1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
|
#!/usr/bin/perl
# $Id: 37-NSEC3-encloser.t 1910 2023-03-30 19:16:30Z willem $ -*-perl-*-
#
use strict;
use warnings;
use Test::More;
use Net::DNS;
use Net::DNS::ZoneFile;
my @prerequisite = qw(
Digest::SHA
Net::DNS::RR::NSEC3
);
foreach my $package (@prerequisite) {
next if eval "require $package"; ## no critic
plan skip_all => "$package not installed";
exit;
}
plan tests => 4;
## Based on examples from RFC5155, Appendix B
my @nsec3 = Net::DNS::ZoneFile->parse( <<'END' );
0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. IN NSEC3 ( 1 1 12 aabbccdd
2t7b4g4vsa5smi47k61mv5bv1a22bojr NS SOA MX RRSIG DNSKEY NSEC3PARAM )
b4um86eghhds6nea196smvmlo4ors995.example. IN NSEC3 ( 1 1 12 aabbccdd
gjeqe526plbf1g8mklp59enfd789njgi MX RRSIG )
35mthgpgcu1qg68fab165klnsnk3dpvl.example. IN NSEC3 ( 1 1 12 aabbccdd
b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )
END
my $encloser;
my $nextcloser;
my $wildcard;
foreach my $nsec3 (@nsec3) {
for ( $nsec3->encloser('a.c.x.w.example') ) {
next unless $nsec3->match($_);
next if $encloser && length($encloser) > length;
$encloser = $_;
$nextcloser = $nsec3->nextcloser;
$wildcard = $nsec3->wildcard;
}
}
is( $encloser, 'x.w.example', 'closest (provable) encloser' );
is( $nextcloser, 'c.x.w.example', 'next closer name' );
is( $wildcard, '*.x.w.example', 'wildcard at closest encloser' );
is( $nsec3[0]->encloser('a.n.other'), undef, 'reject name out of zone' );
exit;
__END__
|
