upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-11 05:39:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Test simple NODATA answers with NSEC3

Browse source 
(cherry picked from commit a92391f60f)
This commit is contained in:
Petr Špaček 2025-06-09 11:15:04 +02:00
parent 8607e334be
commit 65c488d1d3
1 changed files with 14 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
bin/tests/system/dnssec/tests_nsec3.py
View file

@ -30,7 +30,7 @@ import dns.rdtypes.ANY.RRSIG
import dns.rdtypes.ANY.NSEC3
import dns.rrset
from isctest.hypothesis.strategies import dns_names
from isctest.hypothesis.strategies import dns_names, sampled_from
import isctest
import isctest.name
@ -55,6 +55,19 @@ def do_test_query(
return response, NSEC3Checker(response)
@pytest.mark.parametrize(
"server", [pytest.param(AUTH, id="ns3"), pytest.param(RESOLVER, id="ns4")]
)
@given(qname=sampled_from(sorted(ZONE.reachable)))
def test_nodata(server, qname: dns.name.Name, named_port: int) -> None:
"""An existing name, no wildcards, but a query type for RRset which does not exist"""
response, nsec3check = do_test_query(qname, dns.rdatatype.HINFO, server, named_port)
assert response.rcode() is dns.rcode.NOERROR
nsec3check.prove_name_exists(qname)
nsec3check.check_extraneous_rrs()
def assume_nx_and_no_delegation(qname):
assume(qname not in ZONE.all_existing_names)