BIND 10 #1696: lettuce test for NSEC3 responses
BIND 10 Development
do-not-reply at isc.org
Fri Feb 24 10:11:47 UTC 2012
#1696: lettuce test for NSEC3 responses
-------------------------------------+-------------------------------------
Reporter: | Owner: jinmei
jinmei | Status: reviewing
Type: task | Milestone:
Priority: | Sprint-20120306
critical | Resolution:
Component: | Sensitive: 0
b10-auth | Sub-Project: DNS
Keywords: | Estimated Difficulty: 6
Defect Severity: N/A | Total Hours: 8
Feature Depending on Ticket: |
Add Hours to Ticket: 0 |
Internal?: 0 |
-------------------------------------+-------------------------------------
Changes (by jelte):
* owner: jelte => jinmei
Comment:
> >
> > Right, I've come up with 5 new tests:
> > - 2 cases where one NSEC3 covers multiple parts of the proof (closest
enc, and wildcard match)
>
> This one seems to be using the same query name as the previous (non
> wildcard) test. Is that correct?
> {{{
> #Scenario: 7.2.2 other; Name Error where one NSEC3 covers multiple
parts of proof (wildcard)
> }}}
>
ack, should've been a.w.example, fixed (the intention is that it is the
'other' NSEC3 that is added twice here)
> > If you have any other cases I missed, let me know :)
>
> - Case for Section 7.2.4: no data, type DS (there's no test case for
> it, right?)
added two cases; DS for just some name that exists in the zone, and direct
DS query for an opt-out delegation.
> - run-time collision, if possible (but I guess it's probably
> unrealistic)
>
quite :) should we come across a collision we can of course add it, but
unless we already know of one, they tend to be quite hard to find :)
> > > - check_last_query_section: I'm afraid it's technically not correct
to
> > > convert all inputs to lower-cased:
>
> > Added a comment to the docstring of the step.
>
> The last sentence didn't parse for me:
>
> {{{
> currently the checks are always case insensitive. Should we checks
do
> need to be case sensitive, we can either remove it or make it
optional.
> }}}
>
> Do you mean, "Should the checks do need..." or something?
Actually I meant 'should we decide the checks do need'. Amended (as well
as an extra comment that some tests need updating then).
--
Ticket URL: <http://bind10.isc.org/ticket/1696#comment:14>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list