS
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| UNDEL-WITH-UNDEL-DS-1 | DS01_DS_ALGO_OK | 2) |
|
||||
|
||||
* Undelegated data:
|
||||
* ns1.undel-with-undel-ds-1.dnssec01.xa/127.15.1.41
|
||||
* ns1.undel-with-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:41
|
||||
* ns2.undel-with-undel-ds-1.dnssec01.xa/127.15.1.42
|
||||
* ns2.undel-with-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:42
|
||||
|
||||
* Undelegated DS:
|
||||
* 42581,13,2,F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9
|
||||
|
||||
```
|
||||
$ zonemaster-cli --show-testcase --level INFO --test dnssec01 --hints hintfile.zone --raw --ns=ns1.undel-with-undel-ds-1.dnssec01.xa/127.15.1.41 --ns=ns1.undel-with-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:41 --ns=ns2.undel-with-undel-ds-1.dnssec01.xa/127.15.1.42 --ns=ns2.undel-with-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:42 --ds=42581,13,2,F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 undel-with-undel-ds-1.dnssec01.xa
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.01 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=-
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ROOT-NO-UNDEL-DS-1 | DS01_ROOT_N_NO_UNDEL_DS | 2) |
|
||||
```
|
||||
$ zonemaster-cli --show-testcase --level INFO --test dnssec01 --hints hintfile.zone --raw .
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.00 INFO DNSSEC01 DS01_ROOT_N_NO_UNDEL_DS
|
||||
```
|
||||
--> OK
|
||||
|
||||
| Scenario name | Mandatory tags | Forbidden tags |
|
||||
|:----------------------|:---------------------------------------------------------------|:---------------|
|
||||
| ROOT-WITH-UNDEL-DS-1 | DS01_DS_ALGO_OK | 2) |
|
||||
|
||||
* Undelegated DS:
|
||||
* 42581,13,2,F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9
|
||||
```
|
||||
$ zonemaster-cli --show-testcase --level INFO --test dnssec01 --hints hintfile.zone --raw . --ds=42581,13,2,F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9
|
||||
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
|
||||
0.00 INFO DNSSEC01 DS01_DS_ALGO_OK ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=-
|
||||
```
|
||||
--> OK
|
||||
Reference in New Issue
Block a user