CloudHost/zonemaster.es
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
f98c45834e9ec2240341906c7baebf61321f6eef
zonemaster.es/zonemaster/test-zone-data/DNSSEC-TP/dnssec05/test-zones-output.md
Malin 8d4eaa1489 feat: add full Zonemaster stack with Docker and Spanish UI 
- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI)
- Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend
- Dockerfile.gui: Astro static build served via nginx
- docker-compose.yml: backend (internal) + frontend (port 5353)
- nginx.conf: root redirects to /es/, /api/ proxied to backend
- zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 08:19:24 +02:00

32 KiB
Raw Blame History

DNSSEC05 Test scenario output

Table of contents

Introduction

In this file the output of running zonemaster-cli for every test zone is found. This file is created during the development of the test zones and should be updated as the implementation of the test case or the test scenarios or test zones are updated or corrected.

During development and any update this document serves as tracking and log tool. It also serves as a template for future development of test zones for scenarios for other test cases.

All message tags

  • DS05_ALGO_DEPRECATED
  • DS05_ALGO_NOT_RECOMMENDED
  • DS05_ALGO_NOT_ZONE_SIGN
  • DS05_ALGO_OK
  • DS05_ALGO_PRIVATE
  • DS05_ALGO_RESERVED
  • DS05_ALGO_UNASSIGNED
  • DS05_NO_RESPONSE
  • DS05_SERVER_NO_DNSSEC
  • DS05_ZONE_NO_DNSSEC

All scenarios

Scenario name Zone name
ALGO-DEPRECATED-1 algo-deprecated-1.dnssec05.xa.
ALGO-DEPRECATED-3 algo-deprecated-3.dnssec05.xa.
ALGO-DEPRECATED-5 algo-deprecated-5.dnssec05.xa.
ALGO-DEPRECATED-6 algo-deprecated-6.dnssec05.xa.
ALGO-DEPRECATED-7 algo-deprecated-7.dnssec05.xa.
ALGO-DEPRECATED-12 algo-deprecated-12.dnssec05.xa.
ALGO-RESERVED-4 algo-reserved-4.dnssec05.xa.
ALGO-RESERVED-9 algo-reserved-9.dnssec05.xa.
ALGO-RESERVED-11 algo-reserved-11.dnssec05.xa.
ALGO-RESERVED-123 algo-reserved-123.dnssec05.xa.
ALGO-RESERVED-251 algo-reserved-251.dnssec05.xa.
ALGO-RESERVED-255 algo-reserved-255.dnssec05.xa.
ALGO-UNASSIGNED-20 algo-unassigned-17.dnssec05.xa.
ALGO-UNASSIGNED-122 algo-unassigned-122.dnssec05.xa.
ALGO-PRIVATE-253 algo-private-253.dnssec05.xa.
ALGO-PRIVATE-254 algo-private-254.dnssec05.xa.
ALGO-NOT-ZONE-SIGN-0 algo-not-zone-sign-0.dnssec05.xa.
ALGO-NOT-ZONE-SIGN-2 algo-not-zone-sign-2.dnssec05.xa.
ALGO-NOT-ZONE-SIGN-252 algo-not-zone-sign-252.dnssec05.xa.
ALGO-NOT-RECOMMENDED-10 algo-not-recommended-10.dnssec05.xa.
ALGO-OK-8 algo-ok-8.dnssec05.xa.
ALGO-OK-13 algo-ok-13.dnssec05.xa.
ALGO-OK-14 algo-ok-14.dnssec05.xa.
ALGO-OK-15 algo-ok-15.dnssec05.xa.
ALGO-OK-16 algo-ok-16.dnssec05.xa.
ALGO-OK-17 algorithm-ok-17.dnssec05.xa.
ALGO-OK-23 algorithm-ok-23.dnssec05.xa."mixed-algo-1.dnssec05.xa.
NO-RESPONSE-1 no-response-1.dnssec05.xa.
NO-RESPONSE-2 no-response-2.dnssec05.xa.
SERVER-NO-DNSSEC-1 server-no-dnssec-1.dnssec05.xa.
SHARED-IP-1 shared-ip-1.dnssec05.xa.
ZONE-NO-DNSSEC-1 zone-no-dnssec-1.dnssec05.xa.

zonemaster-cli commands and their output for each test scenario

All commands are run from the same directory as this file is in. To be meaningful the zonemaster-cli command should be run with the following options:

--hints=hintfile.zone --test=dnssec05 --level=info
Scenario name Mandatory message tags Forbidden message tags
ALGO-DEPRECATED-1 DS05_ALGO_DEPRECATED 2)
  • (2) All tags except for those specified as "Mandatory message tags"
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-1.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_DEPRECATED  algo_descr=RSA/MD5; algo_mnemo=RSAMD5; algo_num=1; keytag=13008; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-DEPRECATED-3 DS05_ALGO_DEPRECATED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-3.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_DEPRECATED  algo_descr=DSA/SHA1; algo_mnemo=DSA; algo_num=3; keytag=51288; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-DEPRECATED-5 DS05_ALGO_DEPRECATED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-5.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_DEPRECATED  algo_descr=RSA/SHA1; algo_mnemo=RSASHA1; algo_num=5; keytag=51290; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-DEPRECATED-6 DS05_ALGO_DEPRECATED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-6.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_DEPRECATED  algo_descr=DSA-NSEC3-SHA1; algo_mnemo=DSA-NSEC3-SHA1; algo_num=6; keytag=51291; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-DEPRECATED-7 DS05_ALGO_DEPRECATED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-7.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_DEPRECATED  algo_descr=RSASHA1-NSEC3-SHA1; algo_mnemo=RSASHA1-NSEC3-SHA1; algo_num=7; keytag=51292; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-DEPRECATED-12 DS05_ALGO_DEPRECATED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-DEPRECATED-12.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_DEPRECATED  algo_descr=GOST R 34.10-2001; algo_mnemo=ECC-GOST; algo_num=12; keytag=51297; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-NOT-RECOMMENDED-10 DS05_ALGO_NOT_RECOMMENDED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-NOT-RECOMMENDED-10.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 WARNING  DNSSEC05       DS05_ALGO_NOT_RECOMMENDED  algo_descr=RSA/SHA-512; algo_mnemo=RSASHA512; algo_num=10; keytag=51295; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-NOT-ZONE-SIGN-0 DS05_ALGO_NOT_ZONE_SIGN 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-NOT-ZONE-SIGN-0.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_NOT_ZONE_SIGN  algo_descr=Delete DS; algo_mnemo=DELETE; algo_num=0; keytag=51285; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-NOT-ZONE-SIGN-2 DS05_ALGO_NOT_ZONE_SIGN 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-NOT-ZONE-SIGN-2.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_NOT_ZONE_SIGN  algo_descr=Diffie-Hellman; algo_mnemo=DH; algo_num=2; keytag=51287; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-NOT-ZONE-SIGN-252 DS05_ALGO_NOT_ZONE_SIGN 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-NOT-ZONE-SIGN-252.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_NOT_ZONE_SIGN  algo_descr=Reserved for Indirect Keys; algo_mnemo=INDIRECT; algo_num=252; keytag=51537; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-OK-13 DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-13.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=ECDSA Curve P-256 with SHA-256; algo_mnemo=ECDSAP256SHA256; algo_num=13; keytag=51298; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-OK-14 DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-14.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=ECDSA Curve P-384 with SHA-384; algo_mnemo=ECDSAP384SHA384; algo_num=14; keytag=51299; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-OK-15 DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-15.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=Ed25519; algo_mnemo=ED25519; algo_num=15; keytag=51300; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-OK-16 DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-16.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=Ed448; algo_mnemo=ED448; algo_num=16; keytag=51301; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> 80

Scenario name Mandatory message tags Forbidden message tags
ALGO-OK-17 DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-17.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=SM2 signing algo w SM3 hash algo; algo_mnemo=SM2SM3; algo_num=17; keytag=51302; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-OK-23 DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-23.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=GOST R 34.10-2012; algo_mnemo=ECC-GOST12; algo_num=23; keytag=51308; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-OK-8 DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-OK-8.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=RSA/SHA-256; algo_mnemo=RSASHA256; algo_num=8; keytag=51293; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-PRIVATE-253 DS05_ALGO_PRIVATE 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-PRIVATE-253.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_PRIVATE  algo_descr=private algorithm; algo_mnemo=PRIVATEDNS; algo_num=253; keytag=51538; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-PRIVATE-254 DS05_ALGO_PRIVATE 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-PRIVATE-254.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_PRIVATE  algo_descr=private algorithm OID; algo_mnemo=PRIVATEOID; algo_num=254; keytag=51539; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-RESERVED-11 DS05_ALGO_RESERVED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-11.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_RESERVED  algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=11; keytag=51296; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-RESERVED-123 DS05_ALGO_RESERVED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-123.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_RESERVED  algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=123; keytag=51408; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-RESERVED-251 DS05_ALGO_RESERVED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-251.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_RESERVED  algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=251; keytag=51536; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-RESERVED-255 DS05_ALGO_RESERVED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-255.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_RESERVED  algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=255; keytag=51540; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-RESERVED-4 DS05_ALGO_RESERVED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-4.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_RESERVED  algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=4; keytag=51289; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-RESERVED-9 DS05_ALGO_RESERVED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-RESERVED-9.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 ERROR    DNSSEC05       DS05_ALGO_RESERVED  algo_descr=Reserved; algo_mnemo=RESERVED; algo_num=9; keytag=51294; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-UNASSIGNED-122 DS05_ALGO_UNASSIGNED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-UNASSIGNED-122.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_UNASSIGNED  algo_descr=Unassigned; algo_mnemo=UNASSIGNED; algo_num=122; keytag=51407; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
ALGO-UNASSIGNED-20 DS05_ALGO_UNASSIGNED 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ALGO-UNASSIGNED-20.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 ERROR    DNSSEC05       DS05_ALGO_UNASSIGNED  algo_descr=Unassigned; algo_mnemo=UNASSIGNED; algo_num=20; keytag=51305; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
MIXED-ALGO-1 DS05_ALGO_DEPRECATED, DS05_ALGO_NOT_RECOMMENDED, DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw MIXED-ALGO-1.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 WARNING  DNSSEC05       DS05_ALGO_NOT_RECOMMENDED  algo_descr=RSA/SHA-512; algo_mnemo=RSASHA512; algo_num=10; keytag=51295; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
   0.05 ERROR    DNSSEC05       DS05_ALGO_DEPRECATED  algo_descr=RSASHA1-NSEC3-SHA1; algo_mnemo=RSASHA1-NSEC3-SHA1; algo_num=7; keytag=51292; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
   0.06 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=ECDSA Curve P-256 with SHA-256; algo_mnemo=ECDSAP256SHA256; algo_num=13; keytag=51298; ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
NO-RESPONSE-1 DS05_NO_RESPONSE 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw NO-RESPONSE-1.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
  20.07 WARNING  DNSSEC05       DS05_NO_RESPONSE  ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
NO-RESPONSE-2 DS05_NO_RESPONSE 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw NO-RESPONSE-2.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 WARNING  DNSSEC05       DS05_NO_RESPONSE  ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Scenario name Mandatory message tags Forbidden message tags
SERVER-NO-DNSSEC-1 DS05_SERVER_NO_DNSSEC, DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw SERVER-NO-DNSSEC-1.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=ECDSA Curve P-256 with SHA-256; algo_mnemo=ECDSAP256SHA256; algo_num=13; keytag=51298; ns_list=ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24
   0.06 ERROR    DNSSEC05       DS05_SERVER_NO_DNSSEC  ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23

--> OK

Scenario name Mandatory message tags Forbidden message tags
SHARED-IP-1 DS05_ALGO_OK 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw SHARED-IP-1.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.05 INFO     DNSSEC05       DS05_ALGO_OK  algo_descr=ECDSA Curve P-256 with SHA-256; algo_mnemo=ECDSAP256SHA256; algo_num=13; keytag=51298; ns_list=ns1a.shared-ip-1.dnssec05.xa/127.15.5.31;ns1b.shared-ip-1.dnssec05.xa/127.15.5.31

--> OK

Scenario name Mandatory message tags Forbidden message tags
ZONE-NO-DNSSEC-1 DS05_ZONE_NO_DNSSEC 2) 
$ zonemaster-cli --hints=hintfile.zone --test=dnssec05 --level=info --show-testcase --raw ZONE-NO-DNSSEC-1.dnssec05.xa
   0.00 INFO     Unspecified    GLOBAL_VERSION  version=v8.0.0
   0.06 NOTICE   DNSSEC05       DS05_ZONE_NO_DNSSEC  ns_list=ns1.child.dnssec05.xa/127.15.5.23;ns1.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:23;ns2.child.dnssec05.xa/127.15.5.24;ns2.child.dnssec05.xa/fda1:b2:c3:0:127:15:5:24

--> OK

Reference in New Issue View Git Blame Copy Permalink