diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2018-09-08 19:31:49 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2018-09-09 15:45:27 +0100 |
| commit | 624f33dfeab938e907251e3cc3062aa45353384f (patch) | |
| tree | 40a0ab340f82728d3460f4c0c42758b210fa056f /test/dnszones-src | |
| parent | 2b8d6aff36a25e06f418aec9e90fe7668562914b (diff) | |
| download | exim4-624f33dfeab938e907251e3cc3062aa45353384f.tar.gz | |
DANE - testcase for fail under GnuTLS with TA-mode to a selfsigned server cert
Diffstat (limited to 'test/dnszones-src')
| -rw-r--r-- | test/dnszones-src/db.test.ex | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/test/dnszones-src/db.test.ex b/test/dnszones-src/db.test.ex index 492ee5df8..0efd1a28b 100644 --- a/test/dnszones-src/db.test.ex +++ b/test/dnszones-src/db.test.ex @@ -470,6 +470,25 @@ DNSSEC dane256tak A HOSTIPV4 DNSSEC _1225._tcp.dane256tak TLSA 2 1 1 73e279c0f5f5a9ee9851bbbc39023603d7b266acfd0764419c3b07cc380b79f9 +; full MX, both TA & EE modes, cert is selfsigned +; for testing an issue in the gnutls impl +; +; tas: +; openssl x509 -in aux-fixed/cert1 -fingerprint -sha256 -noout \ +; | awk -F= '{print $2}' | tr -d : | tr '[A-F]' '[a-f]' +; +DNSSEC mxdane256tas MX 1 dane256tas +DNSSEC dane256tas A HOSTIPV4 +DNSSEC _1225._tcp.dane256tas TLSA 2 0 1 34d3624101b954d667c1a5ac18078b196cd17fbd61e23df73249c1afab747124 +DNSSEC mxdane256task MX 1 dane256task +DNSSEC dane256task A HOSTIPV4 +DNSSEC _1225._tcp.dane256task TLSA 2 1 1 c1241d8cc61401079437240467a47e21db921d3398883cd9bb038cc461d7beab +DNSSEC mxdane256ees MX 1 dane256ees +DNSSEC dane256ees A HOSTIPV4 +DNSSEC _1225._tcp.dane256ees TLSA 3 1 1 c1241d8cc61401079437240467a47e21db921d3398883cd9bb038cc461d7beab + + + ; A multiple-return MX where all TLSA lookups defer DNSSEC mxdanelazy MX 1 danelazy DNSSEC MX 2 danelazy2 |