diff options
| author | Heiko Schlittermann (HS12-RIPE) <hs@schlittermann.de> | 2021-05-11 10:48:17 +0200 |
|---|---|---|
| committer | Heiko Schlittermann (HS12-RIPE) <hs@schlittermann.de> | 2021-05-11 10:49:33 +0200 |
| commit | 36237af9cff98b4df7a8535d0dc199e499abd986 (patch) | |
| tree | 917aaf5f436a99d540256114460874cd7f5d6006 /test/dnszones-src | |
| parent | 79aa468aad79f9f1f46efe6a1b2340e7af6fe6f7 (diff) | |
| download | exim4-36237af9cff98b4df7a8535d0dc199e499abd986.tar.gz | |
TLS DANE to multiple recipients w/ different DNSSec status
Diffstat (limited to 'test/dnszones-src')
| -rw-r--r-- | test/dnszones-src/db.test.ex | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/test/dnszones-src/db.test.ex b/test/dnszones-src/db.test.ex index 52972a907..8eeff20a2 100644 --- a/test/dnszones-src/db.test.ex +++ b/test/dnszones-src/db.test.ex @@ -440,12 +440,28 @@ AA a-aa A V4NET.0.0.100 ; | openssl dgst -sha512 \ ; | awk '{print $2}' ; +DNSSEC mxnodane MX 1 nodane DNSSEC mxdane512ee MX 1 dane512ee DNSSEC mxdane512ee1 MX 1 dane512ee mxnondane512ee MX 1 dane512ee DNSSEC dane512ee A HOSTIPV4 +DNSSEC nodane A HOSTIPV4 + DNSSEC _1225._tcp.dane512ee TLSA 3 1 2 c0c2fc12e9fe1abf0ae7b1f2ad2798a4689668db8cf7f7b771a43bf8a4f1d9741ef103bad470b1201157150fbd6182054b0170e90ce66b944a82a0a9c81281af +# mx of mxdane owns a secure A and TLSA record +# used in 5802 +DNSSEC mxdane MX 1 dane512ee + +# mx of mxdanesecchain is a CNAME, with a secure target, that owns a secure A and TLSA record +DNSSEC mxdanesecchain MX 1 danesecchain +DNSSEC danesecchain CNAME dane512ee + +# mx of mxdaneinsecchain is CNAME, with an insecure target that own a secure A and TLSA record +# DANE should report a failure if the message is for ...@mxdaneinsecurechain +DNSSEC mxdaneinsecchain MX 1 daneinsecchain +daneinsecchain CNAME dane512ee + ; A-only, sha256 ; ; openssl x509 -in aux-fixed/exim-ca/example.com/server1.example.com/server1.example.com.pem -noout -pubkey \ |