upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-02-18 10:09:27 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

- For #1175, update serve-expired tests.

Browse source
This commit is contained in:
Yorgos Thessalonikefs 2024-11-22 16:14:02 +01:00
parent eefdbb341f
commit 9e3c50ec9e
23 changed files with 25 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
doc/Changelog
View file

@ -2,6 +2,7 @@
- Fix #1175: serve-expired does not adhere to secure-by-default
principle. The default value of serve-expired-client-timeout
is set to 1800 as suggested by RFC8767.
- For #1175, update serve-expired tests.
20 November 2024: Yorgos
- Fix comparison to help static analyzer.

1
testdata/cachedb_expired.crpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: no
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
module-config: "cachedb iterator"
cachedb:

1
testdata/cachedb_expired_reply_ttl.crpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: no
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-reply-ttl: 30
module-config: "cachedb iterator"

2
testdata/cachedb_servfail_cname.crpl vendored
View file

@ -3,7 +3,7 @@ server:
target-fetch-policy: "0 0 0 0 0"
qname-minimisation: no
minimal-responses: no
;serve-expired: yes
serve-expired: no
module-config: "cachedb iterator"
cachedb:

1
testdata/cachedb_val_expired.crpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: no
minimal-responses: yes
serve-expired: yes
serve-expired-client-timeout: 0
;module-config: "subnetcache validator cachedb iterator"
module-config: "validator cachedb iterator"

5
testdata/dnstap.tdir/dnstap.conf vendored
View file

@ -12,8 +12,9 @@ server:
do-not-query-localhost: no
local-zone: "example.net." redirect
local-data: "example.net. IN A 10.20.30.41"
serve-expired: yes
serve-expired-reply-ttl: 30
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-reply-ttl: 30
remote-control:
control-enable: yes
control-interface: 127.0.0.1

1
testdata/fwd_0ttlservfail.rpl vendored
View file

@ -2,6 +2,7 @@
; config options go here.
server:
serve-expired: yes
serve-expired-client-timeout: 0
prefetch: yes
forward-zone: name: "." forward-addr: 216.0.0.1
CONFIG_END

1
testdata/serve_expired.rpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
access-control: 127.0.0.1/32 allow_snoop
ede: yes
ede-serve-expired: yes

1
testdata/serve_expired_0ttl_nodata.rpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
log-servfail: yes
ede: yes
ede-serve-expired: yes

1
testdata/serve_expired_0ttl_nxdomain.rpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
log-servfail: yes
ede: yes
ede-serve-expired: yes

1
testdata/serve_expired_0ttl_servfail.rpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
log-servfail: yes
ede: yes
ede-serve-expired: yes

1
testdata/serve_expired_cached_servfail.rpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
log-servfail: yes
ede: yes

1
testdata/serve_expired_cached_servfail_refresh.rpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
log-servfail: yes
ede: yes

1
testdata/serve_expired_reply_ttl.rpl vendored
View file

@ -5,6 +5,7 @@ server:
minimal-responses: no
serve-expired: yes
serve-expired-reply-ttl: 123
serve-expired-client-timeout: 0
ede: yes
ede-serve-expired: yes

1
testdata/serve_expired_ttl.rpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-ttl: 10
stub-zone:

1
testdata/serve_expired_ttl_reset.rpl vendored
View file

@ -4,6 +4,7 @@ server:
serve-expired-ttl: 1
serve-expired-ttl-reset: yes
serve-expired-reply-ttl: 123
serve-expired-client-timeout: 0
ede: yes
ede-serve-expired: yes
forward-zone: name: "." forward-addr: 216.0.0.1

1
testdata/serve_expired_val_bogus.rpl vendored
View file

@ -10,6 +10,7 @@ server:
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
ede: yes
ede-serve-expired: yes

1
testdata/serve_expired_zerottl.rpl vendored
View file

@ -4,6 +4,7 @@ server:
qname-minimisation: "no"
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
ede: yes
ede-serve-expired: yes

1
testdata/serve_original_ttl.rpl vendored
View file

@ -8,6 +8,7 @@ server:
cache-max-ttl: 1000
cache-min-ttl: 20
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-reply-ttl: 123
ede: yes
ede-serve-expired: yes

1
testdata/stat_values.tdir/stat_values.conf vendored
View file

@ -14,6 +14,7 @@ server:
outbound-msg-retry: 0
root-key-sentinel: no
trust-anchor-signaling: no
serve-expired-client-timeout: 0
local-zone: local.zone static
local-data: "www.local.zone A 192.0.2.1"

1
testdata/subnet_cached_servfail.crpl vendored
View file

@ -12,6 +12,7 @@ server:
qname-minimisation: no
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
prefetch: yes
stub-zone:

1
testdata/subnet_global_prefetch_always_forward.crpl vendored
View file

@ -6,6 +6,7 @@ server:
trust-anchor-signaling: no
target-fetch-policy: "0 0 0 0 0"
serve-expired: yes
serve-expired-client-timeout: 0
client-subnet-always-forward: yes
module-config: "subnetcache iterator"
verbosity: 3

1
testdata/subnet_global_prefetch_expired.crpl vendored
View file

@ -14,6 +14,7 @@ server:
qname-minimisation: no
minimal-responses: no
serve-expired: yes
serve-expired-client-timeout: 0
serve-expired-ttl: 1
prefetch: yes