CloudHost/zonemaster.es
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add full Zonemaster stack with Docker and Spanish UI

Browse Source 
- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI)
- Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend
- Dockerfile.gui: Astro static build served via nginx
- docker-compose.yml: backend (internal) + frontend (port 5353)
- nginx.conf: root redirects to /es/, /api/ proxied to backend
- zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Malin
2026-04-21 08:19:24 +02:00
commit 8d4eaa1489
1567 changed files with 204155 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone Normal file
View File

@@ -0,0 +1,21 @@
; Shared, $ORIGIN must implicit.
$TTL 3600
@ SOA ns1 admin. (
2025092900 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
@ TXT "Placeholder"
; EOF

13
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/README.md Normal file
View File

@@ -0,0 +1,13 @@
[This directory](.), i.e. the same directory as this README file, holds zone
files and configuration files to implement the test zones for the scenarios
defined in [DNSSEC07 test scenario specification].
For these test zones the following files are found in [This directory](.):
* Zone files for `dnssec07.xa` and other related zones.
* CoreDNS configuration file
* Zone file and hint file for local root zone.
* Output from `zonemaster-cli` on all test scenarios in
[test-zones-output.md](test-zones-output.md).
[DNSSEC07 test scenario specification]: ../../../docs/public/specifications/test-zones/DNSSEC-TP/dnssec07.md

235
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/dnssec07.cfg Normal file
View File

@@ -0,0 +1,235 @@
# | 127.15.7.0/24 | DNSSEC07 scenarios |
# | 127.15.7.21 | ns1.dnssec07.xa |
# | 127.15.7.22 | ns2.dnssec07.xa |
# | 127.15.7.27 | ns1 of root |
# | 127.15.7.28 | ns2 of root |
# | 127.15.7.31 | ns1 of parent in some scenarios |
# | 127.15.7.32 | ns2 of parent in some scenarios |
# | 127.15.7.41 | ns1 of child zone |
# | 127.15.7.42 | ns2 of child zone |
# | 127.15.7.53 | resolver with test case local hint |
## root
.:53 {
bind 127.15.7.27 # ns1
bind fda1:b2:c3:0:127:15:7:27 # ns1
bind 127.15.7.28 # ns2
bind fda1:b2:c3:0:127:15:7:28 # ns2
log
file DNSSEC-TP/dnssec07/root-zone.zone .
}
# Resolver using test case local root
. {
bind 127.15.7.53
unbound {
option root-hints DNSSEC-TP/dnssec07/hintfile.zone
}
log
}
dnssec07.xa:53 { #
bind 127.15.7.21 # ns1
bind fda1:b2:c3:0:127:15:7:21 # ns1
bind 127.15.7.22 # ns2
bind fda1:b2:c3:0:127:15:7:22 # ns2
log
file DNSSEC-TP/dnssec07/dnssec07.xa.zone dnssec07.xa
}
# SIGNED-AND-DS-1
signed-and-ds-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone signed-and-ds-1.dnssec07.xa
template IN DNSKEY signed-and-ds-1.dnssec07.xa. {
answer "signed-and-ds-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "signed-and-ds-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "signed-and-ds-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 signed-and-ds-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
}
# SIGNED-NO-DS-1
signed-no-ds-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone signed-no-ds-1.dnssec07.xa
template IN DNSKEY signed-no-ds-1.dnssec07.xa. {
answer "signed-no-ds-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "signed-no-ds-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "signed-no-ds-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 signed-no-ds-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
}
# INCONSIST-SIGNED-AND-DS-1
inconsist-signed-and-ds-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone inconsist-signed-and-ds-1.dnssec07.xa
template IN DNSKEY inconsist-signed-and-ds-1.dnssec07.xa. {
answer "inconsist-signed-and-ds-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "inconsist-signed-and-ds-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "inconsist-signed-and-ds-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 inconsist-signed-and-ds-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
}
inconsist-signed-and-ds-1.dnssec07.xa:53 {
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone inconsist-signed-and-ds-1.dnssec07.xa
}
# INCONSIST-SIGNED-NO-DS-1
inconsist-signed-no-ds-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone inconsist-signed-no-ds-1.dnssec07.xa
template IN DNSKEY inconsist-signed-no-ds-1.dnssec07.xa. {
answer "inconsist-signed-no-ds-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "inconsist-signed-no-ds-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "inconsist-signed-no-ds-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 inconsist-signed-no-ds-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
}
inconsist-signed-no-ds-1.dnssec07.xa:53 {
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone inconsist-signed-no-ds-1.dnssec07.xa
}
# ### SIGNED-AND-INCONSIST-DS-1
signed-and-inconsist-ds-1.dnssec07.xa:53 { # parent (ns1)
bind 127.15.7.31 # ns1
bind fda1:b2:c3:0:127:15:7:31 # ns1
log
file DNSSEC-TP/dnssec07/signed-and-inconsist-ds-1.dnssec07.xa_ns1.zone signed-and-inconsist-ds-1.dnssec07.xa
}
signed-and-inconsist-ds-1.dnssec07.xa:53 { # parent (ns1)
bind 127.15.7.32 # ns2
bind fda1:b2:c3:0:127:15:7:32 # ns2
log
file DNSSEC-TP/dnssec07/signed-and-inconsist-ds-1.dnssec07.xa_ns2.zone signed-and-inconsist-ds-1.dnssec07.xa
}
child.signed-and-inconsist-ds-1.dnssec07.xa:53 { # child
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone child.signed-and-inconsist-ds-1.dnssec07.xa
template IN DNSKEY child.signed-and-inconsist-ds-1.dnssec07.xa. {
answer "child.signed-and-inconsist-ds-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "child.signed-and-inconsist-ds-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "child.signed-and-inconsist-ds-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 child.signed-and-inconsist-ds-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
}
# UNSIGNED-AND-DS-1
unsigned-and-ds-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone unsigned-and-ds-1.dnssec07.xa
}
# UNSIGNED-NO-DS-1
unsigned-no-ds-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone unsigned-no-ds-1.dnssec07.xa
}
# NON-AUTH-RESPONSE-DNSKEY-1
non-auth-response-dnskey-1.dnssec07.xa:53 {
view pass {
expr type() in ['DNSKEY']
}
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
log
template IN DNSKEY non-auth-response-dnskey-1.dnssec07.xa. {
answer "non-auth-response-dnskey-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "non-auth-response-dnskey-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "non-auth-response-dnskey-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 non-auth-response-dnskey-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
header {
response clear aa
}
}
non-auth-response-dnskey-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone non-auth-response-dnskey-1.dnssec07.xa
}
non-auth-response-dnskey-1.dnssec07.xa:53 {
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone non-auth-response-dnskey-1.dnssec07.xa
template IN DNSKEY non-auth-response-dnskey-1.dnssec07.xa. {
answer "non-auth-response-dnskey-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "non-auth-response-dnskey-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "non-auth-response-dnskey-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 non-auth-response-dnskey-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
}
# NO-RESPONSE-DNSKEY-1
no-response-dnskey-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone no-response-dnskey-1.dnssec07.xa
acl no-response-dnskey-1.dnssec07.xa {
drop type DNSKEY
}
}
no-response-dnskey-1.dnssec07.xa:53 {
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone no-response-dnskey-1.dnssec07.xa
template IN DNSKEY no-response-dnskey-1.dnssec07.xa. {
answer "no-response-dnskey-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "no-response-dnskey-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "no-response-dnskey-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 no-response-dnskey-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
}
# ### UNEXP-RCODE-RESP-DNSKEY-1
unexp-rcode-resp-dnskey-1.dnssec07.xa:53 {
bind 127.15.7.41 # ns1
bind fda1:b2:c3:0:127:15:7:41 # ns1
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone unexp-rcode-resp-dnskey-1.dnssec07.xa
template IN DNSKEY unexp-rcode-resp-dnskey-1.dnssec07.xa. {
rcode "REFUSED"
}
}
unexp-rcode-resp-dnskey-1.dnssec07.xa:53 {
bind 127.15.7.42 # ns2
bind fda1:b2:c3:0:127:15:7:42 # ns2
log
file DNSSEC-TP/dnssec07/CHILD.dnssec07.xa.zone unexp-rcode-resp-dnskey-1.dnssec07.xa
template IN DNSKEY unexp-rcode-resp-dnskey-1.dnssec07.xa. {
answer "unexp-rcode-resp-dnskey-1.dnssec07.xa. 3210 IN DNSKEY 256 3 13 XboDHQ6clhzmXdJarL5rAlENpwc/L+C5kX3OhwRAPGSOGseBgn7cgt5fbdrREm6nGa6ZWoDfBQR1m4HDosM1Ug=="
answer "unexp-rcode-resp-dnskey-1.dnssec07.xa. 3210 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "unexp-rcode-resp-dnskey-1.dnssec07.xa. 3210 IN RRSIG DNSKEY 13 2 3600 20351103070323 20250929053323 51298 unexp-rcode-resp-dnskey-1.dnssec07.xa. PjvG59Cz29mhpMEwzuXJSqKk/kuEvoMxKIPPgVGwj4cezpiu94xNC4O7CzWltqH/mLMR5AAqXpMbVgXe9gAngA=="
}
}

109
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/dnssec07.xa.zone Normal file
View File

@@ -0,0 +1,109 @@
$ORIGIN dnssec07.xa. ; Must end with "."
$TTL 3600
@ SOA ns1 admin. (
2025100201 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
@ NS ns1
@ NS ns2
ns1 A 127.15.7.21
ns1 AAAA fda1:b2:c3:0:127:15:7:21
ns2 A 127.15.7.22
ns2 AAAA fda1:b2:c3:0:127:15:7:22
$ORIGIN signed-and-ds-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
@ DS 51298 13 2 60A48DB6C1F4B993E3D7C0869C0C535A70C9A6D1899DE86563D485B5 15EE1918
@ RRSIG DS 8 2 3600 20351012164605 20250928151605 54394 dnssec07.xa. ewSq03Pu8mWZWKNCsuJZ5MzO3PCqtqfR/MbslNbRtRHyynj+yZqbdhCS5dwTEgmDMkpIuAranFbwqnJ6nkncuffpQu/oEOjRHQQslf2JB4RtQlqtjNjX9N+YRjCdgm9oY4k9h4268YlP92oYXnfX5Cj5h6v5aMjdbY4X38fvXO/DruNB9mLHsOkdSLld2f/TOJ4IeXqr2MGubgeUqybsNX4c9XkypTMLazqBeg1mK8GNX1n+msOaln8zCiCMPDep/ShHuZuBtmayUSCFwb5oOd80deEyphf7HBl6/vgXRmPpvqVjBSChtxjrkSjP+DKMn1fkr7jPLS4Bv3jEznFlGw==
$ORIGIN signed-no-ds-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
$ORIGIN inconsist-signed-and-ds-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
@ DS 51298 13 2 60A48DB6C1F4B993E3D7C0869C0C535A70C9A6D1899DE86563D485B5 15EE1918
@ RRSIG DS 8 2 3600 20351012164605 20250928151605 54394 dnssec07.xa. ewSq03Pu8mWZWKNCsuJZ5MzO3PCqtqfR/MbslNbRtRHyynj+yZqbdhCS5dwTEgmDMkpIuAranFbwqnJ6nkncuffpQu/oEOjRHQQslf2JB4RtQlqtjNjX9N+YRjCdgm9oY4k9h4268YlP92oYXnfX5Cj5h6v5aMjdbY4X38fvXO/DruNB9mLHsOkdSLld2f/TOJ4IeXqr2MGubgeUqybsNX4c9XkypTMLazqBeg1mK8GNX1n+msOaln8zCiCMPDep/ShHuZuBtmayUSCFwb5oOd80deEyphf7HBl6/vgXRmPpvqVjBSChtxjrkSjP+DKMn1fkr7jPLS4Bv3jEznFlGw==
$ORIGIN inconsist-signed-no-ds-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
$ORIGIN signed-and-inconsist-ds-1.dnssec07.xa. ; parent
@ NS ns1
@ NS ns2
ns1 A 127.15.7.31
ns1 AAAA fda1:b2:c3:0:127:15:7:31
ns2 A 127.15.7.32
ns2 AAAA fda1:b2:c3:0:127:15:7:32
$ORIGIN unsigned-and-ds-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
@ DS 51298 13 2 60A48DB6C1F4B993E3D7C0869C0C535A70C9A6D1899DE86563D485B5 15EE1918
@ RRSIG DS 8 2 3600 20351012164605 20250928151605 54394 dnssec07.xa. ewSq03Pu8mWZWKNCsuJZ5MzO3PCqtqfR/MbslNbRtRHyynj+yZqbdhCS5dwTEgmDMkpIuAranFbwqnJ6nkncuffpQu/oEOjRHQQslf2JB4RtQlqtjNjX9N+YRjCdgm9oY4k9h4268YlP92oYXnfX5Cj5h6v5aMjdbY4X38fvXO/DruNB9mLHsOkdSLld2f/TOJ4IeXqr2MGubgeUqybsNX4c9XkypTMLazqBeg1mK8GNX1n+msOaln8zCiCMPDep/ShHuZuBtmayUSCFwb5oOd80deEyphf7HBl6/vgXRmPpvqVjBSChtxjrkSjP+DKMn1fkr7jPLS4Bv3jEznFlGw==
$ORIGIN unsigned-no-ds-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
$ORIGIN non-auth-response-dnskey-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
@ DS 51298 13 2 60A48DB6C1F4B993E3D7C0869C0C535A70C9A6D1899DE86563D485B5 15EE1918
@ RRSIG DS 8 2 3600 20351012164605 20250928151605 54394 dnssec07.xa. ewSq03Pu8mWZWKNCsuJZ5MzO3PCqtqfR/MbslNbRtRHyynj+yZqbdhCS5dwTEgmDMkpIuAranFbwqnJ6nkncuffpQu/oEOjRHQQslf2JB4RtQlqtjNjX9N+YRjCdgm9oY4k9h4268YlP92oYXnfX5Cj5h6v5aMjdbY4X38fvXO/DruNB9mLHsOkdSLld2f/TOJ4IeXqr2MGubgeUqybsNX4c9XkypTMLazqBeg1mK8GNX1n+msOaln8zCiCMPDep/ShHuZuBtmayUSCFwb5oOd80deEyphf7HBl6/vgXRmPpvqVjBSChtxjrkSjP+DKMn1fkr7jPLS4Bv3jEznFlGw==
$ORIGIN no-response-dnskey-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
@ DS 51298 13 2 60A48DB6C1F4B993E3D7C0869C0C535A70C9A6D1899DE86563D485B5 15EE1918
@ RRSIG DS 8 2 3600 20351012164605 20250928151605 54394 dnssec07.xa. ewSq03Pu8mWZWKNCsuJZ5MzO3PCqtqfR/MbslNbRtRHyynj+yZqbdhCS5dwTEgmDMkpIuAranFbwqnJ6nkncuffpQu/oEOjRHQQslf2JB4RtQlqtjNjX9N+YRjCdgm9oY4k9h4268YlP92oYXnfX5Cj5h6v5aMjdbY4X38fvXO/DruNB9mLHsOkdSLld2f/TOJ4IeXqr2MGubgeUqybsNX4c9XkypTMLazqBeg1mK8GNX1n+msOaln8zCiCMPDep/ShHuZuBtmayUSCFwb5oOd80deEyphf7HBl6/vgXRmPpvqVjBSChtxjrkSjP+DKMn1fkr7jPLS4Bv3jEznFlGw==
$ORIGIN unexp-rcode-resp-dnskey-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
@ DS 51298 13 2 60A48DB6C1F4B993E3D7C0869C0C535A70C9A6D1899DE86563D485B5 15EE1918
@ RRSIG DS 8 2 3600 20351012164605 20250928151605 54394 dnssec07.xa. ewSq03Pu8mWZWKNCsuJZ5MzO3PCqtqfR/MbslNbRtRHyynj+yZqbdhCS5dwTEgmDMkpIuAranFbwqnJ6nkncuffpQu/oEOjRHQQslf2JB4RtQlqtjNjX9N+YRjCdgm9oY4k9h4268YlP92oYXnfX5Cj5h6v5aMjdbY4X38fvXO/DruNB9mLHsOkdSLld2f/TOJ4IeXqr2MGubgeUqybsNX4c9XkypTMLazqBeg1mK8GNX1n+msOaln8zCiCMPDep/ShHuZuBtmayUSCFwb5oOd80deEyphf7HBl6/vgXRmPpvqVjBSChtxjrkSjP+DKMn1fkr7jPLS4Bv3jEznFlGw==

8
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/hintfile.zone Normal file
View File

@@ -0,0 +1,8 @@
; Hint file for DNSSEC07 local root
. 3600 NS root-ns1.xa.
. 3600 NS root-ns2.xa.
root-ns1.xa. 3600 A 127.15.7.27
root-ns1.xa. 3600 AAAA fda1:b2:c3::127:15:7:27
root-ns2.xa. 3600 A 127.15.7.28
root-ns2.xa. 3600 AAAA fda1:b2:c3::127:15:7:28

32
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/root-zone.zone Normal file
View File

@@ -0,0 +1,32 @@
$ORIGIN .
$TTL 3600
@ SOA ns1. admin.xa. (
2025100201 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS root-ns1.xa.
NS root-ns2.xa.
TXT "dnssec07"
root-ns1.xa. A 127.15.7.27
root-ns1.xa. AAAA fda1:b2:c3::127:15:7:27
root-ns2.xa. A 127.15.7.28
root-ns2.xa. AAAA fda1:b2:c3::127:15:7:28
$ORIGIN dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.21
ns1 AAAA fda1:b2:c3::127:15:7:21
ns2 A 127.15.7.22
ns1 AAAA fda1:b2:c3::127:15:7:22
;EOF

33
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/signed-and-inconsist-ds-1.dnssec07.xa_ns1.zone Normal file
View File

@@ -0,0 +1,33 @@
$ORIGIN signed-and-inconsist-ds-1.dnssec07.xa. ; parent (ns1)
$TTL 3600
@ SOA ns1 admin. (
2025100104 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
@ NS ns1
@ NS ns2
ns1 A 127.15.7.31
ns1 AAAA fda1:b2:c3:0:127:15:7:31
ns2 A 127.15.7.32
ns2 AAAA fda1:b2:c3:0:127:15:7:32
@ TXT "Placeholder"
$ORIGIN child.signed-and-inconsist-ds-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
@ DS 51298 13 2 60A48DB6C1F4B993E3D7C0869C0C535A70C9A6D1899DE86563D485B5 15EE1918
@ RRSIG DS 8 2 3600 20351012164605 20250928151605 54394 signed-and-inconsist-ds-1.dnssec07.xa. ewSq03Pu8mWZWKNCsuJZ5MzO3PCqtqfR/MbslNbRtRHyynj+yZqbdhCS5dwTEgmDMkpIuAranFbwqnJ6nkncuffpQu/oEOjRHQQslf2JB4RtQlqtjNjX9N+YRjCdgm9oY4k9h4268YlP92oYXnfX5Cj5h6v5aMjdbY4X38fvXO/DruNB9mLHsOkdSLld2f/TOJ4IeXqr2MGubgeUqybsNX4c9XkypTMLazqBeg1mK8GNX1n+msOaln8zCiCMPDep/ShHuZuBtmayUSCFwb5oOd80deEyphf7HBl6/vgXRmPpvqVjBSChtxjrkSjP+DKMn1fkr7jPLS4Bv3jEznFlGw==
; EOF

31
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/signed-and-inconsist-ds-1.dnssec07.xa_ns2.zone Normal file
View File

@@ -0,0 +1,31 @@
$ORIGIN signed-and-inconsist-ds-1.dnssec07.xa. ; parent (ns2)
$TTL 3600
@ SOA ns1 admin. (
2025100104 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
@ NS ns1
@ NS ns2
ns1 A 127.15.7.31
ns1 AAAA fda1:b2:c3:0:127:15:7:31
ns2 A 127.15.7.32
ns2 AAAA fda1:b2:c3:0:127:15:7:32
@ TXT "Placeholder"
$ORIGIN child.signed-and-inconsist-ds-1.dnssec07.xa.
@ NS ns1
@ NS ns2
ns1 A 127.15.7.41
ns1 AAAA fda1:b2:c3:0:127:15:7:41
ns2 A 127.15.7.42
ns2 AAAA fda1:b2:c3:0:127:15:7:42
; EOF

200
zonemaster/test-zone-data/DNSSEC-TP/dnssec07/test-zones-output.md Normal file
View File

@@ -0,0 +1,200 @@
# DNSSEC07 Test scenario output
# Table of contents
* [Introduction](#introduction)
* [All message tags](#all-message-tags)
* [All scenarios](#all-scenarios)
* [zonemaster-cli commands and their output for each test scenario](#zonemaster-cli-commands-and-their-output-for-each-test-scenario)
## Introduction
In this file the output of running `zonemaster-cli` for every test zone is
found. This file is created during the development of the test zones and should
be updated as the implementation of the test case or the test scenarios or test
zones are updated or corrected.
During development and any update this document serves as tracking and log tool.
It also serves as a template for future development of test zones for
scenarios for other test cases.
## All message tags
* DS07_DS_FOR_SIGNED_ZONE
* DS07_DS_ON_PARENT_SERVER
* DS07_INCONSISTENT_DS
* DS07_INCONSISTENT_SIGNED
* DS07_NON_AUTH_RESPONSE_DNSKEY
* DS07_NOT_SIGNED
* DS07_NOT_SIGNED_ON_SERVER
* DS07_NO_DS_ON_PARENT_SERVER
* DS07_NO_DS_FOR_SIGNED_ZONE
* DS07_NO_RESPONSE_DNSKEY
* DS07_SIGNED
* DS07_SIGNED_ON_SERVER
* DS07_UNEXP_RCODE_RESP_DNSKEY
## All scenarios
| Scenario name | Zone name |
|:---------------------------|:---------------------------------------------|
| SIGNED-AND-DS-1 | signed-and-ds-1.dnssec07.xa. |
| SIGNED-NO-DS-1 | signed-no-ds-1.dnssec07.xa. |
| INCONSIST-SIGNED-AND-DS-1 | inconsist-signed-and-ds-1.dnssec07.xa. |
| INCONSIST-SIGNED-NO-DS-1 | inconsist-signed-no-ds-1.dnssec07.xa. |
| SIGNED-AND-INCONSIST-DS-1 | child.signed-and-inconsist-ds-1.dnssec07.xa. |
| UNSIGNED-AND-DS-1 | unsigned-and-ds-1.dnssec07.xa. |
| UNSIGNED-NO-DS-1 | unsigned-no-ds-1.dnssec07.xa. |
| NON-AUTH-RESPONSE-DNSKEY-1 | non-auth-response-dnskey-1.dnssec07.xa. |
| NO-RESPONSE-DNSKEY-1 | no-response-dnskey-1.dnssec07.xa. |
| UNEXP-RCODE-RESP-DNSKEY-1 | unexp-rcode-resp-dnskey-1.dnssec07.xa. |
## zonemaster-cli commands and their output for each test scenario
> **PLEASE NOTE:**
>
> The `zonemaster-cli` output in this section is from before the implementation
> of test DNSSEC07 has been updated. All message tags and the logic for utputting
> them are to be updated. This file has to updated when the implementation
> update is available.
All commands are run from the same directory as this file is in. To be meaningful
the `zonemaster-cli` command should be run with the following options:
```
--hints=hintfile.zone --test=dnssec07 --level=info
```
| Scenario name | Mandatory tags | Forbidden tags |
|:----------------|:--------------------------------------------------------------------------------------|:---------------|
| SIGNED-AND-DS-1 | DS07_DS_FOR_SIGNED_ZONE, DS07_DS_ON_PARENT_SERVER, DS07_SIGNED, DS07_SIGNED_ON_SERVER | 2) |
* (2) All tags except for those specified as "Mandatory tags"
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw SIGNED-AND-DS-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.09 INFO DNSSEC07 DS07_SIGNED_ON_SERVER ns_list=ns1.signed-and-ds-1.dnssec07.xa/127.15.7.41;ns1.signed-and-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41;ns2.signed-and-ds-1.dnssec07.xa/127.15.7.42;ns2.signed-and-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.09 INFO DNSSEC07 DS07_SIGNED
0.09 INFO DNSSEC07 DS07_DS_ON_PARENT_SERVER ns_list=ns1.dnssec07.xa/127.15.7.21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:22;ns2.dnssec07.xa/127.15.7.22
0.09 INFO DNSSEC07 DS07_DS_FOR_SIGNED_ZONE
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:---------------|:--------------------------------------------------------------------------------------------|:---------------|
| SIGNED-NO-DS-1 | DS07_NO_DS_ON_PARENT_SERVER, DS07_NO_DS_FOR_SIGNED_ZONE, DS07_SIGNED, DS07_SIGNED_ON_SERVER | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw SIGNED-NO-DS-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.07 INFO DNSSEC07 DS07_SIGNED_ON_SERVER ns_list=ns1.signed-no-ds-1.dnssec07.xa/127.15.7.41;ns1.signed-no-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41;ns2.signed-no-ds-1.dnssec07.xa/127.15.7.42;ns2.signed-no-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.07 INFO DNSSEC07 DS07_SIGNED
0.07 WARNING DNSSEC07 DS07_NO_DS_ON_PARENT_SERVER ns_list=ns1.dnssec07.xa/127.15.7.21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:22;ns2.dnssec07.xa/127.15.7.22
0.07 WARNING DNSSEC07 DS07_NO_DS_FOR_SIGNED_ZONE
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:--------------------------|:-----------------------------------------------------------------------------------------------------|:---------------|
| INCONSIST-SIGNED-AND-DS-1 | DS07_DS_ON_PARENT_SERVER, DS07_INCONSISTENT_SIGNED, DS07_NOT_SIGNED_ON_SERVER, DS07_SIGNED_ON_SERVER | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw INCONSIST-SIGNED-AND-DS-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.08 INFO DNSSEC07 DS07_SIGNED_ON_SERVER ns_list=ns1.inconsist-signed-and-ds-1.dnssec07.xa/127.15.7.41;ns1.inconsist-signed-and-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41
0.08 WARNING DNSSEC07 DS07_NOT_SIGNED_ON_SERVER ns_list=ns2.inconsist-signed-and-ds-1.dnssec07.xa/127.15.7.42;ns2.inconsist-signed-and-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.08 ERROR DNSSEC07 DS07_INCONSISTENT_SIGNED
0.08 INFO DNSSEC07 DS07_DS_ON_PARENT_SERVER ns_list=ns1.dnssec07.xa/127.15.7.21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:22;ns2.dnssec07.xa/127.15.7.22
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:-------------------------|:--------------------------------------------------------------------------------------------------------|:---------------|
| INCONSIST-SIGNED-NO-DS-1 | DS07_INCONSISTENT_SIGNED, DS07_NOT_SIGNED_ON_SERVER, DS07_NO_DS_ON_PARENT_SERVER, DS07_SIGNED_ON_SERVER | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw INCONSIST-SIGNED-NO-DS-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.07 INFO DNSSEC07 DS07_SIGNED_ON_SERVER ns_list=ns1.inconsist-signed-no-ds-1.dnssec07.xa/127.15.7.41;ns1.inconsist-signed-no-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41
0.07 WARNING DNSSEC07 DS07_NOT_SIGNED_ON_SERVER ns_list=ns2.inconsist-signed-no-ds-1.dnssec07.xa/127.15.7.42;ns2.inconsist-signed-no-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.07 ERROR DNSSEC07 DS07_INCONSISTENT_SIGNED
0.07 WARNING DNSSEC07 DS07_NO_DS_ON_PARENT_SERVER ns_list=ns1.dnssec07.xa/127.15.7.21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:22;ns2.dnssec07.xa/127.15.7.22
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:--------------------------|:----------------------------------------------------------------------------------------------------------------|:---------------|
| SIGNED-AND-INCONSIST-DS-1 | DS07_DS_ON_PARENT_SERVER, DS07_INCONSISTENT_DS, DS07_NO_DS_ON_PARENT_SERVER, DS07_SIGNED, DS07_SIGNED_ON_SERVER | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw child.signed-and-inconsist-ds-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.11 INFO DNSSEC07 DS07_SIGNED_ON_SERVER ns_list=ns1.child.signed-and-inconsist-ds-1.dnssec07.xa/127.15.7.41;ns1.child.signed-and-inconsist-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41;ns2.child.signed-and-inconsist-ds-1.dnssec07.xa/127.15.7.42;ns2.child.signed-and-inconsist-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.11 INFO DNSSEC07 DS07_SIGNED
0.11 WARNING DNSSEC07 DS07_NO_DS_ON_PARENT_SERVER ns_list=ns2.signed-and-inconsist-ds-1.dnssec07.xa/127.15.7.32;ns2.signed-and-inconsist-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:32
0.11 INFO DNSSEC07 DS07_DS_ON_PARENT_SERVER ns_list=ns1.signed-and-inconsist-ds-1.dnssec07.xa/127.15.7.31;ns1.signed-and-inconsist-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:31
0.11 ERROR DNSSEC07 DS07_INCONSISTENT_DS
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:------------------|:-------------------------------------------|:---------------|
| UNSIGNED-AND-DS-1 | DS07_NOT_SIGNED, DS07_NOT_SIGNED_ON_SERVER | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw UNSIGNED-AND-DS-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.08 WARNING DNSSEC07 DS07_NOT_SIGNED_ON_SERVER ns_list=ns1.unsigned-and-ds-1.dnssec07.xa/127.15.7.41;ns1.unsigned-and-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41;ns2.unsigned-and-ds-1.dnssec07.xa/127.15.7.42;ns2.unsigned-and-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.08 WARNING DNSSEC07 DS07_NOT_SIGNED
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:-----------------|:-------------------------------------------|:---------------|
| UNSIGNED-NO-DS-1 | DS07_NOT_SIGNED, DS07_NOT_SIGNED_ON_SERVER | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw UNSIGNED-NO-DS-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.08 WARNING DNSSEC07 DS07_NOT_SIGNED_ON_SERVER ns_list=ns1.unsigned-no-ds-1.dnssec07.xa/127.15.7.41;ns1.unsigned-no-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41;ns2.unsigned-no-ds-1.dnssec07.xa/127.15.7.42;ns2.unsigned-no-ds-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.08 WARNING DNSSEC07 DS07_NOT_SIGNED
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:---------------------------|:---------------------------------------------------------------------------------------------------------------------|:---------------|
| NON-AUTH-RESPONSE-DNSKEY-1 | DS07_NON_AUTH_RESPONSE_DNSKEY, DS07_SIGNED, DS07_SIGNED_ON_SERVER, DS07_DS_ON_PARENT_SERVER, DS07_DS_FOR_SIGNED_ZONE | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw NON-AUTH-RESPONSE-DNSKEY-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.08 WARNING DNSSEC07 DS07_NON_AUTH_RESPONSE_DNSKEY ns_list=ns1.non-auth-response-dnskey-1.dnssec07.xa/127.15.7.41;ns1.non-auth-response-dnskey-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41
0.08 INFO DNSSEC07 DS07_SIGNED_ON_SERVER ns_list=ns2.non-auth-response-dnskey-1.dnssec07.xa/127.15.7.42;ns2.non-auth-response-dnskey-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.08 INFO DNSSEC07 DS07_SIGNED
0.08 INFO DNSSEC07 DS07_DS_ON_PARENT_SERVER ns_list=ns1.dnssec07.xa/127.15.7.21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:22;ns2.dnssec07.xa/127.15.7.22
0.08 INFO DNSSEC07 DS07_DS_FOR_SIGNED_ZONE
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:---------------------|:---------------------------------------------------------------------------------------------------------------|:---------------|
| NO-RESPONSE-DNSKEY-1 | DS07_SIGNED, DS07_SIGNED_ON_SERVER, DS07_NO_RESPONSE_DNSKEY, DS07_DS_ON_PARENT_SERVER, DS07_DS_FOR_SIGNED_ZONE | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw NO-RESPONSE-DNSKEY-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
20.09 WARNING DNSSEC07 DS07_NO_RESPONSE_DNSKEY ns_list=ns1.no-response-dnskey-1.dnssec07.xa/127.15.7.41;ns1.no-response-dnskey-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41
20.09 INFO DNSSEC07 DS07_SIGNED_ON_SERVER ns_list=ns2.no-response-dnskey-1.dnssec07.xa/127.15.7.42;ns2.no-response-dnskey-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
20.09 INFO DNSSEC07 DS07_SIGNED
20.09 INFO DNSSEC07 DS07_DS_ON_PARENT_SERVER ns_list=ns1.dnssec07.xa/127.15.7.21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:22;ns2.dnssec07.xa/127.15.7.22
20.09 INFO DNSSEC07 DS07_DS_FOR_SIGNED_ZONE
```
--> OK
| Scenario name | Mandatory tags | Forbidden tags |
|:--------------------------|:--------------------------------------------------------------------------------------------------------------------|:---------------|
| UNEXP-RCODE-RESP-DNSKEY-1 | DS07_SIGNED, DS07_SIGNED_ON_SERVER, DS07_UNEXP_RCODE_RESP_DNSKEY, DS07_DS_ON_PARENT_SERVER, DS07_DS_FOR_SIGNED_ZONE | 2) |
```
$ zonemaster-cli --hints=hintfile.zone --test=dnssec07 --level=info --show-testcase --raw UNEXP-RCODE-RESP-DNSKEY-1.dnssec07.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.07 WARNING DNSSEC07 DS07_UNEXP_RCODE_RESP_DNSKEY ns_list=ns1.unexp-rcode-resp-dnskey-1.dnssec07.xa/127.15.7.41;ns1.unexp-rcode-resp-dnskey-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:41; rcode=REFUSED
0.07 INFO DNSSEC07 DS07_SIGNED_ON_SERVER ns_list=ns2.unexp-rcode-resp-dnskey-1.dnssec07.xa/127.15.7.42;ns2.unexp-rcode-resp-dnskey-1.dnssec07.xa/fda1:b2:c3:0:127:15:7:42
0.08 INFO DNSSEC07 DS07_SIGNED
0.08 INFO DNSSEC07 DS07_DS_ON_PARENT_SERVER ns_list=ns1.dnssec07.xa/127.15.7.21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:21;ns1.dnssec07.xa/fda1:b2:c3:0:127:15:7:22;ns2.dnssec07.xa/127.15.7.22
0.08 INFO DNSSEC07 DS07_DS_FOR_SIGNED_ZONE
```
--> OK