3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )"
4 val-override-date: "20120420235959"
5 target-fetch-policy: "0 0 0 0 0"
6 qname-minimisation: "no"
8 trust-anchor-signaling: no
12 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
15 SCENARIO_BEGIN Test validator NSEC3 B.3 optout unsigned, without ce.
21 MATCH opcode qtype qname
27 . IN NS K.ROOT-SERVERS.NET.
29 K.ROOT-SERVERS.NET. IN A 193.0.14.129
33 MATCH opcode subdomain
34 ADJUST copy_id copy_query
39 example. IN NS ns1.example.
40 ; leave out to make unbound take ns1
41 ;example. IN NS ns2.example.
43 ns1.example. IN A 192.0.2.1
44 ; leave out to make unbound take ns1
45 ;ns2.example. IN A 192.0.2.2
53 MATCH opcode qtype qname
54 ADJUST copy_id copy_query
62 MATCH opcode qtype qname
63 ADJUST copy_id copy_query
71 MATCH opcode qtype qname
72 ADJUST copy_id copy_query
79 ; response to DNSKEY priming query
82 MATCH opcode qtype qname
88 example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= )
89 example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )
90 example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== )
94 MATCH opcode qtype qname
96 REPLY QR AA DO NOERROR
100 ;; NSEC3 RR that covers the "next closer" name (c.example)
101 ;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck
102 35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )
103 35mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== )
105 ;; NSEC3 RR that matches the closest encloser (example)
106 ;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom
107 ;0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG )
108 ;0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== )
112 MATCH opcode subdomain
113 ADJUST copy_id copy_query
114 REPLY QR AA DO NOERROR
118 c.example. NS ns1.c.example.
119 c.example. NS ns2.c.example.
121 ;; NSEC3 RR that covers the "next closer" name (c.example)
122 ;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck
123 35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )
124 35mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== )
126 ;; NSEC3 RR that matches the closest encloser (example)
127 ;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom
128 ; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG )
129 ; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== )
132 ns1.c.example. A 192.0.2.7
133 ns2.c.example. A 192.0.2.8
142 MATCH opcode qtype qname
146 ns1.c.example. IN AAAA
150 MATCH opcode qtype qname
154 ns2.c.example. IN AAAA
158 MATCH opcode qtype qname
164 c.example. NS ns1.c.example.
165 c.example. NS ns2.c.example.
167 ns1.c.example. A 192.0.2.7
168 ns2.c.example. A 192.0.2.8
172 MATCH opcode qtype qname
178 mc.c.example. IN MX 50 mx.c.example.
180 c.example. NS ns1.c.example.
181 c.example. NS ns2.c.example.
183 ns1.c.example. A 192.0.2.7
184 ns2.c.example. A 192.0.2.8
192 MATCH opcode qtype qname
196 ns1.c.example. IN AAAA
200 MATCH opcode qtype qname
204 ns2.c.example. IN AAAA
208 MATCH opcode qtype qname
214 c.example. NS ns1.c.example.
215 c.example. NS ns2.c.example.
217 ns1.c.example. A 192.0.2.7
218 ns2.c.example. A 192.0.2.8
222 MATCH opcode qtype qname
228 mc.c.example. IN MX 50 mx.c.example.
230 c.example. NS ns1.c.example.
231 c.example. NS ns2.c.example.
233 ns1.c.example. A 192.0.2.7
234 ns2.c.example. A 192.0.2.8
246 ; recursion happens here.
250 REPLY QR RD RA SERVFAIL