Files

Malin 8d4eaa1489 feat: add full Zonemaster stack with Docker and Spanish UI

- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI)
- Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend
- Dockerfile.gui: Astro static build served via nginx
- docker-compose.yml: backend (internal) + frontend (port 5353)
- nginx.conf: root redirects to /es/, /api/ proxied to backend
- zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-21 08:19:24 +02:00

28 KiB

Raw Permalink Blame History

DNSSEC01 Test scenario output

Introduction
All message tags
All scenarios
zonemaster-cli commands and their output for each test scenario

Introduction

In this file the output of running zonemaster-cli for every test zone is found. This file is created during the development of the test zones and should be updated as the implementation of the test case or the test scenarios or test zones are updated or corrected.

During development and any update this document serves as tracking and log tool. It also serves as a template for future development of test zones for scenarios for other test cases.

All scenarios

Scenario name	Zone name
ALGO-DEPRECATED-1	algo-deprecated-1.dnssec01.xa.
ALGO-DEPRECATED-3	algo-deprecated-3.dnssec01.xa.
ALGO-RESERVED-128	algo-reserved-128.dnssec01.xa.
ALGO-RESERVED-188	algo-reserved-188.dnssec01.xa.
ALGO-RESERVED-252	algo-reserved-252.dnssec01.xa.
ALGO-UNASSIGNED-7	algo-unassigned-7.dnssec01.xa.
ALGO-UNASSIGNED-67	algo-unassigned-67.dnssec01.xa.
ALGO-UNASSIGNED-127	algo-unassigned-127.dnssec01.xa.
ALGO-PRIVATE-253	algo-private-253.dnssec01.xa.
ALGO-PRIVATE-254	algo-private-254.dnssec01.xa.
ALGO-NOT-DS-0	algo-not-ds-0.dnssec01.xa.
ALGO-OK-2	algo-ok-2.dnssec01.xa.
ALGO-OK-4	algo-ok-4.dnssec01.xa.
ALGO-OK-5	algo-ok-5.dnssec01.xa.
ALGO-OK-6	algo-ok-6.dnssec01.xa.
MIXED-ALGO-1	mixed-algo-1.dnssec01.xa.
SHARED-IP-1	child.shared-ip-1.dnssec01.xa.
SHARED-IP-2	child.shared-ip-2.dnssec01.xa.
NO-RESPONSE-1	child.no-response-1.dnssec01.xa.
NO-VALID-RESPONSE-1	child.no-valid-response-1.dnssec01.xa.
PARENT-SERVER-NO-DS-1	child.parent-server-no-ds-1.dnssec01.xa.
PARENT-ZONE-NO-DS-1	parent-zone-no-ds-1.dnssec01.xa.
UNDEL-NO-UNDEL-DS-1	undel-no-undel-ds-1.dnssec01.xa.
UNDEL-WITH-UNDEL-DS-1	undel-with-undel-ds-1.dnssec01.xa.
ROOT-NO-UNDEL-DS-1	.
ROOT-WITH-UNDEL-DS-1	.

zonemaster-cli commands and their output for each test scenario

All commands are run from the same directory as this file is in. To be meaningful the zonemaster-cli command should be run with the following options:

--hints=hintfile.zone --test=dnssec01 --level=info

Scenario name	Mandatory tags	Forbidden tags
ALGO-DEPRECATED-1	DS01_DS_ALGO_DEPRECATED, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-DEPRECATED-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_DEPRECATED  ds_algo_descr=SHA-1; ds_algo_num=1; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-DEPRECATED-3	DS01_DS_ALGO_DEPRECATED, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-DEPRECATED-3.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_DEPRECATED  ds_algo_descr=GOST R 34.11-94; ds_algo_num=3; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-NOT-DS-0	DS01_DS_ALGO_NOT_DS, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-NOT-DS-0.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_NOT_DS  ds_algo_descr=Reserved; ds_algo_num=0; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-OK-2	DS01_DS_ALGO_OK	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-OK-2.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-OK-4	DS01_DS_ALGO_OK, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-OK-4.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SHA-384; ds_algo_num=4; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-OK-5	DS01_DS_ALGO_OK, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-OK-5.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=GOST R 34.11-2012; ds_algo_num=5; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-OK-6	DS01_DS_ALGO_OK, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-OK-6.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SM3; ds_algo_num=6; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-PRIVATE-253	DS01_DS_ALGO_PRIVATE, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-PRIVATE-253.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_PRIVATE  ds_algo_descr=Reserved for Private Use; ds_algo_num=253; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-PRIVATE-254	DS01_DS_ALGO_PRIVATE, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-PRIVATE-254.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_PRIVATE  ds_algo_descr=Reserved for Private Use; ds_algo_num=254; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-RESERVED-128	DS01_DS_ALGO_RESERVED, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-RESERVED-128.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_RESERVED  ds_algo_descr=Reserved; ds_algo_num=128; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-RESERVED-188	DS01_DS_ALGO_RESERVED, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-RESERVED-188.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_RESERVED  ds_algo_descr=Reserved; ds_algo_num=188; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-RESERVED-252	DS01_DS_ALGO_RESERVED, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-RESERVED-252.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.04 ERROR    DNSSEC01       DS01_DS_ALGO_RESERVED  ds_algo_descr=Reserved; ds_algo_num=252; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.04 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-UNASSIGNED-7	DS01_DS_ALGO_UNASSIGNED, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-UNASSIGNED-7.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_UNASSIGNED  ds_algo_descr=Unassigned; ds_algo_num=7; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-UNASSIGNED-67	DS01_DS_ALGO_UNASSIGNED, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-UNASSIGNED-67.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC01       DS01_DS_ALGO_UNASSIGNED  ds_algo_descr=Unassigned; ds_algo_num=67; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.05 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
ALGO-UNASSIGNED-127	DS01_DS_ALGO_UNASSIGNED, DS01_DS_ALGO_2_MISSING	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw ALGO-UNASSIGNED-127.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.04 ERROR    DNSSEC01       DS01_DS_ALGO_UNASSIGNED  ds_algo_descr=Unassigned; ds_algo_num=127; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.04 NOTICE   DNSSEC01       DS01_DS_ALGO_2_MISSING  keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
MIXED-ALGO-1	DS01_DS_ALGO_DEPRECATED, DS01_DS_ALGO_PRIVATE, DS01_DS_ALGO_OK	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw MIXED-ALGO-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.04 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.04 ERROR    DNSSEC01       DS01_DS_ALGO_DEPRECATED  ds_algo_descr=SHA-1; ds_algo_num=1; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22
   0.04 ERROR    DNSSEC01       DS01_DS_ALGO_PRIVATE  ds_algo_descr=Reserved for Private Use; ds_algo_num=253; keytag=42581; ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
SHARED-IP-1	DS01_DS_ALGO_OK	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.shared-ip-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.08 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=ns1a.shared-ip-1.dnssec01.xa/127.15.1.31;ns1a.shared-ip-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;ns1b.shared-ip-1.dnssec01.xa/127.15.1.31;ns1b.shared-ip-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31

--> OK

Scenario name	Mandatory tags	Forbidden tags
SHARED-IP-2	DS01_DS_ALGO_OK	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.shared-ip-2.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.08 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=dns1.shared-ip-2.dnssec01.xa/127.15.1.31;dns1.shared-ip-2.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;dns2.shared-ip-2.dnssec01.xa/127.15.1.32;dns2.shared-ip-2.dnssec01.xa/fda1:b2:c3:0:127:15:1:32;ns1.shared-ip-2.dnssec01.xa/127.15.1.31;ns1.shared-ip-2.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;ns2.shared-ip-2.dnssec01.xa/127.15.1.32;ns2.shared-ip-2.dnssec01.xa/fda1:b2:c3:0:127:15:1:32

--> OK

Scenario name	Mandatory tags	Forbidden tags
NO-RESPONSE-1	DS01_NO_RESPONSE	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.no-response-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
  40.11 WARNING  DNSSEC01       DS01_NO_RESPONSE  ns_list=ns1.no-response-1.dnssec01.xa/127.15.1.31;ns1.no-response-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;ns2.no-response-1.dnssec01.xa/127.15.1.32;ns2.no-response-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:32

--> OK

Scenario name	Mandatory tags	Forbidden tags
NO-VALID-RESPONSE-1	DS01_NO_RESPONSE	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.no-valid-response-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.08 WARNING  DNSSEC01       DS01_NO_RESPONSE  ns_list=ns1.no-valid-response-1.dnssec01.xa/127.15.1.31;ns1.no-valid-response-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31;ns2.no-valid-response-1.dnssec01.xa/127.15.1.32;ns2.no-valid-response-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:32

--> OK

Scenario name	Mandatory tags	Forbidden tags
PARENT-SERVER-NO-DS-1	DS01_PARENT_SERVER_NO_DS, DS01_DS_ALGO_OK	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw child.parent-server-no-ds-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.08 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=ns2.parent-server-no-ds-1.dnssec01.xa/127.15.1.32;ns2.parent-server-no-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:32
   0.08 ERROR    DNSSEC01       DS01_PARENT_SERVER_NO_DS  ns_list=ns1.parent-server-no-ds-1.dnssec01.xa/127.15.1.31;ns1.parent-server-no-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:31

--> OK

Scenario name	Mandatory tags	Forbidden tags
PARENT-ZONE-NO-DS-1	DS01_PARENT_ZONE_NO_DS	2)

$ zonemaster-cli --hints=hintfile.zone --test=dnssec01 --level=info --show-testcase --raw PARENT-ZONE-NO-DS-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 NOTICE   DNSSEC01       DS01_PARENT_ZONE_NO_DS  ns_list=ns1.dnssec01.xa/127.15.1.21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:21;ns1.dnssec01.xa/fda1:b2:c3:0:127:15:1:22;ns2.dnssec01.xa/127.15.1.22

--> OK

Scenario name	Mandatory tags	Forbidden tags
UNDEL-NO-UNDEL-DS-1	DS01_UNDEL_N_NO_UNDEL_DS	2)

Undelegated data:
- ns1.undel-no-undel-ds-1.dnssec01.xa/127.15.1.41
- ns1.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:41
- ns2.undel-no-undel-ds-1.dnssec01.xa/127.15.1.42
- ns2.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:42

$ zonemaster-cli --show-testcase --level INFO --test dnssec01 --hints hintfile.zone --raw --ns=ns1.undel-no-undel-ds-1.dnssec01.xa/127.15.1.41 --ns=ns1.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:127.15.1.41 --ns=ns1.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:41 --ns=ns2.undel-no-undel-ds-1.dnssec01.xa/127.15.1.42 --ns=ns2.undel-no-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:42 undel-no-undel-ds-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.01 INFO     DNSSEC01       DS01_UNDEL_N_NO_UNDEL_DS

--> OK

Scenario name	Mandatory tags	Forbidden tags
UNDEL-WITH-UNDEL-DS-1	DS01_DS_ALGO_OK	2)

Undelegated data:
- ns1.undel-with-undel-ds-1.dnssec01.xa/127.15.1.41
- ns1.undel-with-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:41
- ns2.undel-with-undel-ds-1.dnssec01.xa/127.15.1.42
- ns2.undel-with-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:42
Undelegated DS:
- 42581,13,2,F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9

$ zonemaster-cli --show-testcase --level INFO --test dnssec01 --hints hintfile.zone --raw --ns=ns1.undel-with-undel-ds-1.dnssec01.xa/127.15.1.41 --ns=ns1.undel-with-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:41 --ns=ns2.undel-with-undel-ds-1.dnssec01.xa/127.15.1.42 --ns=ns2.undel-with-undel-ds-1.dnssec01.xa/fda1:b2:c3:0:127:15:1:42 --ds=42581,13,2,F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9 undel-with-undel-ds-1.dnssec01.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.01 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=-

--> OK

Scenario name	Mandatory tags	Forbidden tags
ROOT-NO-UNDEL-DS-1	DS01_ROOT_N_NO_UNDEL_DS	2)

$ zonemaster-cli --show-testcase --level INFO --test dnssec01 --hints hintfile.zone --raw .
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.00 INFO     DNSSEC01       DS01_ROOT_N_NO_UNDEL_DS

--> OK

Scenario name	Mandatory tags	Forbidden tags
ROOT-WITH-UNDEL-DS-1	DS01_DS_ALGO_OK	2)

Undelegated DS:
- 42581,13,2,F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9

$ zonemaster-cli --show-testcase --level INFO --test dnssec01 --hints hintfile.zone --raw . --ds=42581,13,2,F28391C1ED4DC0F151EDD251A3103DCE0B9A5A251ACF6E24073771D71F3C40F9
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.00 INFO     DNSSEC01       DS01_DS_ALGO_OK  ds_algo_descr=SHA-256; ds_algo_num=2; keytag=42581; ns_list=-

--> OK

28 KiB Raw Permalink Blame History

DNSSEC01 Test scenario output

Table of contents

Introduction

All message tags

All scenarios

zonemaster-cli commands and their output for each test scenario

28 KiB

Raw Permalink Blame History