mirror of
https://github.com/NLnetLabs/unbound.git
synced 2024-09-21 14:47:09 +00:00
95604a90e8
- Keep EDE information for keys close to key creation. - Fix inconsistencies between reply and cached EDEs. - Incorporate EDE caching checks in EDE tests. - Fix some EDE cases where missing DNSKEY was wrongly reported.
34 lines
659 B
Plaintext
34 lines
659 B
Plaintext
; config options
|
|
server:
|
|
ede: yes
|
|
CONFIG_END
|
|
|
|
SCENARIO_BEGIN Test ede-cache-snoop-not-authoritative
|
|
; Scenario overview:
|
|
; - query for example.com. A record with EDNS without the RD bit
|
|
; - check that we get a refused answer with EDE (RFC8914) code 20 - Not Authoritative
|
|
|
|
; Query without RD flag
|
|
STEP 1 QUERY
|
|
ENTRY_BEGIN
|
|
SECTION QUESTION
|
|
example.com. IN A
|
|
SECTION ADDITIONAL
|
|
HEX_EDNSDATA_BEGIN
|
|
HEX_EDNSDATA_END
|
|
ENTRY_END
|
|
|
|
; Check that we got ede 20
|
|
STEP 10 CHECK_ANSWER
|
|
ENTRY_BEGIN
|
|
MATCH all ede=20
|
|
REPLY QR RA REFUSED
|
|
SECTION QUESTION
|
|
example.com. IN A
|
|
SECTION ADDITIONAL
|
|
HEX_EDNSDATA_BEGIN
|
|
HEX_EDNSDATA_END
|
|
ENTRY_END
|
|
|
|
SCENARIO_END
|