CloudHost/zonemaster.es
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add full Zonemaster stack with Docker and Spanish UI

Browse Source 
- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI)
- Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend
- Dockerfile.gui: Astro static build served via nginx
- docker-compose.yml: backend (internal) + frontend (port 5353)
- nginx.conf: root redirects to /es/, /api/ proxied to backend
- zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Malin
2026-04-21 08:19:24 +02:00
commit 8d4eaa1489
1567 changed files with 204155 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
zonemaster/test-zone-data/DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone Normal file
View File

@@ -0,0 +1,17 @@
; Shared, $ORIGIN must implicit.
$TTL 3600
@ SOA ns1.child.dnssec05.xa. admin. (
2025071603 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
@ TXT "Placeholder"
; EOF

13
zonemaster/test-zone-data/DNSSEC-TP/dnssec05/README.md Normal file
View File

@@ -0,0 +1,13 @@
[This directory](.), i.e. the same directory as this README file, holds zone
files and configuration files to implement the test zones for the scenarios
defined in [DNSSEC05 test scenario specification].
For these test zones the following files are found in [This directory](.):
* Zone files for `dnssec05.xa` and other related zones.
* CoreDNS configuration file
* Zone file and hint file for local root zone.
* Output from `zonemaster-cli` on all test scenarios in
[test-zones-output.md](test-zones-output.md).
[DNSSEC05 test scenario specification]: ../../../docs/public/specifications/test-zones/DNSSEC-TP/dnssec05.md

535
zonemaster/test-zone-data/DNSSEC-TP/dnssec05/dnssec05.cfg Normal file
View File

@@ -0,0 +1,535 @@
## root
.:53 {
bind 127.15.5.27 # ns1
bind fda1:b2:c3:0:127:15:5:27 # ns1
bind 127.15.5.28 # ns2
bind fda1:b2:c3:0:127:15:5:28 # ns2
log
file DNSSEC-TP/dnssec05/root-zone.zone .
}
# Resolver using test case local root
. {
bind 127.15.5.53
unbound {
option root-hints DNSSEC-TP/dnssec05/hintfile.zone
}
log
}
dnssec05.xa:53 { #
bind 127.15.5.21 # ns1
bind fda1:b2:c3:0:127:15:5:21 # ns1
bind 127.15.5.22 # ns2
bind fda1:b2:c3:0:127:15:5:22 # ns2
log
file DNSSEC-TP/dnssec05/dnssec05.xa.zone dnssec05.xa
}
# ALGO-DEPRECATED-1
algo-deprecated-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-1.dnssec05.xa
template IN DNSKEY algo-deprecated-1.dnssec05.xa. {
answer "algo-deprecated-1.dnssec05.xa. 3600 IN DNSKEY 257 3 1 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-3
algo-deprecated-3.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-3.dnssec05.xa
template IN DNSKEY algo-deprecated-3.dnssec05.xa. {
answer "algo-deprecated-3.dnssec05.xa. 3600 IN DNSKEY 257 3 3 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-5
algo-deprecated-5.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-5.dnssec05.xa
template IN DNSKEY algo-deprecated-5.dnssec05.xa. {
answer "algo-deprecated-5.dnssec05.xa. 3600 IN DNSKEY 257 3 5 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-6
algo-deprecated-6.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-6.dnssec05.xa
template IN DNSKEY algo-deprecated-6.dnssec05.xa. {
answer "algo-deprecated-6.dnssec05.xa. 3600 IN DNSKEY 257 3 6 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-7
algo-deprecated-7.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-7.dnssec05.xa
template IN DNSKEY algo-deprecated-7.dnssec05.xa. {
answer "algo-deprecated-7.dnssec05.xa. 3600 IN DNSKEY 257 3 7 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-12
algo-deprecated-12.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-12.dnssec05.xa
template IN DNSKEY algo-deprecated-12.dnssec05.xa. {
answer "algo-deprecated-12.dnssec05.xa. 3600 IN DNSKEY 257 3 12 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-4
algo-reserved-4.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-4.dnssec05.xa
template IN DNSKEY algo-reserved-4.dnssec05.xa. {
answer "algo-reserved-4.dnssec05.xa. 3600 IN DNSKEY 257 3 4 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-9
algo-reserved-9.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-9.dnssec05.xa
template IN DNSKEY algo-reserved-9.dnssec05.xa. {
answer "algo-reserved-9.dnssec05.xa. 3600 IN DNSKEY 257 3 9 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-11
algo-reserved-11.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-11.dnssec05.xa
template IN DNSKEY algo-reserved-11.dnssec05.xa. {
answer "algo-reserved-11.dnssec05.xa. 3600 IN DNSKEY 257 3 11 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-123
algo-reserved-123.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-123.dnssec05.xa
template IN DNSKEY algo-reserved-123.dnssec05.xa. {
answer "algo-reserved-123.dnssec05.xa. 3600 IN DNSKEY 257 3 123 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-251
algo-reserved-251.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-251.dnssec05.xa
template IN DNSKEY algo-reserved-251.dnssec05.xa. {
answer "algo-reserved-251.dnssec05.xa. 3600 IN DNSKEY 257 3 251 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-255
algo-reserved-255.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-255.dnssec05.xa
template IN DNSKEY algo-reserved-255.dnssec05.xa. {
answer "algo-reserved-255.dnssec05.xa. 3600 IN DNSKEY 257 3 255 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-UNASSIGNED-20
algo-unassigned-20.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-unassigned-20.dnssec05.xa
template IN DNSKEY algo-unassigned-20.dnssec05.xa. {
answer "algo-unassigned-20.dnssec05.xa. 3600 IN DNSKEY 257 3 20 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-UNASSIGNED-122
algo-unassigned-122.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-unassigned-122.dnssec05.xa
template IN DNSKEY algo-unassigned-122.dnssec05.xa. {
answer "algo-unassigned-122.dnssec05.xa. 3600 IN DNSKEY 257 3 122 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-PRIVATE-253
algo-private-253.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-private-253.dnssec05.xa
template IN DNSKEY algo-private-253.dnssec05.xa. {
answer "algo-private-253.dnssec05.xa. 3600 IN DNSKEY 257 3 253 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-PRIVATE-254
algo-private-254.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-private-254.dnssec05.xa
template IN DNSKEY algo-private-254.dnssec05.xa. {
answer "algo-private-254.dnssec05.xa. 3600 IN DNSKEY 257 3 254 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-NOT-ZONE-SIGN-0
algo-not-zone-sign-0.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-not-zone-sign-0.dnssec05.xa
template IN DNSKEY algo-not-zone-sign-0.dnssec05.xa. {
answer "algo-not-zone-sign-0.dnssec05.xa. 3600 IN DNSKEY 257 3 0 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-NOT-ZONE-SIGN-2
algo-not-zone-sign-2.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-not-zone-sign-2.dnssec05.xa
template IN DNSKEY algo-not-zone-sign-2.dnssec05.xa. {
answer "algo-not-zone-sign-2.dnssec05.xa. 3600 IN DNSKEY 257 3 2 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-NOT-ZONE-SIGN-252
algo-not-zone-sign-252.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-not-zone-sign-252.dnssec05.xa
template IN DNSKEY algo-not-zone-sign-252.dnssec05.xa. {
answer "algo-not-zone-sign-252.dnssec05.xa. 3600 IN DNSKEY 257 3 252 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-NOT-RECOMMENDED-10
algo-not-recommended-10.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-not-recommended-10.dnssec05.xa
template IN DNSKEY algo-not-recommended-10.dnssec05.xa. {
answer "algo-not-recommended-10.dnssec05.xa. 3600 IN DNSKEY 257 3 10 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-8
algo-ok-8.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-8.dnssec05.xa
template IN DNSKEY algo-ok-8.dnssec05.xa. {
answer "algo-ok-8.dnssec05.xa. 3600 IN DNSKEY 257 3 8 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-13
algo-ok-13.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-13.dnssec05.xa
template IN DNSKEY algo-ok-13.dnssec05.xa. {
answer "algo-ok-13.dnssec05.xa. 3600 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-14
algo-ok-14.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-14.dnssec05.xa
template IN DNSKEY algo-ok-14.dnssec05.xa. {
answer "algo-ok-14.dnssec05.xa. 3600 IN DNSKEY 257 3 14 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-15
algo-ok-15.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-15.dnssec05.xa
template IN DNSKEY algo-ok-15.dnssec05.xa. {
answer "algo-ok-15.dnssec05.xa. 3600 IN DNSKEY 257 3 15 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-16
algo-ok-16.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-16.dnssec05.xa
template IN DNSKEY algo-ok-16.dnssec05.xa. {
answer "algo-ok-16.dnssec05.xa. 3600 IN DNSKEY 257 3 16 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-17
algo-ok-17.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-17.dnssec05.xa
template IN DNSKEY algo-ok-17.dnssec05.xa. {
answer "algo-ok-17.dnssec05.xa. 3600 IN DNSKEY 257 3 17 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-23
algo-ok-23.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-23.dnssec05.xa
template IN DNSKEY algo-ok-23.dnssec05.xa. {
answer "algo-ok-23.dnssec05.xa. 3600 IN DNSKEY 257 3 23 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
## MIXED-ALGO-1
mixed-algo-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone mixed-algo-1.dnssec05.xa
template IN DNSKEY mixed-algo-1.dnssec05.xa. {
answer "mixed-algo-1.dnssec05.xa. 3600 IN DNSKEY 257 3 7 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "mixed-algo-1.dnssec05.xa. 3600 IN DNSKEY 257 3 10 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "mixed-algo-1.dnssec05.xa. 3600 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### NO-RESPONSE-1
no-response-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone no-response-1.dnssec05.xa
acl no-response-1.dnssec05.xa { #
drop type DNSKEY
}
}
no-response-1.dnssec05.xa:53 { #
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone no-response-1.dnssec05.xa
header {
response clear aa
}
}
### NO-RESPONSE-2
no-response-2.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone no-response-2.dnssec05.xa
template IN DNSKEY no-response-2.dnssec05.xa. {
rcode SERVFAIL
}
}
no-response-2.dnssec05.xa:53 { #
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone no-response-2.dnssec05.xa
template IN DNSKEY no-response-2.dnssec05.xa. {
rcode REFUSED
}
}
### SERVER-NO-DNSSEC-1
server-no-dnssec-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone server-no-dnssec-1.dnssec05.xa
}
server-no-dnssec-1.dnssec05.xa:53 { #
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone server-no-dnssec-1.dnssec05.xa
template IN DNSKEY server-no-dnssec-1.dnssec05.xa. {
answer "server-no-dnssec-1.dnssec05.xa. 3600 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### SHARED-IP-1
shared-ip-1.dnssec05.xa:53 { #
bind 127.15.5.31 # ns1a and ns1b
log
file DNSSEC-TP/dnssec05/shared-ip-1.dnssec05.xa.zone shared-ip-1.dnssec05.xa
template IN DNSKEY shared-ip-1.dnssec05.xa. {
answer "shared-ip-1.dnssec05.xa. 3600 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ZONE-NO-DNSSEC-1
zone-no-dnssec-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone zone-no-dnssec-1.dnssec05.xa
}

159
zonemaster/test-zone-data/DNSSEC-TP/dnssec05/dnssec05.xa.zone Normal file
View File

@@ -0,0 +1,159 @@
$ORIGIN dnssec05.xa. ; Must end with "."
$TTL 3600
@ SOA ns1 admin. (
2025102900 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
@ NS ns1
@ NS ns2
ns1 A 127.15.5.21
ns1 AAAA fda1:b2:c3:0:127:15:5:21
ns2 A 127.15.5.22
ns2 AAAA fda1:b2:c3:0:127:15:5:22
; For hosting child zones
ns1.child A 127.15.5.23
ns1.child AAAA fda1:b2:c3:0:127:15:5:23
ns2.child A 127.15.5.24
ns2.child AAAA fda1:b2:c3:0:127:15:5:24
$ORIGIN algo-deprecated-1.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-deprecated-3.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-deprecated-5.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-deprecated-6.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-deprecated-7.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-deprecated-12.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-reserved-4.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-reserved-9.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-reserved-11.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-reserved-123.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-reserved-251.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-reserved-255.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-unassigned-20.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-unassigned-122.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-private-253.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-private-254.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-not-zone-sign-0.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-not-zone-sign-2.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-not-zone-sign-252.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-not-recommended-10.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-ok-8.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-ok-13.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-ok-14.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-ok-15.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-ok-16.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-ok-17.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN algo-ok-23.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN mixed-algo-1.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN no-response-1.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN no-response-2.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN server-no-dnssec-1.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.
$ORIGIN shared-ip-1.dnssec05.xa.
@ NS ns1a
@ NS ns1b
ns1a A 127.15.5.31
ns1b A 127.15.5.31
$ORIGIN zone-no-dnssec-1.dnssec05.xa.
@ NS ns1.child.dnssec05.xa.
@ NS ns2.child.dnssec05.xa.

8
zonemaster/test-zone-data/DNSSEC-TP/dnssec05/hintfile.zone Normal file
View File

@@ -0,0 +1,8 @@
; Hint file for DNSSEC05 local root
. 3600 NS root-ns1.xa.
. 3600 NS root-ns2.xa.
root-ns1.xa. 3600 A 127.15.5.27
root-ns1.xa. 3600 AAAA fda1:b2:c3::127:15:5:27
root-ns2.xa. 3600 A 127.15.5.28
root-ns2.xa. 3600 AAAA fda1:b2:c3::127:15:5:28

32
zonemaster/test-zone-data/DNSSEC-TP/dnssec05/root-zone.zone Normal file
View File

@@ -0,0 +1,32 @@
$ORIGIN .
$TTL 3600
@ SOA ns1. admin.xa. (
2025071600 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS root-ns1.xa.
NS root-ns2.xa.
root-ns1.xa. A 127.15.5.27
root-ns1.xa. AAAA fda1:b2:c3::127:15:5:27
root-ns2.xa. A 127.15.5.28
root-ns2.xa. AAAA fda1:b2:c3::127:15:5:28
$ORIGIN dnssec05.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.5.21
ns1 AAAA fda1:b2:c3::127:15:5:21
ns2 A 127.15.5.22
ns1 AAAA fda1:b2:c3::127:15:5:22
;EOF

19
zonemaster/test-zone-data/DNSSEC-TP/dnssec05/shared-ip-1.dnssec05.xa.zone Normal file
View File

@@ -0,0 +1,19 @@
$ORIGIN shared-ip-1.dnssec05.xa.
$TTL 3600
@ SOA ns1a admin. (
2025071801 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
@ NS ns1a
@ NS ns1b
@ TXT "Placeholder"
ns1a A 127.15.5.31
ns1b A 127.15.5.31
; EOF

417
zonemaster/test-zone-data/DNSSEC-TP/dnssec05/test-zones-output.md Normal file
View File

@@ -0,0 +1,417 @@
# DNSSEC05 Test scenario output
# Table of contents
* [Introduction](#introduction)
* [All message tags](#all-message-tags)
* [All scenarios](#all-scenarios)
* [zonemaster-cli commands and their output for each test scenario](#zonemaster-cli-commands-and-their-output-for-each-test-scenario)
## Introduction
In this file the output of running `zonemaster-cli` for every test zone is
found. This file is created during the development of the test zones and should
be updated as the implementation of the test case or the test scenarios or test
zones are updated or corrected.
During development and any update this document serves as tracking and log tool.
It also serves as a template for future development of test zones for
scenarios for other test cases.
## All message tags
* DS05_ALGO_DEPRECATED
* DS05_ALGO_NOT_RECOMMENDED
* DS05_ALGO_NOT_ZONE_SIGN
* DS05_ALGO_OK
* DS05_ALGO_PRIVATE
* DS05_ALGO_RESERVED
* DS05_ALGO_UNASSIGNED
* DS05_NO_RESPONSE
* DS05_SERVER_NO_DNSSEC
* DS05_ZONE_NO_DNSSEC
## All scenarios
| Scenario name | Zone name |
|:------------------------|:-------------------------------------------------------|
| ALGO-DEPRECATED-1 | algo-deprecated-1.dnssec05.xa. |
| ALGO-DEPRECATED-3 | algo-deprecated-3.dnssec05.xa. |
| ALGO-DEPRECATED-5 | algo-deprecated-5.dnssec05.xa. |
| ALGO-DEPRECATED-6 | algo-deprecated-6.dnssec05.xa. |
| ALGO-DEPRECATED-7 | algo-deprecated-7.dnssec05.xa. |
| ALGO-DEPRECATED-12 | algo-deprecated-12.dnssec05.xa. |
| ALGO-RESERVED-4 | algo-reserved-4.dnssec05.xa. |
| ALGO-RESERVED-9 | algo-reserved-9.dnssec05.xa. |
| ALGO-RESERVED-11 | algo-reserved-11.dnssec05.xa. |
| ALGO-RESERVED-123 | algo-reserved-123.dnssec05.xa. |
| ALGO-RESERVED-251 | algo-reserved-251.dnssec05.xa. |
| ALGO-RESERVED-255 | algo-reserved-255.dnssec05.xa. |
| ALGO-UNASSIGNED-20 | algo-unassigned-17.dnssec05.xa. |
| ALGO-UNASSIGNED-122 | algo-unassigned-122.dnssec05.xa. |
| ALGO-PRIVATE-253 | algo-private-253.dnssec05.xa. |
| ALGO-PRIVATE-254 | algo-private-254.dnssec05.xa. |
| ALGO-NOT-ZONE-SIGN-0 | algo-not-zone-sign-0.dnssec05.xa. |
| ALGO-NOT-ZONE-SIGN-2 | algo-not-zone-sign-2.dnssec05.xa. |
| ALGO-NOT-ZONE-SIGN-252 | algo-not-zone-sign-252.dnssec05.xa. |
| ALGO-NOT-RECOMMENDED-10 | algo-not-recommended-10.dnssec05.xa. |
| ALGO-OK-8 | algo-ok-8.dnssec05.xa. |
| ALGO-OK-13 | algo-ok-13.dnssec05.xa. |
| ALGO-OK-14 | algo-ok-14.dnssec05.xa. |
| ALGO-OK-15 | algo-ok-15.dnssec05.xa. |
| ALGO-OK-16 | algo-ok-16.dnssec05.xa. |
| ALGO-OK-17 | algorithm-ok-17.dnssec05.xa. |
| ALGO-OK-23 | algorithm-ok-23.dnssec05.xa."mixed-algo-1.dnssec05.xa. |
| NO-RESPONSE-1 | no-response-1.dnssec05.xa. |
| NO-RESPONSE-2 | no-response-2.dnssec05.xa. |
| SERVER-NO-DNSSEC-1 | server-no-dnssec-1.dnssec05.xa. |
| SHARED-IP-1 | shared-ip-1.dnssec05.xa. |
| ZONE-NO-DNSSEC-1 | zone-no-dnssec-1.dnssec05.xa. |
## zonemaster-cli commands and their output for each test scenario
All commands are run from the same directory as this file is in. To be meaningful
the `zonemaster-cli` command should be run with the following options:
```
--hints=hintfile.zone --test=dnssec05 --level=info
```
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-DEPRECATED-1 | DS05_ALGO_DEPRECATED | 2) |
* (2) All tags except for those specified as "Mandatory message tags"
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-1.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_DEPRECATED algo_descr=RSA/MD5; algo_mnemo=RSAMD5; algo_num=1; keytag=13008; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-DEPRECATED-3 | DS05_ALGO_DEPRECATED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-3.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_DEPRECATED algo_descr=DSA/SHA1; algo_mnemo=DSA; algo_num=3; keytag=51288; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-DEPRECATED-5 | DS05_ALGO_DEPRECATED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-5.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_DEPRECATED algo_descr=RSA/SHA1; algo_mnemo=RSASHA1; algo_num=5; keytag=51290; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-DEPRECATED-6 | DS05_ALGO_DEPRECATED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-6.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_DEPRECATED algo_descr=DSA-NSEC3-SHA1; algo_mnemo=DSA-NSEC3-SHA1; algo_num=6; keytag=51291; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-DEPRECATED-7 | DS05_ALGO_DEPRECATED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-7.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_DEPRECATED algo_descr=RSASHA1-NSEC3-SHA1; algo_mnemo=RSASHA1-NSEC3-SHA1; algo_num=7; keytag=51292; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-DEPRECATED-12 | DS05_ALGO_DEPRECATED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-12.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_DEPRECATED algo_descr=GOST R 34.10-2001; algo_mnemo=ECC-GOST; algo_num=12; keytag=51297; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-NOT-RECOMMENDED-10 | DS05_ALGO_NOT_RECOMMENDED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-NOT-RECOMMENDED-10.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 WARNING DNSSEC05 DS05_ALGO_NOT_RECOMMENDED algo_descr=RSA/SHA-512; algo_mnemo=RSASHA512; algo_num=10; keytag=51295; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-NOT-ZONE-SIGN-0 | DS05_ALGO_NOT_ZONE_SIGN | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-NOT-ZONE-SIGN-0.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_NOT_ZONE_SIGN algo_descr=Delete DS; algo_mnemo=DELETE; algo_num=0; keytag=51285; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-NOT-ZONE-SIGN-2 | DS05_ALGO_NOT_ZONE_SIGN | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-NOT-ZONE-SIGN-2.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_NOT_ZONE_SIGN algo_descr=Diffie-Hellman; algo_mnemo=DH; algo_num=2; keytag=51287; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-NOT-ZONE-SIGN-252 | DS05_ALGO_NOT_ZONE_SIGN | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-NOT-ZONE-SIGN-252.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_NOT_ZONE_SIGN algo_descr=Reserved for Indirect Keys; algo_mnemo=INDIRECT; algo_num=252; keytag=51537; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-OK-13 | DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-13.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 INFO DNSSEC05 DS05_ALGO_OK algo_descr=ECDSA Curve P-256 with SHA-256; algo_mnemo=ECDSAP256SHA256; algo_num=13; keytag=51298; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-OK-14 | DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-14.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 INFO DNSSEC05 DS05_ALGO_OK algo_descr=ECDSA Curve P-384 with SHA-384; algo_mnemo=ECDSAP384SHA384; algo_num=14; keytag=51299; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-OK-15 | DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-15.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 INFO DNSSEC05 DS05_ALGO_OK algo_descr=Ed25519; algo_mnemo=ED25519; algo_num=15; keytag=51300; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-OK-16 | DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-16.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 INFO DNSSEC05 DS05_ALGO_OK algo_descr=Ed448; algo_mnemo=ED448; algo_num=16; keytag=51301; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> 80
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-OK-17 | DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-17.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 INFO DNSSEC05 DS05_ALGO_OK algo_descr=SM2 signing algo w SM3 hash algo; algo_mnemo=SM2SM3; algo_num=17; keytag=51302; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-OK-23 | DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-23.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 INFO DNSSEC05 DS05_ALGO_OK algo_descr=GOST R 34.10-2012; algo_mnemo=ECC-GOST12; algo_num=23; keytag=51308; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-OK-8 | DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-8.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 INFO DNSSEC05 DS05_ALGO_OK algo_descr=RSA/SHA-256; algo_mnemo=RSASHA256; algo_num=8; keytag=51293; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-PRIVATE-253 | DS05_ALGO_PRIVATE | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-PRIVATE-253.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_PRIVATE algo_descr=private algorithm; algo_mnemo=PRIVATEDNS; algo_num=253; keytag=51538; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-PRIVATE-254 | DS05_ALGO_PRIVATE | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-PRIVATE-254.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_PRIVATE algo_descr=private algorithm OID; algo_mnemo=PRIVATEOID; algo_num=254; keytag=51539; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-RESERVED-11 | DS05_ALGO_RESERVED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-11.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_RESERVED algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=11; keytag=51296; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-RESERVED-123 | DS05_ALGO_RESERVED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-123.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_RESERVED algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=123; keytag=51408; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-RESERVED-251 | DS05_ALGO_RESERVED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-251.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_RESERVED algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=251; keytag=51536; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-RESERVED-255 | DS05_ALGO_RESERVED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-255.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_RESERVED algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=255; keytag=51540; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-RESERVED-4 | DS05_ALGO_RESERVED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-4.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_RESERVED algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=4; keytag=51289; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-RESERVED-9 | DS05_ALGO_RESERVED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-9.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 ERROR DNSSEC05 DS05_ALGO_RESERVED algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=9; keytag=51294; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-UNASSIGNED-122 | DS05_ALGO_UNASSIGNED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-UNASSIGNED-122.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_UNASSIGNED algo_descr=Unassigned; algo_mnemo=UNASSIGNED; algo_num=122; keytag=51407; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ALGO-UNASSIGNED-20 | DS05_ALGO_UNASSIGNED | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-UNASSIGNED-20.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR DNSSEC05 DS05_ALGO_UNASSIGNED algo_descr=Unassigned; algo_mnemo=UNASSIGNED; algo_num=20; keytag=51305; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| MIXED-ALGO-1 | DS05_ALGO_DEPRECATED, DS05_ALGO_NOT_RECOMMENDED, DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw MIXED-ALGO-1.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 WARNING DNSSEC05 DS05_ALGO_NOT_RECOMMENDED algo_descr=RSA/SHA-512; algo_mnemo=RSASHA512; algo_num=10; keytag=51295; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
0.05 ERROR DNSSEC05 DS05_ALGO_DEPRECATED algo_descr=RSASHA1-NSEC3-SHA1; algo_mnemo=RSASHA1-NSEC3-SHA1; algo_num=7; keytag=51292; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
0.06 INFO DNSSEC05 DS05_ALGO_OK algo_descr=ECDSA Curve P-256 with SHA-256; algo_mnemo=ECDSAP256SHA256; algo_num=13; keytag=51298; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| NO-RESPONSE-1 | DS05_NO_RESPONSE | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw NO-RESPONSE-1.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
20.07 WARNING DNSSEC05 DS05_NO_RESPONSE ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| NO-RESPONSE-2 | DS05_NO_RESPONSE | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw NO-RESPONSE-2.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 WARNING DNSSEC05 DS05_NO_RESPONSE ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-------------------|:------------------------------------|:-----------------------|
| SERVER-NO-DNSSEC-1 | DS05_SERVER_NO_DNSSEC, DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw SERVER-NO-DNSSEC-1.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 INFO DNSSEC05 DS05_ALGO_OK algo_descr=ECDSA Curve P-256 with SHA-256; algo_mnemo=ECDSAP256SHA256; algo_num=13; keytag=51298; ns_list=ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
0.06 ERROR DNSSEC05 DS05_SERVER_NO_DNSSEC ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| SHARED-IP-1 | DS05_ALGO_OK | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw SHARED-IP-1.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 INFO DNSSEC05 DS05_ALGO_OK algo_descr=ECDSA Curve P-256 with SHA-256; algo_mnemo=ECDSAP256SHA256; algo_num=13; keytag=51298; ns_list=ns1a.shared-ip-1.dnssec05.xa/127.15.5.31;ns1b.shared-ip-1.dnssec05.xa/127.15.5.31
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------------|:--------------------------------------------------------------|:-----------------------|
| ZONE-NO-DNSSEC-1 | DS05_ZONE_NO_DNSSEC | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ZONE-NO-DNSSEC-1.dnssec05.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 NOTICE DNSSEC05 DS05_ZONE_NO_DNSSEC ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
```
--> OK