mirror of
https://github.com/NLnetLabs/unbound.git
synced 2024-09-21 06:37:08 +00:00
924789d877
implementation is experimental at this time and not recommended for use on the public internet (the protocol numbers have not been assigned). Needs recent ldns with --enable-ecdsa. - fix memory leak in errorcase for DSA signatures. git-svn-id: file:///svn/unbound/trunk@2606 be551aaa-1e26-0410-a405-d3ace91eadb9
46 lines
1.8 KiB
Plaintext
46 lines
1.8 KiB
Plaintext
;
|
|
; DS match test file.
|
|
; test matching of DS hash against DNSKEYs.
|
|
;
|
|
; enter ENTRYs with a DS and a DNSKEY.
|
|
; These are matched against another.
|
|
; If the query name starts with 'yes' then it must match.
|
|
; If the query name starts with 'no' then it must not match.
|
|
|
|
; These are SHA256 and SHA384 tests from the draft-ietf-dnsext-ecdsa-04
|
|
|
|
ENTRY_BEGIN
|
|
SECTION QUESTION
|
|
yes. IN A
|
|
SECTION ANSWER
|
|
example.net. 3600 IN DS 55648 13 2 ( b4c8c1fe2e7477127b27115656ad6256f424625bf5c1 e2770ce6d6e37df61d17 )
|
|
example.net. 3600 IN DNSKEY 257 3 13 ( GojIhhXUN/u4v54ZQqGSnyhWJwaubCvTmeexv7bR6edb krSqQpF64cYbcB7wNcP+e+MAnLr+Wi9xMWyQLc8NAA== )
|
|
ENTRY_END
|
|
|
|
ENTRY_BEGIN
|
|
SECTION QUESTION
|
|
yes. IN A
|
|
SECTION ANSWER
|
|
example.net. 3600 IN DS 10771 14 4 ( 72d7b62976ce06438e9c0bf319013cf801f09ecc84b8 d7e9495f27e305c6a9b0563a9b5f4d288405c3008a94 6df983d6 )
|
|
example.net. 3600 IN DNSKEY 257 3 14 ( xKYaNhWdGOfJ+nPrL8/arkwf2EY3MDJ+SErKivBVSum1 w/egsXvSADtNJhyem5RCOpgQ6K8X1DRSEkrbYQ+OB+v8 /uX45NBwY8rp65F6Glur8I/mlVNgF6W/qTI37m40 )
|
|
ENTRY_END
|
|
|
|
; same entry as above, but corrupted by a change in the DS, MUST fail
|
|
ENTRY_BEGIN
|
|
SECTION QUESTION
|
|
no. IN A
|
|
SECTION ANSWER
|
|
example.net. 3600 IN DS 55648 13 2 ( b4c8c1fe2e7477126b27115656ad6256f424625bf5c1 e2770ce6d6e37df61d17 )
|
|
example.net. 3600 IN DNSKEY 257 3 13 ( GojIhhXUN/u4v54ZQqGSnyhWJwaubCvTmeexv7bR6edb krSqQpF64cYbcB7wNcP+e+MAnLr+Wi9xMWyQLc8NAA== )
|
|
ENTRY_END
|
|
|
|
; same entry as above, but corrupted by a change in the DS, MUST fail
|
|
ENTRY_BEGIN
|
|
SECTION QUESTION
|
|
no. IN A
|
|
SECTION ANSWER
|
|
example.net. 3600 IN DS 10771 14 4 ( 72d7b62976ce06438e9c0cf319013cf801f09ecc84b8 d7e9495f27e305c6a9b0563a9b5f4d288405c3008a94 6df983d6 )
|
|
example.net. 3600 IN DNSKEY 257 3 14 ( xKYaNhWdGOfJ+nPrL8/arkwf2EY3MDJ+SErKivBVSum1 w/egsXvSADtNJhyem5RCOpgQ6K8X1DRSEkrbYQ+OB+v8 /uX45NBwY8rp65F6Glur8I/mlVNgF6W/qTI37m40 )
|
|
ENTRY_END
|
|
|