# Copyright (C) Dnspython Contributors, see LICENSE for text of ISC license # Copyright (C) 2003-2017 Nominum, Inc. # # Permission to use, copy, modify, and distribute this software and its # documentation for any purpose with or without fee is hereby granted, # provided that the above copyright notice and this permission notice # appear in all copies. # # THE SOFTWARE IS PROVIDED "AS IS" AND NOMINUM DISCLAIMS ALL WARRANTIES # WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF # MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL NOMINUM BE LIABLE FOR # ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES # WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN # ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT # OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. import selectors import socket import sys import time import unittest from io import StringIO from unittest.mock import patch import pytest import dns.e164 import dns.message import dns.name import dns.quic import dns.rdataclass import dns.rdatatype import dns.resolver import dns.reversename import dns.tsig import dns.tsigkeyring import tests.util # Some tests use a "nano nameserver" for testing. It requires trio # and threading, so try to import it and if it doesn't work, skip # those tests. try: from .nanonameserver import Server _nanonameserver_available = True except ImportError: _nanonameserver_available = False class Server(object): pass # Look for systemd-resolved, as it does dangling CNAME responses incorrectly. # # Currently we simply check if the nameserver is 127.0.0.53. _systemd_resolved_present = False try: _resolver = dns.resolver.Resolver() if _resolver.nameservers == ["127.0.0.53"]: _systemd_resolved_present = True except Exception: pass # Docker too! It not only has problems with dangling CNAME, but also says NXDOMAIN when # it should say no error no data. _is_docker = tests.util.is_docker() resolv_conf = """ /t/t # comment 1 ; comment 2 domain foo nameserver 10.0.0.1 nameserver 10.0.0.2 """ resolv_conf_options1 = """ nameserver 10.0.0.1 nameserver 10.0.0.2 search search1 search2 options rotate timeout:1 edns0 ndots:2 """ bad_timeout_1 = """ nameserver 10.0.0.1 nameserver 10.0.0.2 options rotate timeout """ bad_timeout_2 = """ nameserver 10.0.0.1 nameserver 10.0.0.2 options rotate timeout:bogus """ bad_ndots_1 = """ nameserver 10.0.0.1 nameserver 10.0.0.2 options rotate ndots """ bad_ndots_2 = """ nameserver 10.0.0.1 nameserver 10.0.0.2 options rotate ndots:bogus """ no_nameservers = """ options rotate """ unknown_and_bad_directives = """ nameserver 10.0.0.1 foo bar bad """ unknown_option = """ nameserver 10.0.0.1 option foobar """ message_text = """id 1234 opcode QUERY rcode NOERROR flags QR AA RD ;QUESTION example. IN A ;ANSWER example. 1 IN A 10.0.0.1 ;AUTHORITY ;ADDITIONAL """ message_text_mx = """id 1234 opcode QUERY rcode NOERROR flags QR AA RD ;QUESTION example. IN MX ;ANSWER example. 1 IN A 10.0.0.1 ;AUTHORITY ;ADDITIONAL """ dangling_cname_0_message_text = """id 10000 opcode QUERY rcode NOERROR flags QR AA RD RA ;QUESTION 91.11.17.172.in-addr.arpa.none. IN PTR ;ANSWER ;AUTHORITY ;ADDITIONAL """ dangling_cname_1_message_text = """id 10001 opcode QUERY rcode NOERROR flags QR AA RD RA ;QUESTION 91.11.17.172.in-addr.arpa. IN PTR ;ANSWER 11.17.172.in-addr.arpa. 86400 IN DNAME 11.8-22.17.172.in-addr.arpa. 91.11.17.172.in-addr.arpa. 86400 IN CNAME 91.11.8-22.17.172.in-addr.arpa. ;AUTHORITY ;ADDITIONAL """ dangling_cname_2_message_text = """id 10002 opcode QUERY rcode NOERROR flags QR AA RD RA ;QUESTION 91.11.17.172.in-addr.arpa.example. IN PTR ;ANSWER 91.11.17.172.in-addr.arpa.example. 86400 IN CNAME 91.11.17.172.in-addr.arpa.base. 91.11.17.172.in-addr.arpa.base. 86400 IN CNAME 91.11.17.172.clients.example. 91.11.17.172.clients.example. 86400 IN CNAME 91-11-17-172.dynamic.example. ;AUTHORITY ;ADDITIONAL """ class FakeAnswer(object): def __init__(self, expiration): self.expiration = expiration class FakeTime: # Mock the clock! def __init__(self, now=None, want_fake=True): if now is None: now = time.time() self.now = now self.saved_time = time.time self.want_fake = want_fake def __enter__(self): if self.want_fake: time.time = self.time return self def __exit__(self, exc_type, exc_value, traceback): if self.want_fake: time.time = self.saved_time return False def time(self): if self.want_fake: return self.now else: return time.time() def sleep(self, offset): if self.want_fake: self.now += offset else: time.sleep(offset) class BaseResolverTests(unittest.TestCase): def testRead(self): f = StringIO(resolv_conf) r = dns.resolver.Resolver(configure=False) r.read_resolv_conf(f) self.assertEqual(r.nameservers, ["10.0.0.1", "10.0.0.2"]) self.assertEqual(r.domain, dns.name.from_text("foo")) def testReadOptions(self): f = StringIO(resolv_conf_options1) r = dns.resolver.Resolver(configure=False) r.read_resolv_conf(f) self.assertEqual(r.nameservers, ["10.0.0.1", "10.0.0.2"]) self.assertTrue(r.rotate) self.assertEqual(r.timeout, 1) self.assertEqual(r.ndots, 2) self.assertEqual(r.edns, 0) self.assertEqual(r.payload, dns.message.DEFAULT_EDNS_PAYLOAD) def testReadOptionsBadTimeouts(self): f = StringIO(bad_timeout_1) r = dns.resolver.Resolver(configure=False) r.read_resolv_conf(f) # timeout should still be default self.assertEqual(r.timeout, 2.0) f = StringIO(bad_timeout_2) r = dns.resolver.Resolver(configure=False) r.read_resolv_conf(f) # timeout should still be default self.assertEqual(r.timeout, 2.0) def testReadOptionsBadNdots(self): f = StringIO(bad_ndots_1) r = dns.resolver.Resolver(configure=False) r.read_resolv_conf(f) # ndots should still be default self.assertEqual(r.ndots, None) f = StringIO(bad_ndots_2) r = dns.resolver.Resolver(configure=False) r.read_resolv_conf(f) # ndots should still be default self.assertEqual(r.ndots, None) def testReadNoNameservers(self): f = StringIO(no_nameservers) r = dns.resolver.Resolver(configure=False) with self.assertRaises(dns.resolver.NoResolverConfiguration): r.read_resolv_conf(f) def testReadUnknownDirective(self): # The real test here is ignoring the unknown directive and the bad # directive. f = StringIO(unknown_and_bad_directives) r = dns.resolver.Resolver(configure=False) r.read_resolv_conf(f) self.assertEqual(r.nameservers, ["10.0.0.1"]) def testReadUnknownOption(self): # The real test here is ignoring the unknown option f = StringIO(unknown_option) r = dns.resolver.Resolver(configure=False) r.read_resolv_conf(f) self.assertEqual(r.nameservers, ["10.0.0.1"]) def testCacheExpiration(self): with FakeTime() as fake_time: message = dns.message.from_text(message_text) name = dns.name.from_text("example.") answer = dns.resolver.Answer( name, dns.rdatatype.A, dns.rdataclass.IN, message ) cache = dns.resolver.Cache() cache.put((name, dns.rdatatype.A, dns.rdataclass.IN), answer) fake_time.sleep(2) self.assertTrue( cache.get((name, dns.rdatatype.A, dns.rdataclass.IN)) is None ) def testCacheCleaning(self): with FakeTime() as fake_time: message = dns.message.from_text(message_text) name = dns.name.from_text("example.") answer = dns.resolver.Answer( name, dns.rdatatype.A, dns.rdataclass.IN, message ) cache = dns.resolver.Cache(cleaning_interval=1.0) cache.put((name, dns.rdatatype.A, dns.rdataclass.IN), answer) fake_time.sleep(2) cache._maybe_clean() self.assertTrue( cache.data.get((name, dns.rdatatype.A, dns.rdataclass.IN)) is None ) def testCacheNonCleaning(self): with FakeTime() as fake_time: message = dns.message.from_text(message_text) name = dns.name.from_text("example.") answer = dns.resolver.Answer( name, dns.rdatatype.A, dns.rdataclass.IN, message ) # override TTL as we're testing non-cleaning answer.expiration = fake_time.time() + 100 cache = dns.resolver.Cache(cleaning_interval=1.0) cache.put((name, dns.rdatatype.A, dns.rdataclass.IN), answer) fake_time.sleep(1.1) self.assertEqual( cache.get((name, dns.rdatatype.A, dns.rdataclass.IN)), answer ) def testIndexErrorOnEmptyRRsetAccess(self): def bad(): message = dns.message.from_text(message_text_mx) name = dns.name.from_text("example.") answer = dns.resolver.Answer( name, dns.rdatatype.MX, dns.rdataclass.IN, message ) return answer[0] self.assertRaises(IndexError, bad) def testIndexErrorOnEmptyRRsetDelete(self): def bad(): message = dns.message.from_text(message_text_mx) name = dns.name.from_text("example.") answer = dns.resolver.Answer( name, dns.rdatatype.MX, dns.rdataclass.IN, message ) del answer[0] self.assertRaises(IndexError, bad) def testRRsetDelete(self): message = dns.message.from_text(message_text) name = dns.name.from_text("example.") answer = dns.resolver.Answer(name, dns.rdatatype.A, dns.rdataclass.IN, message) del answer[0] self.assertEqual(len(answer), 0) def testLRUReplace(self): cache = dns.resolver.LRUCache(4) for i in range(0, 5): name = dns.name.from_text("example%d." % i) answer = FakeAnswer(time.time() + 1) cache.put((name, dns.rdatatype.A, dns.rdataclass.IN), answer) for i in range(0, 5): name = dns.name.from_text("example%d." % i) if i == 0: self.assertTrue( cache.get((name, dns.rdatatype.A, dns.rdataclass.IN)) is None ) else: self.assertTrue( not cache.get((name, dns.rdatatype.A, dns.rdataclass.IN)) is None ) def testLRUDoesLRU(self): cache = dns.resolver.LRUCache(4) for i in range(0, 4): name = dns.name.from_text("example%d." % i) answer = FakeAnswer(time.time() + 1) cache.put((name, dns.rdatatype.A, dns.rdataclass.IN), answer) name = dns.name.from_text("example0.") cache.get((name, dns.rdatatype.A, dns.rdataclass.IN)) # The LRU is now example1. name = dns.name.from_text("example4.") answer = FakeAnswer(time.time() + 1) cache.put((name, dns.rdatatype.A, dns.rdataclass.IN), answer) for i in range(0, 5): name = dns.name.from_text("example%d." % i) if i == 1: self.assertTrue( cache.get((name, dns.rdatatype.A, dns.rdataclass.IN)) is None ) else: self.assertTrue( not cache.get((name, dns.rdatatype.A, dns.rdataclass.IN)) is None ) def testLRUExpiration(self): with FakeTime() as fake_time: cache = dns.resolver.LRUCache(4) for i in range(0, 4): name = dns.name.from_text("example%d." % i) answer = FakeAnswer(time.time() + 1) cache.put((name, dns.rdatatype.A, dns.rdataclass.IN), answer) fake_time.sleep(2) for i in range(0, 4): name = dns.name.from_text("example%d." % i) self.assertTrue( cache.get((name, dns.rdatatype.A, dns.rdataclass.IN)) is None ) def test_cache_flush(self): name1 = dns.name.from_text("name1") name2 = dns.name.from_text("name2") name3 = dns.name.from_text("name3") basic_cache = dns.resolver.Cache() lru_cache = dns.resolver.LRUCache(100) for cache in [basic_cache, lru_cache]: answer1 = FakeAnswer(time.time() + 10) answer2 = FakeAnswer(time.time() + 10) cache.put((name1, dns.rdatatype.A, dns.rdataclass.IN), answer1) cache.put((name2, dns.rdatatype.A, dns.rdataclass.IN), answer2) canswer = cache.get((name1, dns.rdatatype.A, dns.rdataclass.IN)) self.assertTrue(canswer is answer1) canswer = cache.get((name2, dns.rdatatype.A, dns.rdataclass.IN)) self.assertTrue(canswer is answer2) # explicit flush of nonexistent key, just to exercise the branch cache.flush((name3, dns.rdatatype.A, dns.rdataclass.IN)) canswer = cache.get((name1, dns.rdatatype.A, dns.rdataclass.IN)) self.assertTrue(canswer is answer1) canswer = cache.get((name2, dns.rdatatype.A, dns.rdataclass.IN)) self.assertTrue(canswer is answer2) # explicit flush cache.flush((name1, dns.rdatatype.A, dns.rdataclass.IN)) canswer = cache.get((name1, dns.rdatatype.A, dns.rdataclass.IN)) self.assertTrue(canswer is None) canswer = cache.get((name2, dns.rdatatype.A, dns.rdataclass.IN)) self.assertTrue(canswer is answer2) # flush all cache.flush() canswer = cache.get((name1, dns.rdatatype.A, dns.rdataclass.IN)) self.assertTrue(canswer is None) canswer = cache.get((name2, dns.rdatatype.A, dns.rdataclass.IN)) self.assertTrue(canswer is None) def test_LRUCache_set_max_size(self): cache = dns.resolver.LRUCache(4) self.assertEqual(cache.max_size, 4) cache.set_max_size(0) self.assertEqual(cache.max_size, 1) def test_LRUCache_overwrite(self): def on_lru_list(cache, key, value): cnode = cache.sentinel.next while cnode != cache.sentinel: if cnode.key == key and cnode.value is value: return True cnode = cnode.next return False cache = dns.resolver.LRUCache(4) answer1 = FakeAnswer(time.time() + 10) answer2 = FakeAnswer(time.time() + 10) key = (dns.name.from_text("key."), dns.rdatatype.A, dns.rdataclass.IN) cache.put(key, answer1) canswer = cache.get(key) self.assertTrue(canswer is answer1) self.assertTrue(on_lru_list(cache, key, answer1)) cache.put(key, answer2) canswer = cache.get(key) self.assertTrue(canswer is answer2) self.assertFalse(on_lru_list(cache, key, answer1)) self.assertTrue(on_lru_list(cache, key, answer2)) def test_cache_stats(self): caches = [dns.resolver.Cache(), dns.resolver.LRUCache(4)] key1 = (dns.name.from_text("key1."), dns.rdatatype.A, dns.rdataclass.IN) key2 = (dns.name.from_text("key2."), dns.rdatatype.A, dns.rdataclass.IN) for cache in caches: answer1 = FakeAnswer(time.time() + 10) answer2 = FakeAnswer(10) # expired! a = cache.get(key1) self.assertIsNone(a) self.assertEqual(cache.hits(), 0) self.assertEqual(cache.misses(), 1) if isinstance(cache, dns.resolver.LRUCache): self.assertEqual(cache.get_hits_for_key(key1), 0) cache.put(key1, answer1) a = cache.get(key1) self.assertIs(a, answer1) self.assertEqual(cache.hits(), 1) self.assertEqual(cache.misses(), 1) if isinstance(cache, dns.resolver.LRUCache): self.assertEqual(cache.get_hits_for_key(key1), 1) cache.put(key2, answer2) a = cache.get(key2) self.assertIsNone(a) self.assertEqual(cache.hits(), 1) self.assertEqual(cache.misses(), 2) if isinstance(cache, dns.resolver.LRUCache): self.assertEqual(cache.get_hits_for_key(key2), 0) stats = cache.get_statistics_snapshot() self.assertEqual(stats.hits, 1) self.assertEqual(stats.misses, 2) cache.reset_statistics() stats = cache.get_statistics_snapshot() self.assertEqual(stats.hits, 0) self.assertEqual(stats.misses, 0) def testEmptyAnswerSection(self): # TODO: dangling_cname_0_message_text was the only sample message # with an empty answer section. Other than that it doesn't # apply. message = dns.message.from_text(dangling_cname_0_message_text) name = dns.name.from_text("example.") answer = dns.resolver.Answer(name, dns.rdatatype.A, dns.rdataclass.IN, message) def test_python_internal_truth(answer): if answer: return True else: return False self.assertFalse(test_python_internal_truth(answer)) for a in answer: pass def testSearchListsRelative(self): res = dns.resolver.Resolver(configure=False) res.domain = dns.name.from_text("example") res.search = [dns.name.from_text(x) for x in ["dnspython.org", "dnspython.net"]] qname = dns.name.from_text("www", None) qnames = res._get_qnames_to_try(qname, True) self.assertEqual( qnames, [ dns.name.from_text(x) for x in ["www.dnspython.org", "www.dnspython.net", "www."] ], ) qnames = res._get_qnames_to_try(qname, False) self.assertEqual(qnames, [dns.name.from_text("www.")]) qnames = res._get_qnames_to_try(qname, None) self.assertEqual(qnames, [dns.name.from_text("www.")]) # # Now change search default on resolver to True # res.use_search_by_default = True qnames = res._get_qnames_to_try(qname, None) self.assertEqual( qnames, [ dns.name.from_text(x) for x in ["www.dnspython.org", "www.dnspython.net", "www."] ], ) # # Now test ndots # qname = dns.name.from_text("a.b", None) res.ndots = 1 qnames = res._get_qnames_to_try(qname, True) self.assertEqual( qnames, [ dns.name.from_text(x) for x in ["a.b", "a.b.dnspython.org", "a.b.dnspython.net"] ], ) res.ndots = 2 qnames = res._get_qnames_to_try(qname, True) self.assertEqual( qnames, [ dns.name.from_text(x) for x in ["a.b.dnspython.org", "a.b.dnspython.net", "a.b"] ], ) qname = dns.name.from_text("a.b.c", None) qnames = res._get_qnames_to_try(qname, True) self.assertEqual( qnames, [ dns.name.from_text(x) for x in ["a.b.c", "a.b.c.dnspython.org", "a.b.c.dnspython.net"] ], ) def testSearchListsAbsolute(self): res = dns.resolver.Resolver(configure=False) qname = dns.name.from_text("absolute") qnames = res._get_qnames_to_try(qname, True) self.assertEqual(qnames, [qname]) qnames = res._get_qnames_to_try(qname, False) self.assertEqual(qnames, [qname]) qnames = res._get_qnames_to_try(qname, None) self.assertEqual(qnames, [qname]) def testUseEDNS(self): r = dns.resolver.Resolver(configure=False) r.use_edns(None) self.assertEqual(r.edns, -1) r.use_edns(False) self.assertEqual(r.edns, -1) r.use_edns(True) self.assertEqual(r.edns, 0) def testSetFlags(self): flags = dns.flags.CD | dns.flags.RD r = dns.resolver.Resolver(configure=False) r.set_flags(flags) self.assertEqual(r.flags, flags) def testUseTSIG(self): keyring = dns.tsigkeyring.from_text({"keyname.": "NjHwPsMKjdN++dOfE5iAiQ=="}) r = dns.resolver.Resolver(configure=False) r.use_tsig(keyring) self.assertEqual(r.keyring, keyring) self.assertEqual(r.keyname, None) self.assertEqual(r.keyalgorithm, dns.tsig.default_algorithm) keyname = dns.name.from_text("keyname") @unittest.skipIf(not tests.util.is_internet_reachable(), "Internet not reachable") class LiveResolverTests(unittest.TestCase): def testZoneForName1(self): name = dns.name.from_text("www.dnspython.org.") ezname = dns.name.from_text("dnspython.org.") zname = dns.resolver.zone_for_name(name) self.assertEqual(zname, ezname) def testZoneForName2(self): name = dns.name.from_text("a.b.www.dnspython.org.") ezname = dns.name.from_text("dnspython.org.") zname = dns.resolver.zone_for_name(name) self.assertEqual(zname, ezname) def testZoneForName3(self): ezname = dns.name.from_text("dnspython.org.") zname = dns.resolver.zone_for_name("dnspython.org.") self.assertEqual(zname, ezname) def testZoneForName4(self): def bad(): name = dns.name.from_text("dnspython.org", None) dns.resolver.zone_for_name(name) self.assertRaises(dns.resolver.NotAbsolute, bad) def testResolve(self): answer = dns.resolver.resolve("dns.google.", "A") seen = set([rdata.address for rdata in answer]) self.assertTrue("8.8.8.8" in seen) self.assertTrue("8.8.4.4" in seen) def testResolveTCP(self): answer = dns.resolver.resolve("dns.google.", "A", tcp=True) seen = set([rdata.address for rdata in answer]) self.assertTrue("8.8.8.8" in seen) self.assertTrue("8.8.4.4" in seen) def testResolveAddress(self): answer = dns.resolver.resolve_address("8.8.8.8") dnsgoogle = dns.name.from_text("dns.google.") self.assertEqual(answer[0].target, dnsgoogle) def testResolveName(self): answers = dns.resolver.resolve_name("dns.google.") seen = set(answers.addresses()) self.assertEqual(len(seen), 4) self.assertIn("8.8.8.8", seen) self.assertIn("8.8.4.4", seen) self.assertIn("2001:4860:4860::8844", seen) self.assertIn("2001:4860:4860::8888", seen) answers = dns.resolver.resolve_name("dns.google.", socket.AF_INET) seen = set(answers.addresses()) self.assertEqual(len(seen), 2) self.assertIn("8.8.8.8", seen) self.assertIn("8.8.4.4", seen) answers = dns.resolver.resolve_name("dns.google.", socket.AF_INET6) seen = set(answers.addresses()) self.assertEqual(len(seen), 2) self.assertIn("2001:4860:4860::8844", seen) self.assertIn("2001:4860:4860::8888", seen) with self.assertRaises(dns.resolver.NXDOMAIN): dns.resolver.resolve_name("nxdomain.dnspython.org") if not _is_docker: # We skip docker as it says NXDOMAIN! with self.assertRaises(dns.resolver.NoAnswer): dns.resolver.resolve_name(dns.reversename.from_address("8.8.8.8")) @patch.object(dns.message.Message, "use_edns") def testResolveEdnsOptions(self, message_use_edns_mock): resolver = dns.resolver.Resolver() options = [dns.edns.ECSOption("1.1.1.1")] resolver.use_edns(True, options=options) resolver.resolve("dns.google.", "A") assert {"options": options} in message_use_edns_mock.call_args def testResolveNodataException(self): def bad(): dns.resolver.resolve("dnspython.org.", "SRV") self.assertRaises(dns.resolver.NoAnswer, bad) def testResolveNodataAnswer(self): qname = dns.name.from_text("dnspython.org") qclass = dns.rdataclass.from_text("IN") qtype = dns.rdatatype.from_text("SRV") answer = dns.resolver.resolve(qname, qtype, raise_on_no_answer=False) self.assertRaises( KeyError, lambda: answer.response.find_rrset( answer.response.answer, qname, qclass, qtype ), ) def testResolveNXDOMAIN(self): qname = dns.name.from_text("nxdomain.dnspython.org") qclass = dns.rdataclass.from_text("IN") qtype = dns.rdatatype.from_text("A") def bad(): answer = dns.resolver.resolve(qname, qtype) try: dns.resolver.resolve(qname, qtype) self.assertTrue(False) # should not happen! except dns.resolver.NXDOMAIN as nx: self.assertIn(qname, nx.qnames()) self.assertGreaterEqual(len(nx.responses()), 1) @unittest.skipIf(not tests.util.have_ipv4(), "IPv4 not reachable") def testResolveCacheHit(self): res = dns.resolver.Resolver(configure=False) res.nameservers = ["8.8.8.8"] res.cache = dns.resolver.Cache() answer1 = res.resolve("dns.google.", "A") seen = set([rdata.address for rdata in answer1]) self.assertIn("8.8.8.8", seen) self.assertIn("8.8.4.4", seen) answer2 = res.resolve("dns.google.", "A") self.assertIs(answer2, answer1) @unittest.skipIf(not tests.util.have_ipv4(), "IPv4 not reachable") def testTLSNameserver(self): res = dns.resolver.Resolver(configure=False) res.nameservers = [dns.nameserver.DoTNameserver("8.8.8.8", 853)] answer = res.resolve("dns.google.", "A") seen = set([rdata.address for rdata in answer]) self.assertIn("8.8.8.8", seen) self.assertIn("8.8.4.4", seen) @unittest.skipIf( not (tests.util.have_ipv4() and dns.quic.have_quic), "IPv4 not reachable or QUIC not available", ) def testQuicNameserver(self): res = dns.resolver.Resolver(configure=False) res.nameservers = [dns.nameserver.DoQNameserver("94.140.14.14", 784)] answer = res.resolve("dns.adguard.com.", "A") seen = set([rdata.address for rdata in answer]) self.assertIn("94.140.14.14", seen) self.assertIn("94.140.15.15", seen) @unittest.skipIf(not tests.util.have_ipv4(), "IPv4 not reachable") def testResolveAtAddress(self): answer = dns.resolver.resolve_at("8.8.8.8", "dns.google.", "A") seen = set([rdata.address for rdata in answer]) self.assertIn("8.8.8.8", seen) self.assertIn("8.8.4.4", seen) @unittest.skipIf(not tests.util.have_ipv4(), "IPv4 not reachable") def testResolveAtName(self): answer = dns.resolver.resolve_at( "dns.google", "dns.google.", "A", family=socket.AF_INET ) seen = set([rdata.address for rdata in answer]) self.assertIn("8.8.8.8", seen) self.assertIn("8.8.4.4", seen) def testCanonicalNameNoCNAME(self): cname = dns.name.from_text("www.google.com") self.assertEqual(dns.resolver.canonical_name("www.google.com"), cname) def testCanonicalNameCNAME(self): name = dns.name.from_text("www.dnspython.org") cname = dns.name.from_text("dmfrjf4ips8xa.cloudfront.net") self.assertEqual(dns.resolver.canonical_name(name), cname) @unittest.skipIf( _systemd_resolved_present or _is_docker, "systemd-resolved or docker in use" ) def testCanonicalNameDangling(self): name = dns.name.from_text("dangling-cname.dnspython.org") cname = dns.name.from_text("dangling-target.dnspython.org") self.assertEqual(dns.resolver.canonical_name(name), cname) def testNameserverSetting(self): res = dns.resolver.Resolver(configure=False) ns = ["1.2.3.4", "::1", "https://ns.example"] res.nameservers = ns[:] self.assertEqual(res.nameservers, ns) for ns in ["999.999.999.999", "ns.example.", "bogus://ns.example"]: with self.assertRaises(ValueError): res.nameservers = [ns] class NXDOMAINExceptionTestCase(unittest.TestCase): # pylint: disable=broad-except def test_nxdomain_compatible(self): n1 = dns.name.Name(("a", "b", "")) n2 = dns.name.Name(("a", "b", "s", "")) try: raise dns.resolver.NXDOMAIN except dns.exception.DNSException as e: self.assertEqual(e.args, (e.__doc__,)) self.assertTrue(("kwargs" in dir(e))) self.assertEqual(str(e), e.__doc__, str(e)) self.assertTrue(("qnames" not in e.kwargs)) self.assertTrue(("responses" not in e.kwargs)) try: raise dns.resolver.NXDOMAIN("errmsg") except dns.exception.DNSException as e: self.assertEqual(e.args, ("errmsg",)) self.assertTrue(("kwargs" in dir(e))) self.assertEqual(str(e), "errmsg", str(e)) self.assertTrue(("qnames" not in e.kwargs)) self.assertTrue(("responses" not in e.kwargs)) try: raise dns.resolver.NXDOMAIN("errmsg", -1) except dns.exception.DNSException as e: self.assertEqual(e.args, ("errmsg", -1)) self.assertTrue(("kwargs" in dir(e))) self.assertEqual(str(e), "('errmsg', -1)", str(e)) self.assertTrue(("qnames" not in e.kwargs)) self.assertTrue(("responses" not in e.kwargs)) try: raise dns.resolver.NXDOMAIN(qnames=None) except Exception as e: self.assertTrue((isinstance(e, AttributeError))) try: raise dns.resolver.NXDOMAIN(qnames=n1) except Exception as e: self.assertTrue((isinstance(e, AttributeError))) try: raise dns.resolver.NXDOMAIN(qnames=[]) except Exception as e: self.assertTrue((isinstance(e, AttributeError))) try: raise dns.resolver.NXDOMAIN(qnames=[n1]) except dns.exception.DNSException as e: MSG = "The DNS query name does not exist: a.b." self.assertEqual(e.args, (MSG,), repr(e.args)) self.assertTrue(("kwargs" in dir(e))) self.assertEqual(str(e), MSG, str(e)) self.assertTrue(("qnames" in e.kwargs)) self.assertEqual(e.kwargs["qnames"], [n1]) self.assertTrue(("responses" in e.kwargs)) self.assertEqual(e.kwargs["responses"], {}) try: raise dns.resolver.NXDOMAIN(qnames=[n2, n1]) except dns.resolver.NXDOMAIN as e: e0 = dns.resolver.NXDOMAIN("errmsg") e = e0 + e MSG = "None of DNS query names exist: a.b.s., a.b." self.assertEqual(e.args, (MSG,), repr(e.args)) self.assertTrue(("kwargs" in dir(e))) self.assertEqual(str(e), MSG, str(e)) self.assertTrue(("qnames" in e.kwargs)) self.assertEqual(e.kwargs["qnames"], [n2, n1]) self.assertTrue(("responses" in e.kwargs)) self.assertEqual(e.kwargs["responses"], {}) try: raise dns.resolver.NXDOMAIN(qnames=[n1], responses=["r1.1"]) except Exception as e: self.assertTrue((isinstance(e, AttributeError))) try: raise dns.resolver.NXDOMAIN(qnames=[n1], responses={n1: "r1.1"}) except dns.resolver.NXDOMAIN as e: MSG = "The DNS query name does not exist: a.b." self.assertEqual(e.args, (MSG,), repr(e.args)) self.assertTrue(("kwargs" in dir(e))) self.assertEqual(str(e), MSG, str(e)) self.assertTrue(("qnames" in e.kwargs)) self.assertEqual(e.kwargs["qnames"], [n1]) self.assertTrue(("responses" in e.kwargs)) self.assertEqual(e.kwargs["responses"], {n1: "r1.1"}) def test_nxdomain_merge(self): n1 = dns.name.Name(("a", "b", "")) n2 = dns.name.Name(("a", "b", "")) n3 = dns.name.Name(("a", "b", "c", "")) n4 = dns.name.Name(("a", "b", "d", "")) responses1 = {n1: "r1.1", n2: "r1.2", n4: "r1.4"} qnames1 = [n1, n4] # n2 == n1 responses2 = {n2: "r2.2", n3: "r2.3"} qnames2 = [n2, n3] e0 = dns.resolver.NXDOMAIN() e1 = dns.resolver.NXDOMAIN(qnames=qnames1, responses=responses1) e2 = dns.resolver.NXDOMAIN(qnames=qnames2, responses=responses2) e = e1 + e0 + e2 self.assertRaises(AttributeError, lambda: e0 + e0) self.assertEqual(e.kwargs["qnames"], [n1, n4, n3], repr(e.kwargs["qnames"])) self.assertTrue(e.kwargs["responses"][n1].startswith("r2.")) self.assertTrue(e.kwargs["responses"][n2].startswith("r2.")) self.assertTrue(e.kwargs["responses"][n3].startswith("r2.")) self.assertTrue(e.kwargs["responses"][n4].startswith("r1.")) def test_nxdomain_canonical_name(self): cname1 = "91.11.8-22.17.172.in-addr.arpa." cname2 = "91-11-17-172.dynamic.example." message0 = dns.message.from_text(dangling_cname_0_message_text) message1 = dns.message.from_text(dangling_cname_1_message_text) message2 = dns.message.from_text(dangling_cname_2_message_text) qname0 = message0.question[0].name qname1 = message1.question[0].name qname2 = message2.question[0].name responses = {qname0: message0, qname1: message1, qname2: message2} eX = dns.resolver.NXDOMAIN() e0 = dns.resolver.NXDOMAIN(qnames=[qname0], responses=responses) e1 = dns.resolver.NXDOMAIN(qnames=[qname0, qname1, qname2], responses=responses) e2 = dns.resolver.NXDOMAIN(qnames=[qname0, qname2, qname1], responses=responses) self.assertRaises(TypeError, lambda: eX.canonical_name) self.assertEqual(e0.canonical_name, qname0) self.assertEqual(e1.canonical_name, dns.name.from_text(cname1)) self.assertEqual(e2.canonical_name, dns.name.from_text(cname2)) class ResolverMiscTestCase(unittest.TestCase): if sys.platform != "win32": def test_read_nonexistent_config(self): res = dns.resolver.Resolver(configure=False) pathname = "/etc/nonexistent-resolv.conf" self.assertRaises( dns.resolver.NoResolverConfiguration, lambda: res.read_resolv_conf(pathname), ) def test_compute_timeout(self): res = dns.resolver.Resolver(configure=False) now = time.time() self.assertRaises( dns.resolver.Timeout, lambda: res._compute_timeout(now + 10000) ) self.assertRaises(dns.resolver.Timeout, lambda: res._compute_timeout(0)) # not raising is the test res._compute_timeout(now + 0.5) if sys.platform == "win32": def test_configure_win32_domain(self): n = dns.name.from_text("home.") self.assertEqual(n, dns.win32util._config_domain("home")) self.assertEqual(n, dns.win32util._config_domain(".home")) class ResolverNameserverValidTypeTestCase(unittest.TestCase): def test_set_nameservers_to_list(self): resolver = dns.resolver.Resolver(configure=False) resolver.nameservers = ["1.2.3.4"] self.assertEqual(resolver.nameservers, ["1.2.3.4"]) def test_set_namservers_to_empty_list(self): resolver = dns.resolver.Resolver(configure=False) resolver.nameservers = [] self.assertEqual(resolver.nameservers, []) def test_set_nameservers_invalid_type(self): resolver = dns.resolver.Resolver(configure=False) invalid_nameservers = [ None, "1.2.3.4", 1234, (1, 2, 3, 4), (), {"invalid": "nameserver"}, ] for invalid_nameserver in invalid_nameservers: with self.assertRaises(ValueError): resolver.nameservers = invalid_nameserver class NaptrNanoNameserver(Server): def handle(self, request): response = dns.message.make_response(request.message) response.set_rcode(dns.rcode.REFUSED) response.flags |= dns.flags.RA try: zero_subdomain = dns.e164.from_e164("0") if request.qname.is_subdomain(zero_subdomain): response.set_rcode(dns.rcode.NXDOMAIN) response.flags |= dns.flags.AA elif ( request.qtype == dns.rdatatype.NAPTR and request.qclass == dns.rdataclass.IN ): rrs = dns.rrset.from_text( request.qname, 300, "IN", "NAPTR", '0 0 "" "" "" .' ) response.answer.append(rrs) response.set_rcode(dns.rcode.NOERROR) response.flags |= dns.flags.AA except Exception: pass return response @unittest.skipIf( not (tests.util.is_internet_reachable() and _nanonameserver_available), "Internet and NanoAuth required", ) class NanoTests(unittest.TestCase): def testE164Query(self): with NaptrNanoNameserver() as na: res = dns.resolver.Resolver(configure=False) res.port = na.udp_address[1] res.nameservers = [na.udp_address[0]] answer = dns.e164.query("1650551212", ["e164.arpa"], res) self.assertEqual(answer[0].order, 0) self.assertEqual(answer[0].preference, 0) self.assertEqual(answer[0].flags, b"") self.assertEqual(answer[0].service, b"") self.assertEqual(answer[0].regexp, b"") self.assertEqual(answer[0].replacement, dns.name.root) with self.assertRaises(dns.resolver.NXDOMAIN): dns.e164.query("0123456789", ["e164.arpa"], res) class AlwaysType3NXDOMAINNanoNameserver(Server): def handle(self, request): response = dns.message.make_response(request.message) response.set_rcode(dns.rcode.NXDOMAIN) response.flags |= dns.flags.RA return response class AlwaysNXDOMAINNanoNameserver(Server): def handle(self, request): response = dns.message.make_response(request.message) response.set_rcode(dns.rcode.NXDOMAIN) response.flags |= dns.flags.RA origin = dns.name.from_text("example.") soa_rrset = response.find_rrset( response.authority, origin, dns.rdataclass.IN, dns.rdatatype.SOA, create=True, ) rdata = dns.rdata.from_text("IN", "SOA", "ns.example. root.example. 1 2 3 4 5") soa_rrset.add(rdata) soa_rrset.update_ttl(300) return response class AlwaysNoErrorNoDataNanoNameserver(Server): def handle(self, request): response = dns.message.make_response(request.message) response.set_rcode(dns.rcode.NOERROR) response.flags |= dns.flags.RA origin = dns.name.from_text("example.") soa_rrset = response.find_rrset( response.authority, origin, dns.rdataclass.IN, dns.rdatatype.SOA, create=True, ) rdata = dns.rdata.from_text("IN", "SOA", "ns.example. root.example. 1 2 3 4 5") soa_rrset.add(rdata) soa_rrset.update_ttl(300) return response @unittest.skipIf( not (tests.util.is_internet_reachable() and _nanonameserver_available), "Internet and NanoAuth required", ) class ZoneForNameTests(unittest.TestCase): def testNoRootSOA(self): with AlwaysType3NXDOMAINNanoNameserver() as na: res = dns.resolver.Resolver(configure=False) res.port = na.udp_address[1] res.nameservers = [na.udp_address[0]] with self.assertRaises(dns.resolver.NoRootSOA): dns.resolver.zone_for_name("www.foo.bar.", resolver=res) def testHelpfulNXDOMAIN(self): with AlwaysNXDOMAINNanoNameserver() as na: res = dns.resolver.Resolver(configure=False) res.port = na.udp_address[1] res.nameservers = [na.udp_address[0]] expected = dns.name.from_text("example.") name = dns.resolver.zone_for_name( "1.2.3.4.5.6.7.8.9.10.example.", resolver=res ) self.assertEqual(name, expected) def testHelpfulNoErrorNoData(self): with AlwaysNoErrorNoDataNanoNameserver() as na: res = dns.resolver.Resolver(configure=False) res.port = na.udp_address[1] res.nameservers = [na.udp_address[0]] expected = dns.name.from_text("example.") name = dns.resolver.zone_for_name( "1.2.3.4.5.6.7.8.9.10.example.", resolver=res ) self.assertEqual(name, expected) class DroppingNanoNameserver(Server): def handle(self, request): return None class FormErrNanoNameserver(Server): def handle(self, request): r = dns.message.make_response(request.message) r.set_rcode(dns.rcode.FORMERR) return r # we use pytest for these so we can have a "slow" mark later if we want to # (right now it's still fast enough we don't really need it) @pytest.mark.skipif( not (tests.util.is_internet_reachable() and _nanonameserver_available), reason="Internet and NanoAuth required", ) def testResolverTimeout(): with DroppingNanoNameserver() as na: res = dns.resolver.Resolver(configure=False) res.port = na.udp_address[1] res.nameservers = [na.udp_address[0]] res.timeout = 0.2 try: lifetime = 1.0 a = res.resolve("www.dnspython.org", lifetime=lifetime) assert False # should never happen except dns.resolver.LifetimeTimeout as e: assert e.kwargs["timeout"] >= lifetime # The length of errors can vary based on how slow things are, # but it ought to be > 1, so we assert that. errors = e.kwargs["errors"] assert len(errors) > 1 for error in errors: assert str(error[0]) == f"Do53:{na.udp_address[0]}@{na.udp_address[1]}" assert not error[1] # not TCP assert error[2] == na.udp_address[1] # port assert isinstance(error[3], dns.exception.Timeout) # exception @pytest.mark.skipif( not (tests.util.is_internet_reachable() and _nanonameserver_available), reason="Internet and NanoAuth required", ) def testResolverNoNameservers(): with FormErrNanoNameserver() as na: res = dns.resolver.Resolver(configure=False) res.port = na.udp_address[1] res.nameservers = [na.udp_address[0]] try: a = res.resolve("www.dnspython.org") assert False # should never happen except dns.resolver.NoNameservers as e: errors = e.kwargs["errors"] assert len(errors) == 1 for error in errors: assert error[0] == f"Do53:{na.udp_address[0]}@{na.udp_address[1]}" assert not error[1] # not TCP assert error[2] == na.udp_address[1] # port assert error[3] == "FORMERR" class SlowAlwaysType3NXDOMAINNanoNameserver(Server): def handle(self, request): response = dns.message.make_response(request.message) response.set_rcode(dns.rcode.NXDOMAIN) response.flags |= dns.flags.RA time.sleep(0.2) return response @pytest.mark.skipif( not (tests.util.is_internet_reachable() and _nanonameserver_available), reason="Internet and NanoAuth required", ) def testZoneForNameLifetimeTimeout(): with SlowAlwaysType3NXDOMAINNanoNameserver() as na: res = dns.resolver.Resolver(configure=False) res.port = na.udp_address[1] res.nameservers = [na.udp_address[0]] with pytest.raises(dns.resolver.LifetimeTimeout): dns.resolver.zone_for_name( "1.2.3.4.5.6.7.8.9.10.example.", resolver=res, lifetime=1.0 )