mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-11 10:29:59 -04:00
b9c1b90b50
After SIG and NXT lost their special handling, KEY remained the only RFC 2535-era type still receiving coexistence allowances: KEY alongside CNAME at the same owner, KEY answered from the parent side of a zone cut, KEY kept across CNAME eviction in the cache. RFC 3755 retains type 25 only for SIG(0) and TKEY transaction signatures, and neither relies on those allowances in practice. The in-tree comment that flagged the RFC 3007 parent-side carve-out as "unclear" predicted this cleanup. Zones that publish CNAME and KEY at the same owner — already invalid under RFC 2181 — now fail to load. System test fixtures are updated accordingly, and a new test asserts that SIG, NXT, and KEY records pick up covering RRSIGs when their zone is signed.
52 lines
1.2 KiB
Text
52 lines
1.2 KiB
Text
$TTL 300 ; 5 minutes
|
|
@ IN SOA mname1. . (
|
|
2000042407 ; serial
|
|
20 ; refresh (20 seconds)
|
|
20 ; retry (20 seconds)
|
|
1814400 ; expire (3 weeks)
|
|
3600 ; minimum (1 hour)
|
|
)
|
|
NS ns3
|
|
ns3 A 10.53.0.3
|
|
|
|
a A 10.0.0.1
|
|
b A 10.0.0.2
|
|
c A 10.0.0.3
|
|
d A 10.0.0.4
|
|
e A 10.0.0.5
|
|
f A 10.0.0.6
|
|
g A 10.0.0.7
|
|
z A 10.0.0.26
|
|
a.a.a.a.a.a.a.a.a.a.e A 10.0.0.27
|
|
x CNAME a
|
|
|
|
badalg NS ns3.badalg
|
|
ns3.badalg A 10.53.0.3
|
|
|
|
zonecut.ent NS ns3.zonecut.ent
|
|
ns3.zonecut.ent A 10.53.0.3
|
|
|
|
private NS ns.private
|
|
ns.private A 10.53.0.2
|
|
|
|
insecure NS ns2.insecure
|
|
ns2.insecure A 10.53.0.2
|
|
|
|
nosoa NS ns6.nosoa
|
|
ns6.nosoa A 10.53.0.6
|
|
|
|
normalthenrrsig A 10.0.0.28
|
|
rrsigonly A 10.0.0.29
|
|
|
|
cnameandkey CNAME @
|
|
dnameandkey DNAME @
|
|
|
|
; Legacy DNSSEC types (RFC 3755) carried as opaque zone data and signed.
|
|
sigrr SIG A 6 2 86400 20260331170000 20260318160000 21831 . AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
|
|
nxtrr NXT next.secure.example. A
|
|
keyrr KEY 0 3 13 zJxo/L9JqctLZuL8CqocSmgHUhmQCrQQmRHjwhzXfjDgPoPjRo1nofU7yXHeli8myiulQLZk3h1CTayP8dOvkQ==
|
|
|
|
mixedcase A 10.0.0.30
|
|
mixedCASE TXT "mixed case"
|
|
MIXEDcase AAAA 2002::
|
|
mIxEdCaSe LOC 37 52 56.788 N 121 54 55.02 W 1120m 10m 100m 10m
|