Reading root hints from /usr/local/etc/dnssec-tools/root.hints Done reading root hints Reading resolver policy from /usr/local/etc/dnssec-tools/resolv.conf Done reading resolver configuration Reading validator policy from /usr/local/etc/dnssec-tools/dnsval.conf Reading next policy fragment Done reading validator configuration Context created with /usr/local/etc/dnssec-tools/dnsval.conf /usr/local/etc/dnssec-tools/resolv.conf /usr/local/etc/dnssec-tools/root.hints Suite '': Running 170 tests 1: Test Case 1: ****START**** val_resolve_and_check(): looking for {good-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.test.dnssec-tools.org 1 1} good-A.test.dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-A.test.dnssec-tools.org to: 127.0.0.1 63.195.146.66 End of Sending query for good-A.test.dnssec-tools.org QUERYING: 'good-A.test.dnssec-tools.org.' (referral to .) Ignoring DNSSEC for . p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.test.dnssec-tools.org 1 1} Ignoring DNSSEC for . Sending query for good-A.test.dnssec-tools.org to: 202.12.27.33 198.41.0.4 192.228.79.201 192.33.4.12 128.8.10.90 192.203.230.10 192.5.5.241 192.112.36.4 128.63.2.53 192.36.148.17 192.58.128.30 193.0.14.129 198.32.64.12 End of Sending query for good-A.test.dnssec-tools.org QUERYING: 'good-A.test.dnssec-tools.org.' (referral to org) Ignoring DNSSEC for org p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.test.dnssec-tools.org 1 1} Ignoring DNSSEC for org Sending query for good-A.test.dnssec-tools.org to: 204.74.112.1 204.74.113.1 199.7.66.1 199.7.67.1 192.100.59.11 198.133.199.11 End of Sending query for good-A.test.dnssec-tools.org QUERYING: 'good-A.test.dnssec-tools.org.' (referral to dnssec-tools.org) dnssec-tools.org requires DNSSEC p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {dnssec-tools.org IN(1) DNSKEY(48)} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for dnssec-tools.org ask_resolver(): sending query for {good-A.test.dnssec-tools.org 1 1} Sending query for good-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-A.test.dnssec-tools.org dnssec-tools.org requires DNSSEC ask_resolver(): found data for {dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC key dnssec-tools.org is trusted good-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-A.test.dnssec-tools.org 1 1} good-A.test.dnssec-tools.org requires DNSSEC p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {test.dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for test.dnssec-tools.org test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {test.dnssec-tools.org 1 48} test.dnssec-tools.org requires DNSSEC key test.dnssec-tools.org is trusted verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 1: OK Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=good-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 1: ****END**** 2: Test Case 2: ****START**** val_resolve_and_check(): looking for {badsign-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-A.test.dnssec-tools.org badsign-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-A.test.dnssec-tools.org 1 1} badsign-A.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {test.dnssec-tools.org 1 48} p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {test.dnssec-tools.org IN(1) DNSKEY(48)} ask_cache(): found data for {test.dnssec-tools.org 1 48} test.dnssec-tools.org requires DNSSEC key test.dnssec-tools.org is trusted verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 2: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=badsign-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 2: ****END**** 3: Test Case 3: ****START**** val_resolve_and_check(): looking for {nosig-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.test.dnssec-tools.org nosig-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.test.dnssec-tools.org 1 1} nosig-A.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.test.dnssec-tools.org nosig-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.test.dnssec-tools.org 1 46} Cannot show that nosig-A.test.dnssec-tools.org is provably unsecure. Test Case 3: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 3: ****END**** 4: Test Case 4: ****START**** val_resolve_and_check(): looking for {baddata-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-A.test.dnssec-tools.org baddata-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-A.test.dnssec-tools.org 1 1} baddata-A.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 4: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=baddata-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 4: ****END**** 5: Test Case 5: ****START**** val_resolve_and_check(): looking for {futuredate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-A.test.dnssec-tools.org futuredate-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-A.test.dnssec-tools.org 1 1} futuredate-A.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:22 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 5: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=futuredate-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 5: ****END**** 6: Test Case 6: ****START**** val_resolve_and_check(): looking for {pastdate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-A.test.dnssec-tools.org pastdate-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-A.test.dnssec-tools.org 1 1} pastdate-A.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:22 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 6: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=pastdate-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 6: ****END**** 7: Test Case 7: ****START**** val_resolve_and_check(): looking for {good-cname-to-good-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-cname-to-good-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-good-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-good-A.test.dnssec-tools.org good-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-a.test.dnssec-tools.org 1 1} good-cname-to-good-A.test.dnssec-tools.org requires DNSSEC good-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbf008f661b98a862cec4bf5e7ef78e5579ac9799 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 7: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 7: ****END**** 8: Test Case 8: ****START**** val_resolve_and_check(): looking for {good-cname-to-badsign-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-cname-to-badsign-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-badsign-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-badsign-A.test.dnssec-tools.org badsign-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-a.test.dnssec-tools.org 1 1} good-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC badsign-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x0dc058db436c23085b51855662798f44d55e4e03 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 8: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 8: ****END**** 9: Test Case 9: ****START**** val_resolve_and_check(): looking for {good-cname-to-nosig-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-cname-to-nosig-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-nosig-A.test.dnssec-tools.org nosig-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-a.test.dnssec-tools.org 1 1} good-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC nosig-a.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-A.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x604cbc9238c8187ef1d2fb53707ec5a74a3405dc rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS nosig-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.test.dnssec-tools.org 1 46} Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure. Test Case 9: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 9: ****END**** 10: Test Case 10: ****START**** val_resolve_and_check(): looking for {good-cname-to-baddata-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-cname-to-baddata-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-baddata-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-baddata-A.test.dnssec-tools.org baddata-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-a.test.dnssec-tools.org 1 1} good-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC baddata-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x9c646b07994d5bc760c4606b14194711497a1c79 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 10: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 10: ****END**** 11: Test Case 11: ****START**** val_resolve_and_check(): looking for {good-cname-to-futuredate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-cname-to-futuredate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-futuredate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-futuredate-A.test.dnssec-tools.org futuredate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-a.test.dnssec-tools.org 1 1} good-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC futuredate-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbe2608b586b01a27adc46c56d218601c5060bebe rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:22 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 11: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 11: ****END**** 12: Test Case 12: ****START**** val_resolve_and_check(): looking for {good-cname-to-pastdate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-cname-to-pastdate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-pastdate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-pastdate-A.test.dnssec-tools.org pastdate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-a.test.dnssec-tools.org 1 1} good-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC pastdate-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xa26ce7365a444b564dc5fb7a8e8247852d8ec789 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:23 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 12: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 12: ****END**** 13: Test Case 13: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-good-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-cname-to-good-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-good-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-good-A.test.dnssec-tools.org good-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-a.test.dnssec-tools.org 1 1} badsign-cname-to-good-A.test.dnssec-tools.org requires DNSSEC good-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x39abaa9a7f73c15dc59dc8f106af5aa451801226 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 13: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 13: ****END**** 14: Test Case 14: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-badsign-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-cname-to-badsign-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-badsign-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-badsign-A.test.dnssec-tools.org badsign-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-a.test.dnssec-tools.org 1 1} badsign-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC badsign-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc80f02d754997440324bac1255a7b69b894ee558 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 14: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 14: ****END**** 15: Test Case 15: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-nosig-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-cname-to-nosig-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-nosig-A.test.dnssec-tools.org nosig-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-a.test.dnssec-tools.org 1 1} badsign-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC nosig-a.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-A.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x9d394071d1ad65e3257dbf7009774f74c8312804 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE nosig-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.test.dnssec-tools.org 1 46} Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure. Test Case 15: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 15: ****END**** 16: Test Case 16: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-baddata-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-cname-to-baddata-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-baddata-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-baddata-A.test.dnssec-tools.org baddata-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-a.test.dnssec-tools.org 1 1} badsign-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC baddata-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x697896972c279a4b8d1d2bd758e108aa843ac2d7 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 16: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 16: ****END**** 17: Test Case 17: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-futuredate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-cname-to-futuredate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-futuredate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-futuredate-A.test.dnssec-tools.org futuredate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-a.test.dnssec-tools.org 1 1} badsign-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC futuredate-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x1dbd246907f75225ffa95c4e9b47799bea907bd5 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:23 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 17: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 17: ****END**** 18: Test Case 18: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-pastdate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-cname-to-pastdate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-pastdate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-pastdate-A.test.dnssec-tools.org pastdate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-a.test.dnssec-tools.org 1 1} badsign-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC pastdate-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xcc81a0c5f6f44113c17aa512733da562957296af rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:23 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 18: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 18: ****END**** 19: Test Case 19: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-good-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-cname-to-good-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-good-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-good-A.test.dnssec-tools.org good-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-a.test.dnssec-tools.org 1 1} nosig-cname-to-good-A.test.dnssec-tools.org requires DNSSEC good-a.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-good-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-good-A.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-good-A.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 19: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 19: ****END**** 20: Test Case 20: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-badsign-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-cname-to-badsign-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-badsign-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-badsign-A.test.dnssec-tools.org badsign-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-a.test.dnssec-tools.org 1 1} nosig-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC badsign-a.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-badsign-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-badsign-A.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-badsign-A.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 20: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 20: ****END**** 21: Test Case 21: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-nosig-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-cname-to-nosig-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-nosig-A.test.dnssec-tools.org nosig-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-a.test.dnssec-tools.org 1 1} nosig-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC nosig-a.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-A.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-nosig-A.test.dnssec-tools.org 1 46} ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.test.dnssec-tools.org Cannot show that nosig-cname-to-nosig-A.test.dnssec-tools.org is provably unsecure. nosig-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.test.dnssec-tools.org 1 46} Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure. Test Case 21: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 21: ****END**** 22: Test Case 22: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-baddata-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-cname-to-baddata-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-baddata-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-baddata-A.test.dnssec-tools.org baddata-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-a.test.dnssec-tools.org 1 1} nosig-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC baddata-a.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-baddata-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-baddata-A.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-baddata-A.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 22: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 22: ****END**** 23: Test Case 23: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-futuredate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-cname-to-futuredate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-futuredate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-futuredate-A.test.dnssec-tools.org futuredate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-a.test.dnssec-tools.org 1 1} nosig-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC futuredate-a.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-futuredate-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-futuredate-A.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-futuredate-A.test.dnssec-tools.org is provably unsecure. verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:25 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 23: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 23: ****END**** 24: Test Case 24: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-pastdate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-cname-to-pastdate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-pastdate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-pastdate-A.test.dnssec-tools.org pastdate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-a.test.dnssec-tools.org 1 1} nosig-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC pastdate-a.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-pastdate-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-pastdate-A.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-pastdate-A.test.dnssec-tools.org is provably unsecure. verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:26 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 24: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 24: ****END**** 25: Test Case 25: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-good-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-cname-to-good-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-good-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-good-A.test.dnssec-tools.org other-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-a.test.dnssec-tools.org 1 1} baddata-cname-to-good-A.test.dnssec-tools.org requires DNSSEC other-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x6a78a2852a2b43edd3c492389a5d8d3ae4c0de7b rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 25: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 25: ****END**** 26: Test Case 26: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-badsign-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-cname-to-badsign-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-badsign-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-badsign-A.test.dnssec-tools.org other-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-a.test.dnssec-tools.org 1 1} baddata-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC other-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf66d6e226a09a50085fad4c7890b5c0d9480008c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 26: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 26: ****END**** 27: Test Case 27: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-nosig-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-cname-to-nosig-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-nosig-A.test.dnssec-tools.org other-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-a.test.dnssec-tools.org 1 1} baddata-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC other-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf680c888fe30510628838273e64761e9ffeaf262 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 27: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 27: ****END**** 28: Test Case 28: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-baddata-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-cname-to-baddata-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-baddata-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-baddata-A.test.dnssec-tools.org other-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-a.test.dnssec-tools.org 1 1} baddata-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC other-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x87d9ee12f07366c93022dc2ee4df22e8dea40865 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 28: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 28: ****END**** 29: Test Case 29: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-futuredate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-cname-to-futuredate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-futuredate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-futuredate-A.test.dnssec-tools.org other-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-a.test.dnssec-tools.org 1 1} baddata-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC other-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbe5ad5abb58b4a829ba9ad677bbac57b01b49dc1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 29: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 29: ****END**** 30: Test Case 30: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-pastdate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-cname-to-pastdate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-pastdate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-pastdate-A.test.dnssec-tools.org other-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-a.test.dnssec-tools.org 1 1} baddata-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC other-a.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x93e3cafe6a2b17b4d504cc46b43eb6b6bf8daa45 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 30: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 30: ****END**** 31: Test Case 31: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-good-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-cname-to-good-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-good-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-good-A.test.dnssec-tools.org good-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-a.test.dnssec-tools.org 1 1} futuredate-cname-to-good-A.test.dnssec-tools.org requires DNSSEC good-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:27 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 31: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 31: ****END**** 32: Test Case 32: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-badsign-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-cname-to-badsign-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-badsign-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-badsign-A.test.dnssec-tools.org badsign-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-a.test.dnssec-tools.org 1 1} futuredate-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC badsign-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:27 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 32: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 32: ****END**** 33: Test Case 33: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-nosig-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-cname-to-nosig-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-nosig-A.test.dnssec-tools.org nosig-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-a.test.dnssec-tools.org 1 1} futuredate-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC nosig-a.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-A.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.test.dnssec-tools.org verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:27 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). nosig-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.test.dnssec-tools.org 1 46} Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure. Test Case 33: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 33: ****END**** 34: Test Case 34: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-baddata-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-cname-to-baddata-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-baddata-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-baddata-A.test.dnssec-tools.org baddata-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-a.test.dnssec-tools.org 1 1} futuredate-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC baddata-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:27 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 34: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 34: ****END**** 35: Test Case 35: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-futuredate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-cname-to-futuredate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-futuredate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-futuredate-A.test.dnssec-tools.org futuredate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-a.test.dnssec-tools.org 1 1} futuredate-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC futuredate-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:27 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:27 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 35: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 35: ****END**** 36: Test Case 36: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-pastdate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-cname-to-pastdate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-pastdate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-pastdate-A.test.dnssec-tools.org pastdate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-a.test.dnssec-tools.org 1 1} futuredate-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC pastdate-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:27 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:27 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 36: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 36: ****END**** 37: Test Case 37: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-good-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-cname-to-good-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-good-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-good-A.test.dnssec-tools.org good-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-a.test.dnssec-tools.org 1 1} pastdate-cname-to-good-A.test.dnssec-tools.org requires DNSSEC good-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:27 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 37: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 37: ****END**** 38: Test Case 38: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-badsign-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-cname-to-badsign-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-badsign-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-badsign-A.test.dnssec-tools.org badsign-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-a.test.dnssec-tools.org 1 1} pastdate-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC badsign-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:28 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 38: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 38: ****END**** 39: Test Case 39: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-nosig-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-cname-to-nosig-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-nosig-A.test.dnssec-tools.org nosig-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-a.test.dnssec-tools.org 1 1} pastdate-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC nosig-a.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-A.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.test.dnssec-tools.org verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:28 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). nosig-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.test.dnssec-tools.org 1 46} Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure. Test Case 39: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 39: ****END**** 40: Test Case 40: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-baddata-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-cname-to-baddata-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-baddata-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-baddata-A.test.dnssec-tools.org baddata-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-a.test.dnssec-tools.org 1 1} pastdate-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC baddata-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:28 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 40: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 40: ****END**** 41: Test Case 41: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-futuredate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-cname-to-futuredate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-futuredate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-futuredate-A.test.dnssec-tools.org futuredate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-a.test.dnssec-tools.org 1 1} pastdate-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC futuredate-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:28 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:28 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 41: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 41: ****END**** 42: Test Case 42: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-pastdate-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-cname-to-pastdate-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-pastdate-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-pastdate-A.test.dnssec-tools.org pastdate-a.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-a.test.dnssec-tools.org 1 1} pastdate-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC pastdate-a.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:28 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:28 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 42: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 42: ****END**** 43: Test Case 43: ****START**** val_resolve_and_check(): looking for {good-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-AAAA.test.dnssec-tools.org good-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-AAAA.test.dnssec-tools.org 1 28} good-AAAA.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 43: OK Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=good-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 43: ****END**** 44: Test Case 44: ****START**** val_resolve_and_check(): looking for {badsign-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-AAAA.test.dnssec-tools.org badsign-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-AAAA.test.dnssec-tools.org 1 28} badsign-AAAA.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 44: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=badsign-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 44: ****END**** 45: Test Case 45: ****START**** val_resolve_and_check(): looking for {nosig-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.test.dnssec-tools.org nosig-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.test.dnssec-tools.org 1 28} nosig-AAAA.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.test.dnssec-tools.org nosig-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-AAAA.test.dnssec-tools.org is provably unsecure. Test Case 45: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 45: ****END**** 46: Test Case 46: ****START**** val_resolve_and_check(): looking for {baddata-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-AAAA.test.dnssec-tools.org baddata-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-AAAA.test.dnssec-tools.org 1 28} baddata-AAAA.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 46: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=baddata-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 46: ****END**** 47: Test Case 47: ****START**** val_resolve_and_check(): looking for {futuredate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-AAAA.test.dnssec-tools.org futuredate-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-AAAA.test.dnssec-tools.org 1 28} futuredate-AAAA.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:29 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 47: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=futuredate-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 47: ****END**** 48: Test Case 48: ****START**** val_resolve_and_check(): looking for {pastdate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-AAAA.test.dnssec-tools.org pastdate-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-AAAA.test.dnssec-tools.org 1 28} pastdate-AAAA.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:29 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 48: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=pastdate-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 48: ****END**** 49: Test Case 49: ****START**** val_resolve_and_check(): looking for {good-cname-to-good-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-cname-to-good-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-good-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-good-AAAA.test.dnssec-tools.org good-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-aaaa.test.dnssec-tools.org 1 28} good-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC good-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbe1fb0a1390802bb025389dc70e9d41b17413b77 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 49: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 49: ****END**** 50: Test Case 50: ****START**** val_resolve_and_check(): looking for {good-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-badsign-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-badsign-AAAA.test.dnssec-tools.org badsign-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-aaaa.test.dnssec-tools.org 1 28} good-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC badsign-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x83da1c6cd8cdb11d3f7f9a840b0ff3acf638adc9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 50: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 50: ****END**** 51: Test Case 51: ****START**** val_resolve_and_check(): looking for {good-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-nosig-AAAA.test.dnssec-tools.org nosig-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-aaaa.test.dnssec-tools.org 1 28} good-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC nosig-aaaa.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-AAAA.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x192ab1499cbd6abb64bdce11989af978ccf5664b rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS nosig-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure. Test Case 51: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 51: ****END**** 52: Test Case 52: ****START**** val_resolve_and_check(): looking for {good-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-baddata-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-baddata-AAAA.test.dnssec-tools.org baddata-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-aaaa.test.dnssec-tools.org 1 28} good-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC baddata-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x289f9937df9870543f639037fba11bbe3a72f1a5 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 52: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 52: ****END**** 53: Test Case 53: ****START**** val_resolve_and_check(): looking for {good-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-futuredate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-futuredate-AAAA.test.dnssec-tools.org futuredate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-aaaa.test.dnssec-tools.org 1 28} good-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC futuredate-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc9c602cb09c03f3c2b4f30a3638772f0c4a30bbf rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:30 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 53: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 53: ****END**** 54: Test Case 54: ****START**** val_resolve_and_check(): looking for {good-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-cname-to-pastdate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-cname-to-pastdate-AAAA.test.dnssec-tools.org pastdate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-aaaa.test.dnssec-tools.org 1 28} good-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC pastdate-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x995f3e1b31afcddd7f372fd9eb0a0e3c92af1f5d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:30 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 54: OK Result: VAL_SUCCESS:131 p_type: t = 5, s = 1, r =CNAME name=good-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 54: ****END**** 55: Test Case 55: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-good-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-cname-to-good-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-good-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-good-AAAA.test.dnssec-tools.org good-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-aaaa.test.dnssec-tools.org 1 28} badsign-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC good-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x8e17e0d36ab009634f8affc842f13b177a9af597 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 55: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 55: ****END**** 56: Test Case 56: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-badsign-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-badsign-AAAA.test.dnssec-tools.org badsign-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-aaaa.test.dnssec-tools.org 1 28} badsign-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC badsign-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x32d426185cbafffa7da2802310ab468e7bfc9133 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 56: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 56: ****END**** 57: Test Case 57: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-nosig-AAAA.test.dnssec-tools.org nosig-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-aaaa.test.dnssec-tools.org 1 28} badsign-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC nosig-aaaa.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-AAAA.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x4a3e0d3e3941e3500ee099361eb5e7116b5d5639 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE nosig-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure. Test Case 57: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 57: ****END**** 58: Test Case 58: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-baddata-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-baddata-AAAA.test.dnssec-tools.org baddata-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-aaaa.test.dnssec-tools.org 1 28} badsign-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC baddata-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x02634322562be7e03420a166e758e3eb4fdc1560 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 58: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 58: ****END**** 59: Test Case 59: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org futuredate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-aaaa.test.dnssec-tools.org 1 28} badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC futuredate-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xfcfae5cc3bc4393b6316670fb70d7ecffbcc6e58 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:31 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 59: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 59: ****END**** 60: Test Case 60: ****START**** val_resolve_and_check(): looking for {badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org pastdate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-aaaa.test.dnssec-tools.org 1 28} badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC pastdate-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xa5ae48d26bbaf2e7de743a738c29b0be1c07910f rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:31 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 60: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 60: ****END**** 61: Test Case 61: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-good-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-cname-to-good-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-good-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-good-AAAA.test.dnssec-tools.org good-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-aaaa.test.dnssec-tools.org 1 28} nosig-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC good-aaaa.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-good-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-good-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-good-AAAA.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 61: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 61: ****END**** 62: Test Case 62: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-badsign-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-badsign-AAAA.test.dnssec-tools.org badsign-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-aaaa.test.dnssec-tools.org 1 28} nosig-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC badsign-aaaa.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-badsign-AAAA.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 62: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 62: ****END**** 63: Test Case 63: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-nosig-AAAA.test.dnssec-tools.org nosig-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-aaaa.test.dnssec-tools.org 1 28} nosig-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC nosig-aaaa.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-AAAA.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org 1 46} ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.test.dnssec-tools.org Cannot show that nosig-cname-to-nosig-AAAA.test.dnssec-tools.org is provably unsecure. nosig-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure. Test Case 63: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 63: ****END**** 64: Test Case 64: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-baddata-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-baddata-AAAA.test.dnssec-tools.org baddata-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-aaaa.test.dnssec-tools.org 1 28} nosig-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC baddata-aaaa.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-baddata-AAAA.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 64: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 64: ****END**** 65: Test Case 65: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org futuredate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-aaaa.test.dnssec-tools.org 1 28} nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC futuredate-aaaa.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org is provably unsecure. verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:31 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 65: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 65: ****END**** 66: Test Case 66: ****START**** val_resolve_and_check(): looking for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org pastdate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-aaaa.test.dnssec-tools.org 1 28} nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC pastdate-aaaa.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_cache(): found data for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org is provably unsecure. verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:32 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 66: OK Result: VAL_BOGUS:2 p_type: t = 5, s = 1, r =CNAME name=nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 66: ****END**** 67: Test Case 67: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-good-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-cname-to-good-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-good-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-good-AAAA.test.dnssec-tools.org other-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-aaaa.test.dnssec-tools.org 1 28} baddata-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC other-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xa844bc461ba3d50cfe2edd21d949226365d7a01f rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 67: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 67: ****END**** 68: Test Case 68: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-badsign-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-badsign-AAAA.test.dnssec-tools.org other-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-aaaa.test.dnssec-tools.org 1 28} baddata-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC other-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x4d2bf4591e422a49d398943d1bf94d6723eaac17 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 68: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 68: ****END**** 69: Test Case 69: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-nosig-AAAA.test.dnssec-tools.org other-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-aaaa.test.dnssec-tools.org 1 28} baddata-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC other-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x2bdf2702b92700f5debfed675528d2f4c8be9157 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 69: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 69: ****END**** 70: Test Case 70: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-baddata-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-baddata-AAAA.test.dnssec-tools.org other-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-aaaa.test.dnssec-tools.org 1 28} baddata-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC other-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x7e59d59d0b3a005663342b6f2a6b2b593a687c82 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 70: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 70: ****END**** 71: Test Case 71: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org other-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-aaaa.test.dnssec-tools.org 1 28} baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC other-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x5e070c9d21de997cf0d8bf9eaf0c07bf9a847628 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 71: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 71: ****END**** 72: Test Case 72: ****START**** val_resolve_and_check(): looking for {baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org other-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {other-aaaa.test.dnssec-tools.org 1 28} baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC other-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x3a00541af35197f652f20043c66b0fcb547e33b2 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 72: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 72: ****END**** 73: Test Case 73: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-good-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-cname-to-good-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-good-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-good-AAAA.test.dnssec-tools.org good-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-aaaa.test.dnssec-tools.org 1 28} futuredate-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC good-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:32 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 73: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 73: ****END**** 74: Test Case 74: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org badsign-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-aaaa.test.dnssec-tools.org 1 28} futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC badsign-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:33 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 74: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 74: ****END**** 75: Test Case 75: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org nosig-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-aaaa.test.dnssec-tools.org 1 28} futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC nosig-aaaa.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-AAAA.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.test.dnssec-tools.org verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:33 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). nosig-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure. Test Case 75: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 75: ****END**** 76: Test Case 76: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org baddata-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-aaaa.test.dnssec-tools.org 1 28} futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC baddata-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:33 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 76: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 76: ****END**** 77: Test Case 77: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org futuredate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-aaaa.test.dnssec-tools.org 1 28} futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC futuredate-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:33 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:33 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 77: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 77: ****END**** 78: Test Case 78: ****START**** val_resolve_and_check(): looking for {futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org pastdate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-aaaa.test.dnssec-tools.org 1 28} futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC pastdate-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:33 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:33 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 78: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 78: ****END**** 79: Test Case 79: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-good-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-cname-to-good-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-good-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-good-AAAA.test.dnssec-tools.org good-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-aaaa.test.dnssec-tools.org 1 28} pastdate-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC good-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:33 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 79: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 79: ****END**** 80: Test Case 80: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org badsign-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-aaaa.test.dnssec-tools.org 1 28} pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC badsign-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:33 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 80: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 80: ****END**** 81: Test Case 81: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org nosig-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-aaaa.test.dnssec-tools.org 1 28} pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC nosig-aaaa.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-AAAA.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.test.dnssec-tools.org verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:33 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). nosig-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.test.dnssec-tools.org 1 46} Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure. Test Case 81: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 81: ****END**** 82: Test Case 82: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org baddata-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-aaaa.test.dnssec-tools.org 1 28} pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC baddata-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:34 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 82: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 82: ****END**** 83: Test Case 83: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org futuredate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-aaaa.test.dnssec-tools.org 1 28} pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC futuredate-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:34 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:34 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 83: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 83: ****END**** 84: Test Case 84: ****START**** val_resolve_and_check(): looking for {pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org pastdate-aaaa.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-aaaa.test.dnssec-tools.org 1 28} pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC pastdate-aaaa.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:34 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:34 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 84: OK Result: VAL_BOGUS:130 p_type: t = 5, s = 1, r =CNAME name=pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 84: ****END**** 85: Test Case 85: ****START**** val_resolve_and_check(): looking for {good-A.good-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.good-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.good-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-A.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-A.good-ns.test.dnssec-tools.org good-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-A.good-ns.test.dnssec-tools.org 1 1} good-A.good-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-ns.test.dnssec-tools.org good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-ns.test.dnssec-tools.org 1 48} good-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 43, s = 1, r =DS ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-ns.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xe2aeca277936616eae8620360c0c55a5cadb0951 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-ns.test.dnssec-tools.org 1 43} good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc1483be0d8118e392b22999caa74e78c5a26bda9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x71b0068f74ff0fde8efdff8fec46c6233477ba5d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc5c1bc86050b106c78caee26497cf6cdf9d1b890 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 85: OK Result: VAL_SUCCESS:131 p_type: t = 1, s = 1, r =A name=good-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 85: ****END**** 86: Test Case 86: ****START**** val_resolve_and_check(): looking for {badsign-A.good-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-A.good-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-A.good-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-A.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-A.good-ns.test.dnssec-tools.org badsign-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-A.good-ns.test.dnssec-tools.org 1 1} badsign-A.good-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {good-ns.test.dnssec-tools.org 1 48} p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_cache(): found data for {good-ns.test.dnssec-tools.org 1 48} good-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {good-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {good-ns.test.dnssec-tools.org 1 43} good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x4a1e635efa7556a00f7f84db9b62562f4d5d9a44 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc1483be0d8118e392b22999caa74e78c5a26bda9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x71b0068f74ff0fde8efdff8fec46c6233477ba5d rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc5c1bc86050b106c78caee26497cf6cdf9d1b890 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 86: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=badsign-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 86: ****END**** 87: Test Case 87: ****START**** val_resolve_and_check(): looking for {nosig-A.good-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-A.good-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-A.good-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.good-ns.test.dnssec-tools.org nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.good-ns.test.dnssec-tools.org 1 1} nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.good-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.good-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.good-ns.test.dnssec-tools.org nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.good-ns.test.dnssec-tools.org 1 46} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) SOA(6)} ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 6} Not setting D0 bit nor using EDNS0 Sending query for good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-ns.test.dnssec-tools.org good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-ns.test.dnssec-tools.org 1 6} Cannot show that nosig-A.good-ns.test.dnssec-tools.org is provably unsecure. Test Case 87: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 87: ****END**** 88: Test Case 88: ****START**** val_resolve_and_check(): looking for {baddata-A.good-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-A.good-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-A.good-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-A.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-A.good-ns.test.dnssec-tools.org baddata-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-A.good-ns.test.dnssec-tools.org 1 1} baddata-A.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xd02720a1d7b7cbe31e598f4d339f5b7941333a4f rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 88: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=baddata-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 88: ****END**** 89: Test Case 89: ****START**** val_resolve_and_check(): looking for {futuredate-A.good-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-A.good-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-A.good-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-A.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-A.good-ns.test.dnssec-tools.org futuredate-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-A.good-ns.test.dnssec-tools.org 1 1} futuredate-A.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:35 2007) is less than signature inception time (Sat Jun 16 07:33:45 2007). Test Case 89: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=futuredate-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 89: ****END**** 90: Test Case 90: ****START**** val_resolve_and_check(): looking for {pastdate-A.good-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-A.good-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-A.good-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-A.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-A.good-ns.test.dnssec-tools.org pastdate-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-A.good-ns.test.dnssec-tools.org 1 1} pastdate-A.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:35 2007) is greater than signature expiration time (Tue Apr 17 07:28:45 2007). Test Case 90: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=pastdate-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 90: ****END**** 91: Test Case 91: ****START**** val_resolve_and_check(): looking for {good-AAAA.good-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-AAAA.good-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-AAAA.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-AAAA.good-ns.test.dnssec-tools.org good-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-AAAA.good-ns.test.dnssec-tools.org 1 28} good-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xd9ffe84f4550b7e0296890bcd85409530d43e1a6 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 91: OK Result: VAL_SUCCESS:131 p_type: t = 28, s = 1, r =AAAA name=good-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 91: ****END**** 92: Test Case 92: ****START**** val_resolve_and_check(): looking for {badsign-AAAA.good-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-AAAA.good-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-AAAA.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-AAAA.good-ns.test.dnssec-tools.org badsign-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-AAAA.good-ns.test.dnssec-tools.org 1 28} badsign-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x216e8ddcc77f9609822fb3c81a17f60d0d111b88 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 92: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=badsign-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 92: ****END**** 93: Test Case 93: ****START**** val_resolve_and_check(): looking for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 28} nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.good-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 46} Data in cache timed out: {good-ns.test.dnssec-tools.org 1 6} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) SOA(6)} ask_cache(): found data for {good-ns.test.dnssec-tools.org 1 6} Cannot show that nosig-AAAA.good-ns.test.dnssec-tools.org is provably unsecure. Test Case 93: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 93: ****END**** 94: Test Case 94: ****START**** val_resolve_and_check(): looking for {baddata-AAAA.good-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-AAAA.good-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-AAAA.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-AAAA.good-ns.test.dnssec-tools.org baddata-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-AAAA.good-ns.test.dnssec-tools.org 1 28} baddata-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x565ea952ddd423f454aadaf035ac6b99e9952385 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 94: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=baddata-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 94: ****END**** 95: Test Case 95: ****START**** val_resolve_and_check(): looking for {futuredate-AAAA.good-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-AAAA.good-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-AAAA.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-AAAA.good-ns.test.dnssec-tools.org futuredate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-AAAA.good-ns.test.dnssec-tools.org 1 28} futuredate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:36 2007) is less than signature inception time (Sat Jun 16 07:33:45 2007). Test Case 95: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=futuredate-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 95: ****END**** 96: Test Case 96: ****START**** val_resolve_and_check(): looking for {pastdate-AAAA.good-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-AAAA.good-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-AAAA.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-AAAA.good-ns.test.dnssec-tools.org pastdate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-AAAA.good-ns.test.dnssec-tools.org 1 28} pastdate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:36 2007) is greater than signature expiration time (Tue Apr 17 07:28:45 2007). Test Case 96: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=pastdate-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 96: ****END**** 97: Test Case 97: ****START**** val_resolve_and_check(): looking for {addedlater-A.good-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {addedlater-A.good-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {addedlater-A.good-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-A.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-A.good-ns.test.dnssec-tools.org addedlater-A.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-A.good-ns.test.dnssec-tools.org 1 1} good-ns.test.dnssec-tools.org requires DNSSEC good-ns.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf370483d5519af9a60d515479e41ca9aa0d6a21f rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x67f15fd24e42075eb44a1c1f6a78c927dbaf6ee4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x44e0cf7d8a9b30f5f4468322c35f624afece43f7 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS proving non-existence for {addedlater-A.good-ns.test.dnssec-tools.org, 1, 1} Test Case 97: FAILED: Remaining error values expected Result: VAL_NONEXISTENT_NAME:168 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=good-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 47, s = 1, r =NSEC name=good-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 97: ****END**** 98: Test Case 98: ****START**** val_resolve_and_check(): looking for {addedlater-AAAA.good-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {addedlater-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {addedlater-AAAA.good-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-AAAA.good-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-AAAA.good-ns.test.dnssec-tools.org addedlater-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-AAAA.good-ns.test.dnssec-tools.org 1 28} good-ns.test.dnssec-tools.org requires DNSSEC good-ns.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf370483d5519af9a60d515479e41ca9aa0d6a21f rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x67f15fd24e42075eb44a1c1f6a78c927dbaf6ee4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x44e0cf7d8a9b30f5f4468322c35f624afece43f7 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS proving non-existence for {addedlater-AAAA.good-ns.test.dnssec-tools.org, 1, 28} Test Case 98: FAILED: Remaining error values expected Result: VAL_NONEXISTENT_NAME:168 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=good-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 47, s = 1, r =NSEC name=good-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 98: ****END**** 99: Test Case 99: ****START**** val_resolve_and_check(): looking for {good-A.badsign-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.badsign-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-A.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-A.badsign-ns.test.dnssec-tools.org good-A.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-A.badsign-ns.test.dnssec-tools.org 1 1} good-A.badsign-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {badsign-ns.test.dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-ns.test.dnssec-tools.org badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-ns.test.dnssec-tools.org 1 48} badsign-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 43, s = 1, r =DS ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {badsign-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-ns.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x8441595fb65ad8e761a7376a8f4322f0a65cc9b2 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-ns.test.dnssec-tools.org 1 43} badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x87447de847a18dec23f44149756e8674b6d90203 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x5719b345d33f2b209521c6a9e9d8abaf91be50ec rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Test Case 99: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=good-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 99: ****END**** 100: Test Case 100: ****START**** val_resolve_and_check(): looking for {badsign-A.badsign-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-A.badsign-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-A.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-A.badsign-ns.test.dnssec-tools.org badsign-A.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-A.badsign-ns.test.dnssec-tools.org 1 1} badsign-A.badsign-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {badsign-ns.test.dnssec-tools.org 1 48} p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_cache(): found data for {badsign-ns.test.dnssec-tools.org 1 48} badsign-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {badsign-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {badsign-ns.test.dnssec-tools.org 1 43} badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xa26d65dc95016fdfc29e075f32314965467a8709 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x87447de847a18dec23f44149756e8674b6d90203 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x5719b345d33f2b209521c6a9e9d8abaf91be50ec rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 100: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=badsign-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 100: ****END**** 101: Test Case 101: ****START**** val_resolve_and_check(): looking for {nosig-A.badsign-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-A.badsign-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.badsign-ns.test.dnssec-tools.org nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.badsign-ns.test.dnssec-tools.org 1 1} nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.badsign-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.badsign-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.badsign-ns.test.dnssec-tools.org nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.badsign-ns.test.dnssec-tools.org 1 46} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) SOA(6)} ask_resolver(): sending query for {badsign-ns.test.dnssec-tools.org 1 6} Not setting D0 bit nor using EDNS0 Sending query for badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-ns.test.dnssec-tools.org badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-ns.test.dnssec-tools.org 1 6} Cannot show that nosig-A.badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 101: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 101: ****END**** 102: Test Case 102: ****START**** val_resolve_and_check(): looking for {baddata-A.badsign-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-A.badsign-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-A.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-A.badsign-ns.test.dnssec-tools.org baddata-A.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-A.badsign-ns.test.dnssec-tools.org 1 1} baddata-A.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x1dc21e62efb3de86bf811544299da72c40d667e8 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {badsign-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {badsign-ns.test.dnssec-tools.org 1 43} badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x87447de847a18dec23f44149756e8674b6d90203 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x5719b345d33f2b209521c6a9e9d8abaf91be50ec rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 102: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=baddata-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 102: ****END**** 103: Test Case 103: ****START**** val_resolve_and_check(): looking for {futuredate-A.badsign-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-A.badsign-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-A.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-A.badsign-ns.test.dnssec-tools.org futuredate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-A.badsign-ns.test.dnssec-tools.org 1 1} futuredate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:37 2007) is less than signature inception time (Sat Jun 16 07:09:22 2007). Cannot show that badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 103: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=futuredate-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 103: ****END**** 104: Test Case 104: ****START**** val_resolve_and_check(): looking for {pastdate-A.badsign-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-A.badsign-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-A.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-A.badsign-ns.test.dnssec-tools.org pastdate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-A.badsign-ns.test.dnssec-tools.org 1 1} pastdate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:38 2007) is greater than signature expiration time (Tue Apr 17 07:04:22 2007). Cannot show that badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 104: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=pastdate-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 104: ****END**** 105: Test Case 105: ****START**** val_resolve_and_check(): looking for {good-AAAA.badsign-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-AAAA.badsign-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-AAAA.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-AAAA.badsign-ns.test.dnssec-tools.org good-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-AAAA.badsign-ns.test.dnssec-tools.org 1 28} good-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xff7a6d026647e21937fb67cfc689435014a29ee4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 105: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=good-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 105: ****END**** 106: Test Case 106: ****START**** val_resolve_and_check(): looking for {badsign-AAAA.badsign-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-AAAA.badsign-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-AAAA.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-AAAA.badsign-ns.test.dnssec-tools.org badsign-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-AAAA.badsign-ns.test.dnssec-tools.org 1 28} badsign-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x18277622b1554000be50df7c486d4cae820e0a06 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 106: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=badsign-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 106: ****END**** 107: Test Case 107: ****START**** val_resolve_and_check(): looking for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 28} nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.badsign-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 46} Data in cache timed out: {badsign-ns.test.dnssec-tools.org 1 6} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) SOA(6)} ask_cache(): found data for {badsign-ns.test.dnssec-tools.org 1 6} Cannot show that nosig-AAAA.badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 107: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 107: ****END**** 108: Test Case 108: ****START**** val_resolve_and_check(): looking for {baddata-AAAA.badsign-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-AAAA.badsign-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-AAAA.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-AAAA.badsign-ns.test.dnssec-tools.org baddata-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-AAAA.badsign-ns.test.dnssec-tools.org 1 28} baddata-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb0632f5a6df3aa21817e8c53e03b1bca384858cd rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {badsign-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {badsign-ns.test.dnssec-tools.org 1 43} badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x87447de847a18dec23f44149756e8674b6d90203 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x5719b345d33f2b209521c6a9e9d8abaf91be50ec rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 108: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=baddata-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 108: ****END**** 109: Test Case 109: ****START**** val_resolve_and_check(): looking for {futuredate-AAAA.badsign-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-AAAA.badsign-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-AAAA.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-AAAA.badsign-ns.test.dnssec-tools.org futuredate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-AAAA.badsign-ns.test.dnssec-tools.org 1 28} futuredate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:38 2007) is less than signature inception time (Sat Jun 16 07:09:22 2007). Cannot show that badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 109: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=futuredate-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 109: ****END**** 110: Test Case 110: ****START**** val_resolve_and_check(): looking for {pastdate-AAAA.badsign-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-AAAA.badsign-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-AAAA.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-AAAA.badsign-ns.test.dnssec-tools.org pastdate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-AAAA.badsign-ns.test.dnssec-tools.org 1 28} pastdate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:38 2007) is greater than signature expiration time (Tue Apr 17 07:04:22 2007). Cannot show that badsign-ns.test.dnssec-tools.org is provably unsecure. Test Case 110: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=pastdate-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 110: ****END**** 111: Test Case 111: ****START**** val_resolve_and_check(): looking for {addedlater-A.badsign-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {addedlater-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {addedlater-A.badsign-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-A.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-A.badsign-ns.test.dnssec-tools.org addedlater-A.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-A.badsign-ns.test.dnssec-tools.org 1 1} badsign-ns.test.dnssec-tools.org requires DNSSEC badsign-ns.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x3d47364281e1e54953c2d9df68d3967976d8efc1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xde4690b2c88f56e951f724a747cce5806a7c86f1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x1f645d3d1f0d663d5f2159a4dd0699901b045590 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Bogus Proof Test Case 111: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=badsign-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=badsign-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 111: ****END**** 112: Test Case 112: ****START**** val_resolve_and_check(): looking for {addedlater-AAAA.badsign-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {addedlater-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {addedlater-AAAA.badsign-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-AAAA.badsign-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-AAAA.badsign-ns.test.dnssec-tools.org addedlater-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-AAAA.badsign-ns.test.dnssec-tools.org 1 28} badsign-ns.test.dnssec-tools.org requires DNSSEC badsign-ns.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x3d47364281e1e54953c2d9df68d3967976d8efc1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xde4690b2c88f56e951f724a747cce5806a7c86f1 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x1f645d3d1f0d663d5f2159a4dd0699901b045590 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Bogus Proof Test Case 112: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=badsign-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=badsign-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 112: ****END**** 113: Test Case 113: ****START**** val_resolve_and_check(): looking for {good-A.nosig-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.nosig-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-A.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-A.nosig-ns.test.dnssec-tools.org good-A.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-A.nosig-ns.test.dnssec-tools.org 1 1} good-A.nosig-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {nosig-ns.test.dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-ns.test.dnssec-tools.org nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-ns.test.dnssec-tools.org 1 48} nosig-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nosig-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-ns.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x6154fd5964ad55b39f0fc3cace943ce70fb7cdb7 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-ns.test.dnssec-tools.org 1 43} nosig-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-ns.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xdbacd15ab29e9351e171d8c6479ea66e51f3ae50 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x70499de2fdf2096d41a47631efd94d62a73a8110 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-ns.test.dnssec-tools.org 1 46} Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 113: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=good-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 113: ****END**** 114: Test Case 114: ****START**** val_resolve_and_check(): looking for {badsign-A.nosig-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-A.nosig-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-A.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-A.nosig-ns.test.dnssec-tools.org badsign-A.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-A.nosig-ns.test.dnssec-tools.org 1 1} badsign-A.nosig-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-ns.test.dnssec-tools.org 1 48} p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_cache(): found data for {nosig-ns.test.dnssec-tools.org 1 48} nosig-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {nosig-ns.test.dnssec-tools.org 1 43} nosig-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nosig-ns.test.dnssec-tools.org 1 46} p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-ns.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xca88490e4f0e62cb0e57436058b31567bc683dea rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xdbacd15ab29e9351e171d8c6479ea66e51f3ae50 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x70499de2fdf2096d41a47631efd94d62a73a8110 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-ns.test.dnssec-tools.org 1 46} Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 114: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=badsign-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 114: ****END**** 115: Test Case 115: ****START**** val_resolve_and_check(): looking for {nosig-A.nosig-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-A.nosig-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.nosig-ns.test.dnssec-tools.org nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.nosig-ns.test.dnssec-tools.org 1 1} nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.nosig-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.nosig-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.nosig-ns.test.dnssec-tools.org Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.nosig-ns.test.dnssec-tools.org 1 46} Test Case 115: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=UNEVALUATED:3 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 115: ****END**** 116: Test Case 116: ****START**** val_resolve_and_check(): looking for {baddata-A.nosig-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-A.nosig-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-A.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-A.nosig-ns.test.dnssec-tools.org baddata-A.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-A.nosig-ns.test.dnssec-tools.org 1 1} baddata-A.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x59fe12454aaee1ec63922b850b723ccbdfdef082 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 116: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=baddata-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 116: ****END**** 117: Test Case 117: ****START**** val_resolve_and_check(): looking for {futuredate-A.nosig-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-A.nosig-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-A.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-A.nosig-ns.test.dnssec-tools.org futuredate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-A.nosig-ns.test.dnssec-tools.org 1 1} futuredate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:40 2007) is less than signature inception time (Sat Jun 16 07:33:47 2007). Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 117: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=futuredate-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 117: ****END**** 118: Test Case 118: ****START**** val_resolve_and_check(): looking for {pastdate-A.nosig-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-A.nosig-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-A.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-A.nosig-ns.test.dnssec-tools.org pastdate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-A.nosig-ns.test.dnssec-tools.org 1 1} pastdate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:40 2007) is greater than signature expiration time (Tue Apr 17 07:28:47 2007). Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 118: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=pastdate-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 118: ****END**** 119: Test Case 119: ****START**** val_resolve_and_check(): looking for {good-AAAA.nosig-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-AAAA.nosig-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-AAAA.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-AAAA.nosig-ns.test.dnssec-tools.org good-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-AAAA.nosig-ns.test.dnssec-tools.org 1 28} good-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x134434f893741828037b1e4d1fba985460aeab49 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 119: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=good-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 119: ****END**** 120: Test Case 120: ****START**** val_resolve_and_check(): looking for {badsign-AAAA.nosig-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-AAAA.nosig-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-AAAA.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-AAAA.nosig-ns.test.dnssec-tools.org badsign-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-AAAA.nosig-ns.test.dnssec-tools.org 1 28} badsign-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x2dff4a98ccb0cb9e4517db6246fa7df87268de31 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 120: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=badsign-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 120: ****END**** 121: Test Case 121: ****START**** val_resolve_and_check(): looking for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 28} nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.nosig-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 46} Test Case 121: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=UNEVALUATED:3 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 121: ****END**** 122: Test Case 122: ****START**** val_resolve_and_check(): looking for {baddata-AAAA.nosig-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-AAAA.nosig-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-AAAA.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-AAAA.nosig-ns.test.dnssec-tools.org baddata-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-AAAA.nosig-ns.test.dnssec-tools.org 1 28} baddata-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x8aa6ad4fa921b50b19066633c1e3ecebda625471 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 122: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=baddata-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 122: ****END**** 123: Test Case 123: ****START**** val_resolve_and_check(): looking for {futuredate-AAAA.nosig-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-AAAA.nosig-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-AAAA.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-AAAA.nosig-ns.test.dnssec-tools.org futuredate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-AAAA.nosig-ns.test.dnssec-tools.org 1 28} futuredate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:41 2007) is less than signature inception time (Sat Jun 16 07:33:47 2007). Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 123: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=futuredate-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 123: ****END**** 124: Test Case 124: ****START**** val_resolve_and_check(): looking for {pastdate-AAAA.nosig-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-AAAA.nosig-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-AAAA.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-AAAA.nosig-ns.test.dnssec-tools.org pastdate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-AAAA.nosig-ns.test.dnssec-tools.org 1 28} pastdate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:41 2007) is greater than signature expiration time (Tue Apr 17 07:28:47 2007). Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Test Case 124: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=pastdate-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 124: ****END**** 125: Test Case 125: ****START**** val_resolve_and_check(): looking for {addedlater-A.nosig-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {addedlater-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {addedlater-A.nosig-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-A.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-A.nosig-ns.test.dnssec-tools.org addedlater-A.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-A.nosig-ns.test.dnssec-tools.org 1 1} nosig-ns.test.dnssec-tools.org requires DNSSEC nosig-ns.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x607c6437f44ee14fa0f52bbc4daeac0cf46a2ce5 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x15c92a9bea90a7c31159c10c3ee0cd917a397952 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xee0a31eb8a1a1a3c372ee96cba46f44a9a8a3273 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Bogus Proof Test Case 125: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=nosig-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=nosig-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 125: ****END**** 126: Test Case 126: ****START**** val_resolve_and_check(): looking for {addedlater-AAAA.nosig-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {addedlater-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {addedlater-AAAA.nosig-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-AAAA.nosig-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-AAAA.nosig-ns.test.dnssec-tools.org addedlater-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-AAAA.nosig-ns.test.dnssec-tools.org 1 28} nosig-ns.test.dnssec-tools.org requires DNSSEC nosig-ns.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x607c6437f44ee14fa0f52bbc4daeac0cf46a2ce5 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x15c92a9bea90a7c31159c10c3ee0cd917a397952 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xee0a31eb8a1a1a3c372ee96cba46f44a9a8a3273 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Cannot show that nosig-ns.test.dnssec-tools.org is provably unsecure. Bogus Proof Test Case 126: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=nosig-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=nosig-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 126: ****END**** 127: Test Case 127: ****START**** val_resolve_and_check(): looking for {good-A.nods-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.nods-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.nods-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-A.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-A.nods-ns.test.dnssec-tools.org good-A.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-A.nods-ns.test.dnssec-tools.org 1 1} good-A.nods-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nods-ns.test.dnssec-tools.org 1 48} nods-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x1e0eed7ffc8a268a64d10b6f492bad760e434a93 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) SOA(6)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 6} Not setting D0 bit nor using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nods-ns.test.dnssec-tools.org 1 6} Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 127: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=good-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 127: ****END**** 128: Test Case 128: ****START**** val_resolve_and_check(): looking for {badsign-A.nods-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-A.nods-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-A.nods-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-A.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-A.nods-ns.test.dnssec-tools.org badsign-A.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-A.nods-ns.test.dnssec-tools.org 1 1} badsign-A.nods-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 48} p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_cache(): found data for {nods-ns.test.dnssec-tools.org 1 48} nods-ns.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x6b502a0b34e67c555de1409f52b98c00be01714a rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 6} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) SOA(6)} ask_cache(): found data for {nods-ns.test.dnssec-tools.org 1 6} Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 128: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=badsign-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 128: ****END**** 129: Test Case 129: ****START**** val_resolve_and_check(): looking for {nosig-A.nods-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-A.nods-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-A.nods-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.nods-ns.test.dnssec-tools.org nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.nods-ns.test.dnssec-tools.org 1 1} nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.nods-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.nods-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.nods-ns.test.dnssec-tools.org Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.nods-ns.test.dnssec-tools.org 1 46} Cannot show that nosig-A.nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 129: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=UNEVALUATED:2 Test Case 129: ****END**** 130: Test Case 130: ****START**** val_resolve_and_check(): looking for {baddata-A.nods-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-A.nods-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-A.nods-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-A.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-A.nods-ns.test.dnssec-tools.org baddata-A.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-A.nods-ns.test.dnssec-tools.org 1 1} baddata-A.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xfc4f363b5d8b2eecd3b2c416949d4c088cd1a37e rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 130: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=baddata-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 130: ****END**** 131: Test Case 131: ****START**** val_resolve_and_check(): looking for {futuredate-A.nods-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-A.nods-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-A.nods-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-A.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-A.nods-ns.test.dnssec-tools.org futuredate-A.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-A.nods-ns.test.dnssec-tools.org 1 1} futuredate-A.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:42 2007) is less than signature inception time (Sat Jun 16 07:33:49 2007). Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 131: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=futuredate-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 131: ****END**** 132: Test Case 132: ****START**** val_resolve_and_check(): looking for {pastdate-A.nods-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-A.nods-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-A.nods-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-A.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-A.nods-ns.test.dnssec-tools.org pastdate-A.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-A.nods-ns.test.dnssec-tools.org 1 1} pastdate-A.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:43 2007) is greater than signature expiration time (Tue Apr 17 07:28:49 2007). Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 132: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=pastdate-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 132: ****END**** 133: Test Case 133: ****START**** val_resolve_and_check(): looking for {good-AAAA.nods-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-AAAA.nods-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-AAAA.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-AAAA.nods-ns.test.dnssec-tools.org good-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-AAAA.nods-ns.test.dnssec-tools.org 1 28} good-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x3201167fb064d8eb2f15e11e7b5885ecba907727 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 133: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=good-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 133: ****END**** 134: Test Case 134: ****START**** val_resolve_and_check(): looking for {badsign-AAAA.nods-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-AAAA.nods-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-AAAA.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-AAAA.nods-ns.test.dnssec-tools.org badsign-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-AAAA.nods-ns.test.dnssec-tools.org 1 28} badsign-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf9311efc0b9608bf0b6a32db341ea392e814dbde rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 134: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=badsign-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 134: ****END**** 135: Test Case 135: ****START**** val_resolve_and_check(): looking for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 28} nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.nods-ns.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 46} Cannot show that nosig-AAAA.nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 135: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=UNEVALUATED:2 Test Case 135: ****END**** 136: Test Case 136: ****START**** val_resolve_and_check(): looking for {baddata-AAAA.nods-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-AAAA.nods-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-AAAA.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-AAAA.nods-ns.test.dnssec-tools.org baddata-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-AAAA.nods-ns.test.dnssec-tools.org 1 28} baddata-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xa0905833a928f288dbbbb27960ad4c37b0ee00f9 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 136: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=baddata-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 136: ****END**** 137: Test Case 137: ****START**** val_resolve_and_check(): looking for {futuredate-AAAA.nods-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-AAAA.nods-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-AAAA.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-AAAA.nods-ns.test.dnssec-tools.org futuredate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-AAAA.nods-ns.test.dnssec-tools.org 1 28} futuredate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:44 2007) is less than signature inception time (Sat Jun 16 07:33:49 2007). Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 137: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=futuredate-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 137: ****END**** 138: Test Case 138: ****START**** val_resolve_and_check(): looking for {pastdate-AAAA.nods-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-AAAA.nods-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-AAAA.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-AAAA.nods-ns.test.dnssec-tools.org pastdate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-AAAA.nods-ns.test.dnssec-tools.org 1 28} pastdate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:44 2007) is greater than signature expiration time (Tue Apr 17 07:28:49 2007). Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Test Case 138: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=pastdate-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 138: ****END**** 139: Test Case 139: ****START**** val_resolve_and_check(): looking for {addedlater-A.nods-ns.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {addedlater-A.nods-ns.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {addedlater-A.nods-ns.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-A.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-A.nods-ns.test.dnssec-tools.org addedlater-A.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-A.nods-ns.test.dnssec-tools.org 1 1} nods-ns.test.dnssec-tools.org requires DNSSEC nods-ns.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xdb918996ad3b2573f8dc6923b73e151ad6bbd31c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x3154258fab98779a2a5d61dc5f705758386e4d7c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x01e48d5d24e4b57e07670515f951cc342087bc4a rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Bogus Proof Test Case 139: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=nods-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 p_type: t = 47, s = 1, r =NSEC name=nods-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 139: ****END**** 140: Test Case 140: ****START**** val_resolve_and_check(): looking for {addedlater-AAAA.nods-ns.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {addedlater-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {addedlater-AAAA.nods-ns.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-AAAA.nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-AAAA.nods-ns.test.dnssec-tools.org addedlater-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-AAAA.nods-ns.test.dnssec-tools.org 1 28} nods-ns.test.dnssec-tools.org requires DNSSEC nods-ns.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xdb918996ad3b2573f8dc6923b73e151ad6bbd31c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43} verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x3154258fab98779a2a5d61dc5f705758386e4d7c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x01e48d5d24e4b57e07670515f951cc342087bc4a rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS p_type: t = 43, s = 1, r =DS ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nods-ns.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nods-ns.test.dnssec-tools.org Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure. Bogus Proof Test Case 140: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=nods-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 p_type: t = 47, s = 1, r =NSEC name=nods-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:17 Test Case 140: ****END**** 141: Test Case 141: ****START**** val_resolve_and_check(): looking for {good-A.futuredate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.futuredate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-A.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-A.futuredate-ds.test.dnssec-tools.org good-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-A.futuredate-ds.test.dnssec-tools.org 1 1} good-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {futuredate-ds.test.dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-ds.test.dnssec-tools.org futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-ds.test.dnssec-tools.org 1 48} futuredate-ds.test.dnssec-tools.org requires DNSSEC p_type: t = 43, s = 1, r =DS ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {futuredate-ds.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-ds.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xdc8eb6c53ce7b8b948e0fc212f398350e106eff4 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-ds.test.dnssec-tools.org 1 43} futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc15744415b7576f27c1162df8131df4e557cf86c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:45 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Test Case 141: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=good-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 141: ****END**** 142: Test Case 142: ****START**** val_resolve_and_check(): looking for {badsign-A.futuredate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-A.futuredate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-A.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-A.futuredate-ds.test.dnssec-tools.org badsign-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-A.futuredate-ds.test.dnssec-tools.org 1 1} badsign-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {futuredate-ds.test.dnssec-tools.org 1 48} p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_cache(): found data for {futuredate-ds.test.dnssec-tools.org 1 48} futuredate-ds.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {futuredate-ds.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {futuredate-ds.test.dnssec-tools.org 1 43} futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xfe00bb648a94392eaf11d6fa3fa5df9d5730f7d5 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc15744415b7576f27c1162df8131df4e557cf86c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:45 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Cannot show that futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 142: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=badsign-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 142: ****END**** 143: Test Case 143: ****START**** val_resolve_and_check(): looking for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 1} nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.futuredate-ds.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 46} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) SOA(6)} ask_resolver(): sending query for {futuredate-ds.test.dnssec-tools.org 1 6} Not setting D0 bit nor using EDNS0 Sending query for futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-ds.test.dnssec-tools.org futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-ds.test.dnssec-tools.org 1 6} Cannot show that nosig-A.futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 143: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 143: ****END**** 144: Test Case 144: ****START**** val_resolve_and_check(): looking for {baddata-A.futuredate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-A.futuredate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-A.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-A.futuredate-ds.test.dnssec-tools.org baddata-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-A.futuredate-ds.test.dnssec-tools.org 1 1} baddata-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x3dd6ea06d28477189fbbd04f69673582ebb938d3 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {futuredate-ds.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {futuredate-ds.test.dnssec-tools.org 1 43} futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc15744415b7576f27c1162df8131df4e557cf86c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:45 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Cannot show that futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 144: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=baddata-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 144: ****END**** 145: Test Case 145: ****START**** val_resolve_and_check(): looking for {futuredate-A.futuredate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-A.futuredate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-A.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-A.futuredate-ds.test.dnssec-tools.org futuredate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-A.futuredate-ds.test.dnssec-tools.org 1 1} futuredate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:46 2007) is less than signature inception time (Sat Jun 16 07:09:27 2007). Cannot show that futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 145: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=futuredate-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 145: ****END**** 146: Test Case 146: ****START**** val_resolve_and_check(): looking for {pastdate-A.futuredate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-A.futuredate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-A.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-A.futuredate-ds.test.dnssec-tools.org pastdate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-A.futuredate-ds.test.dnssec-tools.org 1 1} pastdate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:46 2007) is greater than signature expiration time (Tue Apr 17 07:04:27 2007). Cannot show that futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 146: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=pastdate-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 146: ****END**** 147: Test Case 147: ****START**** val_resolve_and_check(): looking for {good-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-AAAA.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-AAAA.futuredate-ds.test.dnssec-tools.org good-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} good-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x6974425c7387a9f98cd7defc80cebdf58f360ce8 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 147: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=good-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 147: ****END**** 148: Test Case 148: ****START**** val_resolve_and_check(): looking for {badsign-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-AAAA.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-AAAA.futuredate-ds.test.dnssec-tools.org badsign-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} badsign-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x7d77866d60cd86de81560a98cc745fcc992825fb rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 148: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=badsign-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 148: ****END**** 149: Test Case 149: ****START**** val_resolve_and_check(): looking for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 46} Data in cache timed out: {futuredate-ds.test.dnssec-tools.org 1 6} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) SOA(6)} ask_cache(): found data for {futuredate-ds.test.dnssec-tools.org 1 6} Cannot show that nosig-AAAA.futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 149: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 149: ****END**** 150: Test Case 150: ****START**** val_resolve_and_check(): looking for {baddata-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-AAAA.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-AAAA.futuredate-ds.test.dnssec-tools.org baddata-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} baddata-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x681b621b7c9bc18af78be08194f5559ce2a41d40 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {futuredate-ds.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {futuredate-ds.test.dnssec-tools.org 1 43} futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc15744415b7576f27c1162df8131df4e557cf86c rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:46 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007). Cannot show that futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 150: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=baddata-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 150: ****END**** 151: Test Case 151: ****START**** val_resolve_and_check(): looking for {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-AAAA.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-AAAA.futuredate-ds.test.dnssec-tools.org futuredate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} futuredate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:46 2007) is less than signature inception time (Sat Jun 16 07:09:27 2007). Cannot show that futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 151: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=futuredate-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 151: ****END**** 152: Test Case 152: ****START**** val_resolve_and_check(): looking for {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-AAAA.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-AAAA.futuredate-ds.test.dnssec-tools.org pastdate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} pastdate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:46 2007) is greater than signature expiration time (Tue Apr 17 07:04:27 2007). Cannot show that futuredate-ds.test.dnssec-tools.org is provably unsecure. Test Case 152: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=pastdate-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 152: ****END**** 153: Test Case 153: ****START**** val_resolve_and_check(): looking for {addedlater-A.futuredate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {addedlater-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {addedlater-A.futuredate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-A.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-A.futuredate-ds.test.dnssec-tools.org addedlater-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-A.futuredate-ds.test.dnssec-tools.org 1 1} futuredate-ds.test.dnssec-tools.org requires DNSSEC futuredate-ds.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc813d29c415a1c275e9fd67f9225d7cb7c30618b rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb57f80adc253549aaac67aa2da4d2ea344b77746 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x01dc239a6c5ecca02f3586d10f0a930398b3893e rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Bogus Proof Test Case 153: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=futuredate-ds.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=futuredate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 153: ****END**** 154: Test Case 154: ****START**** val_resolve_and_check(): looking for {addedlater-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {addedlater-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {addedlater-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-AAAA.futuredate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-AAAA.futuredate-ds.test.dnssec-tools.org addedlater-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-AAAA.futuredate-ds.test.dnssec-tools.org 1 28} futuredate-ds.test.dnssec-tools.org requires DNSSEC futuredate-ds.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xc813d29c415a1c275e9fd67f9225d7cb7c30618b rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xb57f80adc253549aaac67aa2da4d2ea344b77746 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x01dc239a6c5ecca02f3586d10f0a930398b3893e rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Bogus Proof Test Case 154: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=futuredate-ds.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=futuredate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 154: ****END**** 155: Test Case 155: ****START**** val_resolve_and_check(): looking for {good-A.pastdate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {good-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {good-A.pastdate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-A.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-A.pastdate-ds.test.dnssec-tools.org good-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-A.pastdate-ds.test.dnssec-tools.org 1 1} good-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_resolver(): sending query for {pastdate-ds.test.dnssec-tools.org 1 48} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-ds.test.dnssec-tools.org pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-ds.test.dnssec-tools.org 1 48} pastdate-ds.test.dnssec-tools.org requires DNSSEC p_type: t = 43, s = 1, r =DS ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DS(43)} ask_resolver(): sending query for {pastdate-ds.test.dnssec-tools.org 1 43} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-ds.test.dnssec-tools.org verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x6abe831c541d838c2981121c1f8f20a97e864e61 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-ds.test.dnssec-tools.org 1 43} pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x56e308e85bd2ef30136137a45ea27cf877148814 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:47 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Test Case 155: OK Result: VAL_BOGUS:130 p_type: t = 1, s = 1, r =A name=good-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 155: ****END**** 156: Test Case 156: ****START**** val_resolve_and_check(): looking for {badsign-A.pastdate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {badsign-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {badsign-A.pastdate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-A.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-A.pastdate-ds.test.dnssec-tools.org badsign-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-A.pastdate-ds.test.dnssec-tools.org 1 1} badsign-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {pastdate-ds.test.dnssec-tools.org 1 48} p_type: t = 48, s = 1, r =DNSKEY ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DNSKEY(48)} ask_cache(): found data for {pastdate-ds.test.dnssec-tools.org 1 48} pastdate-ds.test.dnssec-tools.org requires DNSSEC Data in cache timed out: {pastdate-ds.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {pastdate-ds.test.dnssec-tools.org 1 43} pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x49982a4fb07e9c98f60cf1b30b4663892c9392d6 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x56e308e85bd2ef30136137a45ea27cf877148814 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:47 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Cannot show that pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 156: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=badsign-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 156: ****END**** 157: Test Case 157: ****START**** val_resolve_and_check(): looking for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {nosig-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 1} nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-A.pastdate-ds.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 46} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) SOA(6)} ask_resolver(): sending query for {pastdate-ds.test.dnssec-tools.org 1 6} Not setting D0 bit nor using EDNS0 Sending query for pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-ds.test.dnssec-tools.org pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-ds.test.dnssec-tools.org 1 6} Cannot show that nosig-A.pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 157: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=nosig-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 157: ****END**** 158: Test Case 158: ****START**** val_resolve_and_check(): looking for {baddata-A.pastdate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {baddata-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {baddata-A.pastdate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-A.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-A.pastdate-ds.test.dnssec-tools.org baddata-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-A.pastdate-ds.test.dnssec-tools.org 1 1} baddata-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x994b2b84fad8a1ad01f968959e59bc0b1d110236 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {pastdate-ds.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {pastdate-ds.test.dnssec-tools.org 1 43} pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x56e308e85bd2ef30136137a45ea27cf877148814 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:48 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Cannot show that pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 158: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=baddata-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 158: ****END**** 159: Test Case 159: ****START**** val_resolve_and_check(): looking for {futuredate-A.pastdate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {futuredate-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {futuredate-A.pastdate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-A.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-A.pastdate-ds.test.dnssec-tools.org futuredate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-A.pastdate-ds.test.dnssec-tools.org 1 1} futuredate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:48 2007) is less than signature inception time (Sat Jun 16 07:09:29 2007). Cannot show that pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 159: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=futuredate-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 159: ****END**** 160: Test Case 160: ****START**** val_resolve_and_check(): looking for {pastdate-A.pastdate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {pastdate-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {pastdate-A.pastdate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-A.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-A.pastdate-ds.test.dnssec-tools.org pastdate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-A.pastdate-ds.test.dnssec-tools.org 1 1} pastdate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:48 2007) is greater than signature expiration time (Tue Apr 17 07:04:29 2007). Cannot show that pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 160: OK Result: VAL_BOGUS:2 p_type: t = 1, s = 1, r =A name=pastdate-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 160: ****END**** 161: Test Case 161: ****START**** val_resolve_and_check(): looking for {good-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {good-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {good-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for good-AAAA.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for good-AAAA.pastdate-ds.test.dnssec-tools.org good-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {good-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} good-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x3531de2843df78a7c994b60cae33cb9983600a77 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Test Case 161: OK Result: VAL_BOGUS:130 p_type: t = 28, s = 1, r =AAAA name=good-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 161: ****END**** 162: Test Case 162: ****START**** val_resolve_and_check(): looking for {badsign-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {badsign-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {badsign-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for badsign-AAAA.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for badsign-AAAA.pastdate-ds.test.dnssec-tools.org badsign-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {badsign-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} badsign-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x8bc738daa5fcd8bb03f7efcd979903874215657b rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Cannot show that pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 162: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=badsign-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 162: ****END**** 163: Test Case 163: ****START**** val_resolve_and_check(): looking for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC p_type: t = 46, s = 1, r =RRSIG ask_cache(): looking for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) RRSIG(46)} ask_resolver(): sending query for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 46} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 46} Data in cache timed out: {pastdate-ds.test.dnssec-tools.org 1 6} p_type: t = 6, s = 1, r =SOA ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) SOA(6)} ask_cache(): found data for {pastdate-ds.test.dnssec-tools.org 1 6} Cannot show that nosig-AAAA.pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 163: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=nosig-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:15 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 163: ****END**** 164: Test Case 164: ****START**** val_resolve_and_check(): looking for {baddata-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {baddata-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {baddata-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for baddata-AAAA.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for baddata-AAAA.pastdate-ds.test.dnssec-tools.org baddata-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {baddata-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} baddata-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x5196dd5543f9098d61c062add7f2156f2c54b810 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned FAILURE Data in cache timed out: {pastdate-ds.test.dnssec-tools.org 1 43} p_type: t = 43, s = 1, r =DS ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DS(43)} ask_cache(): found data for {pastdate-ds.test.dnssec-tools.org 1 43} pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x56e308e85bd2ef30136137a45ea27cf877148814 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:49 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007). Cannot show that pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 164: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=baddata-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 164: ****END**** 165: Test Case 165: ****START**** val_resolve_and_check(): looking for {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for futuredate-AAAA.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for futuredate-AAAA.pastdate-ds.test.dnssec-tools.org futuredate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} futuredate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature not yet valid. Current time (Thu Apr 26 20:13:49 2007) is less than signature inception time (Sat Jun 16 07:09:29 2007). Cannot show that pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 165: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=futuredate-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 165: ****END**** 166: Test Case 166: ****START**** val_resolve_and_check(): looking for {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for pastdate-AAAA.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for pastdate-AAAA.pastdate-ds.test.dnssec-tools.org pastdate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} pastdate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion Signature expired. Current time (Thu Apr 26 20:13:49 2007) is greater than signature expiration time (Tue Apr 17 07:04:29 2007). Cannot show that pastdate-ds.test.dnssec-tools.org is provably unsecure. Test Case 166: OK Result: VAL_BOGUS:2 p_type: t = 28, s = 1, r =AAAA name=pastdate-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 166: ****END**** 167: Test Case 167: ****START**** val_resolve_and_check(): looking for {addedlater-A.pastdate-ds.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {addedlater-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {addedlater-A.pastdate-ds.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-A.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-A.pastdate-ds.test.dnssec-tools.org addedlater-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-A.pastdate-ds.test.dnssec-tools.org 1 1} pastdate-ds.test.dnssec-tools.org requires DNSSEC pastdate-ds.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xcb39f0803beb747c827ec10fd3bb00317921bb05 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x4df859390bf2f76b3717a56daffadbda8c3f2efd rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x5a3b6a860e6eb977b698ddd9824de113a629f80e rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Bogus Proof Test Case 167: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=pastdate-ds.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=pastdate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 167: ****END**** 168: Test Case 168: ****START**** val_resolve_and_check(): looking for {addedlater-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {addedlater-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {addedlater-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-AAAA.pastdate-ds.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-AAAA.pastdate-ds.test.dnssec-tools.org addedlater-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-AAAA.pastdate-ds.test.dnssec-tools.org 1 28} pastdate-ds.test.dnssec-tools.org requires DNSSEC pastdate-ds.test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xcb39f0803beb747c827ec10fd3bb00317921bb05 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x4df859390bf2f76b3717a56daffadbda8c3f2efd rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x5a3b6a860e6eb977b698ddd9824de113a629f80e rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS Bogus Proof Test Case 168: OK Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=pastdate-ds.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=pastdate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 43, s = 1, r =DS name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 168: ****END**** 169: Test Case 169: ****START**** val_resolve_and_check(): looking for {addedlater-A.test.dnssec-tools.org 1 1} p_type: t = 1, s = 1, r =A ask_cache(): looking for {addedlater-A.test.dnssec-tools.org IN(1) A(1)} ask_resolver(): sending query for {addedlater-A.test.dnssec-tools.org 1 1} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-A.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-A.test.dnssec-tools.org addedlater-A.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-A.test.dnssec-tools.org 1 1} test.dnssec-tools.org requires DNSSEC test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf32eb34a78e1d1296f71df53083c84c1bc2d284a rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf46af5fe5d289b686acd74c30f2c18e27333c63e rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x2cf44c841283440ff08976971aaac19845510d68 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS proving non-existence for {addedlater-A.test.dnssec-tools.org, 1, 1} Test Case 169: FAILED: Remaining error values expected Result: VAL_NONEXISTENT_NAME:168 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 47, s = 1, r =NSEC name=test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 169: ****END**** 170: Test Case 170: ****START**** val_resolve_and_check(): looking for {addedlater-AAAA.test.dnssec-tools.org 1 28} p_type: t = 28, s = 1, r =AAAA ask_cache(): looking for {addedlater-AAAA.test.dnssec-tools.org IN(1) AAAA(28)} ask_resolver(): sending query for {addedlater-AAAA.test.dnssec-tools.org 1 28} dnssec-tools.org requires DNSSEC Setting D0 bit and using EDNS0 Sending query for addedlater-AAAA.test.dnssec-tools.org to: 76.216.12.217 168.150.236.43 End of Sending query for addedlater-AAAA.test.dnssec-tools.org addedlater-AAAA.test.dnssec-tools.org requires DNSSEC ask_resolver(): found data for {addedlater-AAAA.test.dnssec-tools.org 1 28} test.dnssec-tools.org requires DNSSEC test.dnssec-tools.org requires DNSSEC longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org requires DNSSEC verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf32eb34a78e1d1296f71df53083c84c1bc2d284a rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0xf46af5fe5d289b686acd74c30f2c18e27333c63e rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS verifying next assertion rsasha1_sigverify(): parsing the public key... rsasha1_sigverify(): SHA-1 hash = 0x2cf44c841283440ff08976971aaac19845510d68 rsasha1_sigverify(): verifying RSA signature... RSA_verify returned SUCCESS proving non-existence for {addedlater-AAAA.test.dnssec-tools.org, 1, 28} Test Case 170: FAILED: Remaining error values expected Result: VAL_NONEXISTENT_NAME:168 Associated Proofs Follow: p_type: t = 6, s = 1, r =SOA name=test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 p_type: t = 47, s = 1, r =NSEC name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Result: VAL_BOGUS:2 Associated Proofs Follow: p_type: t = 47, s = 1, r =NSEC name=test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81 p_type: t = 48, s = 1, r =DNSKEY name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10 Test Case 170: ****END**** Suite '': Final results: 4/170 tests failed