diff options
| author |  Miek Gieben <miek@miek.nl>
| 2016-11-06 08:32:07 +0000 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2016-11-06 08:32:07 +0000 |
| commit | 243797a3871a912f14c5d719157708e35179fc7f (patch) | |
| tree | 70d66dfc891b6b25b6df1c6d6501779fc9e9afeb /middleware/file/dnssec_test.go | |
| parent | 8d3418c01535f63129da2fe1ffd5ff8e4ceceb2d (diff) | |
| download | coredns-243797a3871a912f14c5d719157708e35179fc7f.tar.gz coredns-243797a3871a912f14c5d719157708e35179fc7f.tar.zst coredns-243797a3871a912f14c5d719157708e35179fc7f.zip | |
middleware/file: add nsec for wildcard expansion (#382)
A NSEC record is need to deny any other name that might exist.
Also don't blindly perform the interface conversion when getting
glue for NS records as they now may include RRSIG - also add tests
for that.
Diffstat (limited to 'middleware/file/dnssec_test.go')
| -rw-r--r-- | middleware/file/dnssec_test.go | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/middleware/file/dnssec_test.go b/middleware/file/dnssec_test.go index 63099afb4..7f4a0916b 100644 --- a/middleware/file/dnssec_test.go +++ b/middleware/file/dnssec_test.go @@ -30,6 +30,17 @@ var dnssecTestCases = []test.Case{ Extra: []dns.RR{test.OPT(4096, true)}, }, { + Qname: "miek.nl.", Qtype: dns.TypeNS, Do: true, + Answer: []dns.RR{ + test.NS("miek.nl. 1800 IN NS ext.ns.whyscream.net."), + test.NS("miek.nl. 1800 IN NS linode.atoom.net."), + test.NS("miek.nl. 1800 IN NS ns-ext.nlnetlabs.nl."), + test.NS("miek.nl. 1800 IN NS omval.tednet.nl."), + test.RRSIG("miek.nl. 1800 IN RRSIG NS 8 2 1800 20160426031301 20160327031301 12051 miek.nl. ZLtsQhwaz+lHfNpztFoR1Vxs="), + }, + Extra: []dns.RR{test.OPT(4096, true)}, + }, + { Qname: "miek.nl.", Qtype: dns.TypeMX, Do: true, Answer: []dns.RR{ test.MX("miek.nl. 1800 IN MX 1 aspmx.l.google.com."), |