From f015b01072cc16dc8b248131a72835fcedc2e1e2 Mon Sep 17 00:00:00 2001 From: Wouter Wijngaards Date: Tue, 11 Aug 2009 10:24:45 +0000 Subject: [PATCH] updated unit tests. git-svn-id: file:///svn/unbound/trunk@1754 be551aaa-1e26-0410-a405-d3ace91eadb9 --- configure | 2 +- configure.ac | 2 +- doc/Changelog | 1 + testdata/test_signatures.15 | 10 +++++----- testdata/val_ds_gost.rpl | 28 ++++++++++++++-------------- testdata/val_ds_gost_downgrade.rpl | 25 ++++++++++++------------- 6 files changed, 34 insertions(+), 34 deletions(-) diff --git a/configure b/configure index b8bdae6dc..3c8ace48d 100755 --- a/configure +++ b/configure @@ -17825,7 +17825,7 @@ fi { $as_echo "$as_me:$LINENO: result: $ac_cv_lib_crypto_EVP_PKEY_set_type_str" >&5 $as_echo "$ac_cv_lib_crypto_EVP_PKEY_set_type_str" >&6; } if test "x$ac_cv_lib_crypto_EVP_PKEY_set_type_str" = x""yes; then - + : else { { $as_echo "$as_me:$LINENO: error: OpenSSL >= 1.0.0 is needed for GOST support" >&5 $as_echo "$as_me: error: OpenSSL >= 1.0.0 is needed for GOST support" >&2;} diff --git a/configure.ac b/configure.ac index 950a226dd..2fe4871df 100644 --- a/configure.ac +++ b/configure.ac @@ -365,7 +365,7 @@ esac AC_ARG_ENABLE(gost, AC_HELP_STRING([--enable-gost], [Enable GOST support, experimental])) case "$enable_gost" in yes) - AC_CHECK_LIB(crypto, EVP_PKEY_set_type_str, [ ],[AC_MSG_ERROR([OpenSSL >= 1.0.0 is needed for GOST support])]) + AC_CHECK_LIB(crypto, EVP_PKEY_set_type_str, [:],[AC_MSG_ERROR([OpenSSL >= 1.0.0 is needed for GOST support])]) AC_DEFINE([USE_GOST], [1], [Define this to enable GOST support.]) ;; no|*) diff --git a/doc/Changelog b/doc/Changelog index bfaa1fe49..ca7f49acb 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,5 +1,6 @@ 11 August 2009: Wouter - Check for openssl compatible with gost if enabled. + - updated unit test for GOST=211 code. 7 August 2009: Wouter - call OPENSSL_config() in unbound and unit test so that the diff --git a/testdata/test_signatures.15 b/testdata/test_signatures.15 index 5eccebef7..922108383 100644 --- a/testdata/test_signatures.15 +++ b/testdata/test_signatures.15 @@ -3,13 +3,13 @@ ; first entry is a DNSKEY answer, with the DNSKEY rrset used for verification. ; later entries are verified with it. -; Test GOST signatures using algo number 11. +; Test GOST signatures using algo number 211. ENTRY_BEGIN SECTION QUESTION nlnetlabs.nl. IN DNSKEY SECTION ANSWER -nlnetlabs.nl. 3600 IN DNSKEY 256 3 11 Z7JC2FSJ0KQPAflOrM25v5XGVfZDEY54Zz1uslvmHgEL92nBbki3p2dzuiKqjov0iB33XvscfKb44CajJWeH8w== ;{id = 1952 (zsk), size = 512b} +nlnetlabs.nl. 3600 IN DNSKEY 256 3 211 e6GeTsfJnBq4QeL4eNS3SUOYvjFW59ClXtWtAlNgJHcG6damdpIUEyWdMDhZBLJoFNsH4IF06VPK6e+OSA1VGw== ;{id = 41891 (zsk), size = 512b} ENTRY_END ; entry to test @@ -18,7 +18,7 @@ SECTION QUESTION open.nlnetlabs.nl. IN A SECTION ANSWER open.nlnetlabs.nl. 600 IN A 213.154.224.1 -open.nlnetlabs.nl. 600 IN RRSIG A 11 3 600 20090903100515 20090806100515 1952 nlnetlabs.nl. jpKiYiSfGhROoZ5b+dqoxVefwCWN0lkAdkspKlbqz6GsZPfiQMU3UYWmZvTQm9hkwPqI9EKbaBJCw2i0ucBi8g== ;{id = 1952} +open.nlnetlabs.nl. 600 IN RRSIG A 211 3 600 20090903100515 20090806100515 41891 nlnetlabs.nl. 15JHavKuerYdN2wCawQWnCNhlIHNsZU/eSP24FA+jQ21zJRKNS7q+0ExLrhS+6X18L1dyH/SvG2s3/Pq7SfCmQ== ;{id = 41891} ENTRY_END ENTRY_BEGIN @@ -27,7 +27,7 @@ open.nlnetlabs.nl. IN AAAA SECTION ANSWER open.nlnetlabs.nl. 600 IN AAAA 2001:7b8:206:1::1 open.nlnetlabs.nl. 600 IN AAAA 2001:7b8:206:1::53 -open.nlnetlabs.nl. 600 IN RRSIG AAAA 11 3 600 20090903100515 20090806100515 1952 nlnetlabs.nl. rGY+31Hdr5mxYrII+RGdBpbeZhJ9JccnHKocl9v/oMU7aBFl0CC7fWmFS18/AMvxWhNLqxPboir4q/nPpwkNhw== ;{id = 1952} +open.nlnetlabs.nl. 600 IN RRSIG AAAA 211 3 600 20090903100515 20090806100515 41891 nlnetlabs.nl. RM5viXk9r3LymXNEqZimfKIQ9IKsTvrShTJSAvkRtbzL+GmvuHpr+o8vE3/Lebt5apG+WtDe8W8gp98rwV5Vfg== ;{id = 41891} ENTRY_END ENTRY_BEGIN @@ -35,6 +35,6 @@ SECTION QUESTION open.nlnetlabs.nl. IN NSEC SECTION ANSWER open.nlnetlabs.nl. 3600 IN NSEC nlnetlabs.nl. A AAAA RRSIG NSEC -open.nlnetlabs.nl. 3600 IN RRSIG NSEC 11 3 3600 20090903100515 20090806100515 1952 nlnetlabs.nl. wq9NbqmdcasWb9APEPrrT9Z7dcK/1MJ0Pr0iYYv/2QHmRU3gDhyS/ss5I81YS7aePolNwNoASdoU3CCpU0dKTg== ;{id = 1952} +open.nlnetlabs.nl. 3600 IN RRSIG NSEC 211 3 3600 20090903100515 20090806100515 41891 nlnetlabs.nl. mqQf1oTHy9c2Ow1WmHg59uIfNPFPj+K0QAR/ND0DTn1zC+rlRcd+GRUuaDgvIrW8PzbcjboMyDDHcDjIFv6KcA== ;{id = 41891} ENTRY_END diff --git a/testdata/val_ds_gost.rpl b/testdata/val_ds_gost.rpl index a7efb31c3..4f7990496 100644 --- a/testdata/val_ds_gost.rpl +++ b/testdata/val_ds_gost.rpl @@ -115,13 +115,12 @@ SECTION AUTHORITY sub.example.com. IN NS ns.sub.example.com. ; GOST DS for sub.example.com. -sub.example.com. 3600 IN DS 60160 11 3 26d29a3666835a7f564afe26d9e6d8152fa5a2f5b34205d3c567b15d1db161e3 ; xenit-dokuf-kunom-fokal-zahyg-pized-kikiv-kekac-hyrop-hymuz-husyg-docut-facyk-lysah-tolur-camov-fexox -sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926135752 20070829135752 2854 example.com. AAvmZNDDwcdh/v3+uqVqpXdrxC5fGPQDlC6yKqVcYopJgguAZKmQyrM= ;{id = 2854} +sub.example.com. 3600 IN DS 41891 211 203 0d9c87a2d277b5fcc75a76b2d2070afd9911e67b88c238a0af744f934427e96c ; xefen-sicop-dagal-lutaz-sicah-potur-dogeb-ledoz-takac-cenel-rodys-dyvap-borol-gofyn-focid-lapik-sixox +sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926135752 20070829135752 2854 example.com. AEOOWZp0Z4qRX4vgIv8k23AVo1GeZHMqEg4wFC7XPuFxAkPmv4c0Zng= ;{id = 2854} -; SHA1 DS for sub.example.com. -; sub.example.com. 3600 IN DS 60160 11 1 3ba1a174acc4b97c2bd61ac51b1d82ca0daacda9 ; xevop-cymel-garys-gavul-sypyt-kakas-hekic-tobus-pefyp-pyfyp-naxex -; SHA256 DS for sub.example.com. -;sub.example.com. 3600 IN DS 60160 11 2 3e11974de336513b95a9fd67b691c00507a781f141b23b4811ff2586913bbe81 ; xezic-ciheg-tomif-kagyf-ryhop-nazyk-letan-cebib-hecep-leboz-caber-duvug-megaz-zenym-kugof-razam-coxix +; SHA DS for sub.example.com. +; sub.example.com. 3600 IN DS 41891 211 1 d1f20922fd228caf9def1167b7c300c05f528cf9 ; xugez-dadud-duzid-dafap-zeluv-zegok-letis-febys-balah-dafyz-nexyx +; sub.example.com. 3600 IN DS 41891 211 2 ce53c1c4a137881cf958c2e79b09d70535fb7cfea82c727f72872ba60181bfef ; xufih-fobus-gemof-lodec-suvih-mobev-lekub-nahib-hetuz-ruzyz-vypud-sasyl-zosem-lepyp-kubym-cizev-zuxax SECTION ADDITIONAL ns.sub.example.com. IN A 1.2.3.6 @@ -140,10 +139,10 @@ SECTION QUESTION sub.example.com. IN NS SECTION ANSWER sub.example.com. IN NS ns.sub.example.com. -sub.example.com. 3600 IN RRSIG NS 11 3 3600 20070926134150 20070829134150 60160 sub.example.com. xAjPDm2GcSb4lmmACnhofVkA6G4qVbk0w8dnG6AhKV1kFERx0GR7TST4S3UsRQQsqANoIrGTF8ste8seVxcAeA== ;{id = 60160} +sub.example.com. 3600 IN RRSIG NS 211 3 3600 20070926134150 20070829134150 41891 sub.example.com. 8Ncd9cZJ2ulXoSzZGaJA2yyqY7QZEsXd152stleznN7MayqlXlUIYGojdGo+X3+iKnMefXWvGamXfPZUzV687A== ;{id = 41891} SECTION ADDITIONAL ns.sub.example.com. IN A 1.2.3.6 -ns.sub.example.com. 3600 IN RRSIG A 11 4 3600 20070926134150 20070829134150 60160 sub.example.com. 1uEeIwZ4ZVOuFsZPbXvG8+e/9E7gdsW1/2BeKdnG/DMkidpwFqgFSk5L34WZFoK1cD8W5fuyfUrQYDwXNL7oug== ;{id = 60160} +ns.sub.example.com. 3600 IN RRSIG A 211 4 3600 20070926134150 20070829134150 41891 sub.example.com. Q0uZV2jvEoSts3co+r1frG+B/LS9C1UKkKdM/ID6BpUW5Cl12S4jzuVZJ261lYPKpWYcxzmIsWVK+JCS7C+1jQ== ;{id = 41891} ENTRY_END ; response to DNSKEY priming query @@ -154,14 +153,15 @@ REPLY QR NOERROR SECTION QUESTION sub.example.com. IN DNSKEY SECTION ANSWER -sub.example.com. 3600 IN DNSKEY 256 3 11 NC1+ia27IipR4E2dfvv0uwLxgnNipJCB5yrV99XI8gA83ZK4hZ2E9MNZefM71sBJ6zdEx1dGgCxi17BLt9ltqQ== ;{id = 60160 (zsk), size = 512b} -sub.example.com. 3600 IN RRSIG DNSKEY 11 3 3600 20070926134150 20070829134150 60160 sub.example.com. VU9iZy2aao5T+VRZrT8A5kMgJkiZw9TG5g3RfmHojFqrjK4bsxhdMnIRb6OkeLG4cKgBWiFs3rFWD/VmbDGtHw== ;{id = 60160} +sub.example.com. 3600 IN DNSKEY 256 3 211 e6GeTsfJnBq4QeL4eNS3SUOYvjFW59ClXtWtAlNgJHcG6damdpIUEyWdMDhZBLJoFNsH4IF06VPK6e+OSA1VGw== ;{id = 41891 (zsk), size = 512b} +sub.example.com. 3600 IN RRSIG DNSKEY 211 3 3600 20070926134150 20070829134150 41891 sub.example.com. VICst5/k2pZRAymejY7Y9WIDqbzY8WucufnUsFT+ECHvrObcdZCeiuliQrGoE8ieEnu/qTQ6Ydefk6JsPHj98g== ;{id = 41891} SECTION AUTHORITY sub.example.com. IN NS ns.sub.example.com. -sub.example.com. 3600 IN RRSIG NS 11 3 3600 20070926134150 20070829134150 60160 sub.example.com. xAjPDm2GcSb4lmmACnhofVkA6G4qVbk0w8dnG6AhKV1kFERx0GR7TST4S3UsRQQsqANoIrGTF8ste8seVxcAeA== ;{id = 60160} +sub.example.com. 3600 IN RRSIG NS 211 3 3600 20070926134150 20070829134150 41891 sub.example.com. 8Ncd9cZJ2ulXoSzZGaJA2yyqY7QZEsXd152stleznN7MayqlXlUIYGojdGo+X3+iKnMefXWvGamXfPZUzV687A== ;{id = 41891} + SECTION ADDITIONAL ns.sub.example.com. IN A 1.2.3.6 -ns.sub.example.com. 3600 IN RRSIG A 11 4 3600 20070926134150 20070829134150 60160 sub.example.com. 1uEeIwZ4ZVOuFsZPbXvG8+e/9E7gdsW1/2BeKdnG/DMkidpwFqgFSk5L34WZFoK1cD8W5fuyfUrQYDwXNL7oug== ;{id = 60160} +ns.sub.example.com. 3600 IN RRSIG A 211 4 3600 20070926134150 20070829134150 41891 sub.example.com. Q0uZV2jvEoSts3co+r1frG+B/LS9C1UKkKdM/ID6BpUW5Cl12S4jzuVZJ261lYPKpWYcxzmIsWVK+JCS7C+1jQ== ;{id = 41891} ENTRY_END ; response to query of interest @@ -173,7 +173,7 @@ SECTION QUESTION www.sub.example.com. IN A SECTION ANSWER www.sub.example.com. IN A 11.11.11.11 -www.sub.example.com. 3600 IN RRSIG A 11 4 3600 20070926134150 20070829134150 60160 sub.example.com. H2elTn5gq56ur2WopIUSmlRN0WpI7uNVSE1liEPsQ1Gwa3ioLscf+n8Va6srpnh6vR0sxlXQQ9JJ85nXg+COTw== ;{id = 60160} +www.sub.example.com. 3600 IN RRSIG A 211 4 3600 20070926134150 20070829134150 41891 sub.example.com. UO3plmr0HZ8JxKlfrDVuVoj8VQhYJ7lGNK9lA8h3KzD/PMB0UnZzZ3CHYkp/4VVnts3hI/Iy7bPuJ5sCTozW4Q== ;{id = 41891} SECTION AUTHORITY SECTION ADDITIONAL @@ -196,7 +196,7 @@ SECTION QUESTION www.sub.example.com. IN A SECTION ANSWER www.sub.example.com. 3600 IN A 11.11.11.11 -www.sub.example.com. 3600 IN RRSIG A 11 4 3600 20070926134150 20070829134150 60160 sub.example.com. H2elTn5gq56ur2WopIUSmlRN0WpI7uNVSE1liEPsQ1Gwa3ioLscf+n8Va6srpnh6vR0sxlXQQ9JJ85nXg+COTw== ;{id = 60160} +www.sub.example.com. 3600 IN RRSIG A 211 4 3600 20070926134150 20070829134150 41891 sub.example.com. UO3plmr0HZ8JxKlfrDVuVoj8VQhYJ7lGNK9lA8h3KzD/PMB0UnZzZ3CHYkp/4VVnts3hI/Iy7bPuJ5sCTozW4Q== ;{id = 41891} SECTION AUTHORITY SECTION ADDITIONAL ENTRY_END diff --git a/testdata/val_ds_gost_downgrade.rpl b/testdata/val_ds_gost_downgrade.rpl index 03e4cc2fe..41192f1cb 100644 --- a/testdata/val_ds_gost_downgrade.rpl +++ b/testdata/val_ds_gost_downgrade.rpl @@ -115,19 +115,18 @@ SECTION AUTHORITY sub.example.com. IN NS ns.sub.example.com. ; downgrade: false GOST, correct SHA -sub.example.com. 3600 IN DS 60160 11 3 26d29a3666835a7f564afe26d9e6d8152fa5a2f5b34205d3c567b15d1db161e4 +sub.example.com. 3600 IN DS 41891 211 203 0d9c87a2d277b5fcc75a76b2d2070afd9911e67b88c238a0af744f934427e96d ; correct GOST DS for sub.example.com. -;sub.example.com. 3600 IN DS 60160 11 3 26d29a3666835a7f564afe26d9e6d8152fa5a2f5b34205d3c567b15d1db161e3 ; xenit-dokuf-kunom-fokal-zahyg-pized-kikiv-kekac-hyrop-hymuz-husyg-docut-facyk-lysah-tolur-camov-fexox -;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926135752 20070829135752 2854 example.com. AAvmZNDDwcdh/v3+uqVqpXdrxC5fGPQDlC6yKqVcYopJgguAZKmQyrM= ;{id = 2854} +; sub.example.com. 3600 IN DS 41891 211 203 0d9c87a2d277b5fcc75a76b2d2070afd9911e67b88c238a0af744f934427e96c ; xefen-sicop-dagal-lutaz-sicah-potur-dogeb-ledoz-takac-cenel-rodys-dyvap-borol-gofyn-focid-lapik-sixox ; SHA1 DS for sub.example.com. -sub.example.com. 3600 IN DS 60160 11 1 3ba1a174acc4b97c2bd61ac51b1d82ca0daacda9 ; xevop-cymel-garys-gavul-sypyt-kakas-hekic-tobus-pefyp-pyfyp-naxex +sub.example.com. 3600 IN DS 41891 211 1 d1f20922fd228caf9def1167b7c300c05f528cf9 ; xugez-dadud-duzid-dafap-zeluv-zegok-letis-febys-balah-dafyz-nexyx ; SHA256 DS for sub.example.com. -sub.example.com. 3600 IN DS 60160 11 2 3e11974de336513b95a9fd67b691c00507a781f141b23b4811ff2586913bbe81 ; xezic-ciheg-tomif-kagyf-ryhop-nazyk-letan-cebib-hecep-leboz-caber-duvug-megaz-zenym-kugof-razam-coxix +sub.example.com. 3600 IN DS 41891 211 2 ce53c1c4a137881cf958c2e79b09d70535fb7cfea82c727f72872ba60181bfef ; xufih-fobus-gemof-lodec-suvih-mobev-lekub-nahib-hetuz-ruzyz-vypud-sasyl-zosem-lepyp-kubym-cizev-zuxax ; signs SHA1, SHA2 and GOST DSes -sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926135752 20070829135752 2854 example.com. AFgHjdAvQ5+mZn7LcO7wgFt/LlmJmDFFcUaNlJ5xy/MAgTD+J043neY= ;{id = 2854} +sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926135752 20070829135752 2854 example.com. AKIxh12uOPmOtVK9S0odnojy9RWHNN2q6ewmfWCFmkNgHqKC1IQiklE= ;{id = 2854} SECTION ADDITIONAL ns.sub.example.com. IN A 1.2.3.6 @@ -146,10 +145,10 @@ SECTION QUESTION sub.example.com. IN NS SECTION ANSWER sub.example.com. IN NS ns.sub.example.com. -sub.example.com. 3600 IN RRSIG NS 11 3 3600 20070926134150 20070829134150 60160 sub.example.com. xAjPDm2GcSb4lmmACnhofVkA6G4qVbk0w8dnG6AhKV1kFERx0GR7TST4S3UsRQQsqANoIrGTF8ste8seVxcAeA== ;{id = 60160} +sub.example.com. 3600 IN RRSIG NS 211 3 3600 20070926134150 20070829134150 41891 sub.example.com. 8Ncd9cZJ2ulXoSzZGaJA2yyqY7QZEsXd152stleznN7MayqlXlUIYGojdGo+X3+iKnMefXWvGamXfPZUzV687A== ;{id = 41891} SECTION ADDITIONAL ns.sub.example.com. IN A 1.2.3.6 -ns.sub.example.com. 3600 IN RRSIG A 11 4 3600 20070926134150 20070829134150 60160 sub.example.com. 1uEeIwZ4ZVOuFsZPbXvG8+e/9E7gdsW1/2BeKdnG/DMkidpwFqgFSk5L34WZFoK1cD8W5fuyfUrQYDwXNL7oug== ;{id = 60160} +ns.sub.example.com. 3600 IN RRSIG A 211 4 3600 20070926134150 20070829134150 41891 sub.example.com. Q0uZV2jvEoSts3co+r1frG+B/LS9C1UKkKdM/ID6BpUW5Cl12S4jzuVZJ261lYPKpWYcxzmIsWVK+JCS7C+1jQ== ;{id = 41891} ENTRY_END ; response to DNSKEY priming query @@ -161,13 +160,13 @@ SECTION QUESTION sub.example.com. IN DNSKEY SECTION ANSWER sub.example.com. 3600 IN DNSKEY 256 3 11 NC1+ia27IipR4E2dfvv0uwLxgnNipJCB5yrV99XI8gA83ZK4hZ2E9MNZefM71sBJ6zdEx1dGgCxi17BLt9ltqQ== ;{id = 60160 (zsk), size = 512b} -sub.example.com. 3600 IN RRSIG DNSKEY 11 3 3600 20070926134150 20070829134150 60160 sub.example.com. VU9iZy2aao5T+VRZrT8A5kMgJkiZw9TG5g3RfmHojFqrjK4bsxhdMnIRb6OkeLG4cKgBWiFs3rFWD/VmbDGtHw== ;{id = 60160} +sub.example.com. 3600 IN RRSIG DNSKEY 211 3 3600 20070926134150 20070829134150 41891 sub.example.com. VICst5/k2pZRAymejY7Y9WIDqbzY8WucufnUsFT+ECHvrObcdZCeiuliQrGoE8ieEnu/qTQ6Ydefk6JsPHj98g== ;{id = 41891} SECTION AUTHORITY sub.example.com. IN NS ns.sub.example.com. -sub.example.com. 3600 IN RRSIG NS 11 3 3600 20070926134150 20070829134150 60160 sub.example.com. xAjPDm2GcSb4lmmACnhofVkA6G4qVbk0w8dnG6AhKV1kFERx0GR7TST4S3UsRQQsqANoIrGTF8ste8seVxcAeA== ;{id = 60160} +sub.example.com. 3600 IN RRSIG NS 211 3 3600 20070926134150 20070829134150 41891 sub.example.com. 8Ncd9cZJ2ulXoSzZGaJA2yyqY7QZEsXd152stleznN7MayqlXlUIYGojdGo+X3+iKnMefXWvGamXfPZUzV687A== ;{id = 41891} SECTION ADDITIONAL ns.sub.example.com. IN A 1.2.3.6 -ns.sub.example.com. 3600 IN RRSIG A 11 4 3600 20070926134150 20070829134150 60160 sub.example.com. 1uEeIwZ4ZVOuFsZPbXvG8+e/9E7gdsW1/2BeKdnG/DMkidpwFqgFSk5L34WZFoK1cD8W5fuyfUrQYDwXNL7oug== ;{id = 60160} +ns.sub.example.com. 3600 IN RRSIG A 211 4 3600 20070926134150 20070829134150 41891 sub.example.com. Q0uZV2jvEoSts3co+r1frG+B/LS9C1UKkKdM/ID6BpUW5Cl12S4jzuVZJ261lYPKpWYcxzmIsWVK+JCS7C+1jQ== ;{id = 41891} ENTRY_END ; response to query of interest @@ -179,7 +178,7 @@ SECTION QUESTION www.sub.example.com. IN A SECTION ANSWER www.sub.example.com. IN A 11.11.11.11 -www.sub.example.com. 3600 IN RRSIG A 11 4 3600 20070926134150 20070829134150 60160 sub.example.com. H2elTn5gq56ur2WopIUSmlRN0WpI7uNVSE1liEPsQ1Gwa3ioLscf+n8Va6srpnh6vR0sxlXQQ9JJ85nXg+COTw== ;{id = 60160} +www.sub.example.com. 3600 IN RRSIG A 211 4 3600 20070926134150 20070829134150 41891 sub.example.com. UO3plmr0HZ8JxKlfrDVuVoj8VQhYJ7lGNK9lA8h3KzD/PMB0UnZzZ3CHYkp/4VVnts3hI/Iy7bPuJ5sCTozW4Q== ;{id = 41891} SECTION AUTHORITY SECTION ADDITIONAL @@ -203,7 +202,7 @@ SECTION QUESTION www.sub.example.com. IN A SECTION ANSWER ;www.sub.example.com. 3600 IN A 11.11.11.11 -;www.sub.example.com. 3600 IN RRSIG A 11 4 3600 20070926134150 20070829134150 60160 sub.example.com. H2elTn5gq56ur2WopIUSmlRN0WpI7uNVSE1liEPsQ1Gwa3ioLscf+n8Va6srpnh6vR0sxlXQQ9JJ85nXg+COTw== ;{id = 60160} +;www.sub.example.com. 3600 IN RRSIG A 211 4 3600 20070926134150 20070829134150 41891 sub.example.com. UO3plmr0HZ8JxKlfrDVuVoj8VQhYJ7lGNK9lA8h3KzD/PMB0UnZzZ3CHYkp/4VVnts3hI/Iy7bPuJ5sCTozW4Q== ;{id = 41891} SECTION AUTHORITY SECTION ADDITIONAL ENTRY_END