Reading root hints from /usr/local/etc/dnssec-tools/root.hints
Done reading root hints
Reading resolver policy from /usr/local/etc/dnssec-tools/resolv.conf
Done reading resolver configuration
Reading validator policy from /usr/local/etc/dnssec-tools/dnsval.conf
Reading next policy fragment
Done reading validator configuration
Context created with /usr/local/etc/dnssec-tools/dnsval.conf /usr/local/etc/dnssec-tools/resolv.conf /usr/local/etc/dnssec-tools/root.hints
Suite '': Running 170 tests
1: Test Case 1: ****START****
val_resolve_and_check(): looking for {good-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-A.test.dnssec-tools.org 1 1}
good-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-A.test.dnssec-tools.org
good-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-A.test.dnssec-tools.org 1 1}
good-A.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {test.dnssec-tools.org IN(1) DNSKEY(48)}
ask_resolver(): sending query for {test.dnssec-tools.org 1 48}
test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for test.dnssec-tools.org to:
76.216.12.217
End of Sending query for test.dnssec-tools.org
test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {test.dnssec-tools.org 1 48}
test.dnssec-tools.org requires DNSSEC
key test.dnssec-tools.org is trusted
verifying next assertion: {good-A.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 1: OK
Result: VAL_SUCCESS:131
name=good-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 1: ****END****
2: Test Case 2: ****START****
val_resolve_and_check(): looking for {badsign-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-A.test.dnssec-tools.org 1 1}
badsign-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-A.test.dnssec-tools.org
badsign-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-A.test.dnssec-tools.org 1 1}
badsign-A.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-A.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 2: OK
Result: VAL_BOGUS:130
name=badsign-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 2: ****END****
3: Test Case 3: ****START****
val_resolve_and_check(): looking for {nosig-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 1}
nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.test.dnssec-tools.org
nosig-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.test.dnssec-tools.org 1 1}
nosig-A.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 46}
nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.test.dnssec-tools.org
nosig-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-A.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-A.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.test.dnssec-tools.org
nosig-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-A.test.dnssec-tools.org is provably unsecure.
Test Case 3: OK
Result: VAL_BOGUS:2
name=nosig-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 3: ****END****
4: Test Case 4: ****START****
val_resolve_and_check(): looking for {baddata-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-A.test.dnssec-tools.org 1 1}
baddata-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-A.test.dnssec-tools.org
baddata-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-A.test.dnssec-tools.org 1 1}
baddata-A.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-A.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 4: OK
Result: VAL_BOGUS:130
name=baddata-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 4: ****END****
5: Test Case 5: ****START****
val_resolve_and_check(): looking for {futuredate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-A.test.dnssec-tools.org 1 1}
futuredate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-A.test.dnssec-tools.org
futuredate-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-A.test.dnssec-tools.org 1 1}
futuredate-A.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-A.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:44:51 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 5: OK
Result: VAL_BOGUS:130
name=futuredate-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 5: ****END****
6: Test Case 6: ****START****
val_resolve_and_check(): looking for {pastdate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-A.test.dnssec-tools.org 1 1}
pastdate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-A.test.dnssec-tools.org
pastdate-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-A.test.dnssec-tools.org 1 1}
pastdate-A.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-A.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:44:51 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 6: OK
Result: VAL_BOGUS:130
name=pastdate-A.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 6: ****END****
7: Test Case 7: ****START****
val_resolve_and_check(): looking for {good-cname-to-good-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-cname-to-good-A.test.dnssec-tools.org 1 1}
good-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-good-A.test.dnssec-tools.org
good-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-a.test.dnssec-tools.org 1 1}
good-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
good-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-good-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbf008f661b98a862cec4bf5e7ef78e5579ac9799
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {good-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 7: OK
Result: VAL_SUCCESS:131
name=good-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 7: ****END****
8: Test Case 8: ****START****
val_resolve_and_check(): looking for {good-cname-to-badsign-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-cname-to-badsign-A.test.dnssec-tools.org 1 1}
good-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-badsign-A.test.dnssec-tools.org
badsign-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-a.test.dnssec-tools.org 1 1}
good-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
badsign-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-badsign-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x0dc058db436c23085b51855662798f44d55e4e03
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {badsign-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 8: OK
Result: VAL_SUCCESS:131
name=good-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 8: ****END****
9: Test Case 9: ****START****
val_resolve_and_check(): looking for {good-cname-to-nosig-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-cname-to-nosig-A.test.dnssec-tools.org 1 1}
good-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-nosig-A.test.dnssec-tools.org
nosig-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-a.test.dnssec-tools.org 1 1}
good-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
nosig-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-nosig-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x604cbc9238c8187ef1d2fb53707ec5a74a3405dc
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
proving non-existence for {nosig-A.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure.
Test Case 9: OK
Result: VAL_SUCCESS:131
name=good-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:2
name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 9: ****END****
10: Test Case 10: ****START****
val_resolve_and_check(): looking for {good-cname-to-baddata-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-cname-to-baddata-A.test.dnssec-tools.org 1 1}
good-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-baddata-A.test.dnssec-tools.org
baddata-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-a.test.dnssec-tools.org 1 1}
good-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
baddata-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-baddata-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x9c646b07994d5bc760c4606b14194711497a1c79
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {baddata-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 10: OK
Result: VAL_SUCCESS:131
name=good-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 10: ****END****
11: Test Case 11: ****START****
val_resolve_and_check(): looking for {good-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
good-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-futuredate-A.test.dnssec-tools.org
futuredate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-a.test.dnssec-tools.org 1 1}
good-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
futuredate-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-futuredate-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbe2608b586b01a27adc46c56d218601c5060bebe
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {futuredate-a.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:44:52 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 11: OK
Result: VAL_SUCCESS:131
name=good-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 11: ****END****
12: Test Case 12: ****START****
val_resolve_and_check(): looking for {good-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
good-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-pastdate-A.test.dnssec-tools.org
pastdate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-a.test.dnssec-tools.org 1 1}
good-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
pastdate-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-pastdate-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xa26ce7365a444b564dc5fb7a8e8247852d8ec789
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {pastdate-a.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:44:52 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 12: OK
Result: VAL_SUCCESS:131
name=good-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 12: ****END****
13: Test Case 13: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-good-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-cname-to-good-A.test.dnssec-tools.org 1 1}
badsign-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-good-A.test.dnssec-tools.org
good-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-a.test.dnssec-tools.org 1 1}
badsign-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
good-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-good-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x39abaa9a7f73c15dc59dc8f106af5aa451801226
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {good-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 13: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 13: ****END****
14: Test Case 14: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-badsign-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-cname-to-badsign-A.test.dnssec-tools.org 1 1}
badsign-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-badsign-A.test.dnssec-tools.org
badsign-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-a.test.dnssec-tools.org 1 1}
badsign-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
badsign-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-badsign-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc80f02d754997440324bac1255a7b69b894ee558
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {badsign-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 14: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 14: ****END****
15: Test Case 15: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-nosig-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-cname-to-nosig-A.test.dnssec-tools.org 1 1}
badsign-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-nosig-A.test.dnssec-tools.org
nosig-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-a.test.dnssec-tools.org 1 1}
badsign-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
nosig-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-nosig-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x9d394071d1ad65e3257dbf7009774f74c8312804
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
proving non-existence for {nosig-A.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure.
Test Case 15: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:2
name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 15: ****END****
16: Test Case 16: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-baddata-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-cname-to-baddata-A.test.dnssec-tools.org 1 1}
badsign-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-baddata-A.test.dnssec-tools.org
baddata-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-a.test.dnssec-tools.org 1 1}
badsign-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
baddata-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-baddata-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x697896972c279a4b8d1d2bd758e108aa843ac2d7
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {baddata-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 16: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 16: ****END****
17: Test Case 17: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
badsign-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-futuredate-A.test.dnssec-tools.org
futuredate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-a.test.dnssec-tools.org 1 1}
badsign-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
futuredate-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-futuredate-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x1dbd246907f75225ffa95c4e9b47799bea907bd5
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {futuredate-a.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:44:53 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 17: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 17: ****END****
18: Test Case 18: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
badsign-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-pastdate-A.test.dnssec-tools.org
pastdate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-a.test.dnssec-tools.org 1 1}
badsign-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
pastdate-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-pastdate-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xcc81a0c5f6f44113c17aa512733da562957296af
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {pastdate-a.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:44:53 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 18: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 18: ****END****
19: Test Case 19: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-good-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-cname-to-good-A.test.dnssec-tools.org 1 1}
nosig-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-good-A.test.dnssec-tools.org
good-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-a.test.dnssec-tools.org 1 1}
nosig-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
good-a.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-good-A.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-good-A.test.dnssec-tools.org 1 46}
nosig-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-good-A.test.dnssec-tools.org
verifying next assertion: {good-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
nosig-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-good-A.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-good-A.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-good-A.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-good-A.test.dnssec-tools.org
ask_cache(): looking for {good-a.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {good-a.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for good-a.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-a.test.dnssec-tools.org
good-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-a.test.dnssec-tools.org 1 6}
proving non-existence for {good-a.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-good-A.test.dnssec-tools.org is provably unsecure.
Test Case 19: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_SUCCESS:131
name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 19: ****END****
20: Test Case 20: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-badsign-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-cname-to-badsign-A.test.dnssec-tools.org 1 1}
nosig-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-badsign-A.test.dnssec-tools.org
badsign-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-a.test.dnssec-tools.org 1 1}
nosig-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
badsign-a.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-badsign-A.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-badsign-A.test.dnssec-tools.org 1 46}
nosig-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-badsign-A.test.dnssec-tools.org
verifying next assertion: {badsign-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
nosig-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-badsign-A.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-badsign-A.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-badsign-A.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-badsign-A.test.dnssec-tools.org
ask_cache(): looking for {badsign-a.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {badsign-a.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for badsign-a.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-a.test.dnssec-tools.org
badsign-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-a.test.dnssec-tools.org 1 6}
proving non-existence for {badsign-a.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-badsign-A.test.dnssec-tools.org is provably unsecure.
Test Case 20: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:130
name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 20: ****END****
21: Test Case 21: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-nosig-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-cname-to-nosig-A.test.dnssec-tools.org 1 1}
nosig-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-nosig-A.test.dnssec-tools.org
nosig-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-a.test.dnssec-tools.org 1 1}
nosig-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
nosig-a.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-nosig-A.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-nosig-A.test.dnssec-tools.org 1 46}
nosig-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-nosig-A.test.dnssec-tools.org
proving non-existence for {nosig-A.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure.
nosig-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-nosig-A.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-nosig-A.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-nosig-A.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-nosig-A.test.dnssec-tools.org
ask_cache(): looking for {nosig-a.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-a.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-a.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-a.test.dnssec-tools.org
nosig-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-a.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-a.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-nosig-A.test.dnssec-tools.org is provably unsecure.
Test Case 21: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:2
name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 21: ****END****
22: Test Case 22: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-baddata-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-cname-to-baddata-A.test.dnssec-tools.org 1 1}
nosig-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-baddata-A.test.dnssec-tools.org
baddata-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-a.test.dnssec-tools.org 1 1}
nosig-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
baddata-a.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-baddata-A.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-baddata-A.test.dnssec-tools.org 1 46}
nosig-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-baddata-A.test.dnssec-tools.org
verifying next assertion: {baddata-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
nosig-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-baddata-A.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-baddata-A.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-baddata-A.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-baddata-A.test.dnssec-tools.org
ask_cache(): looking for {baddata-a.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {baddata-a.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for baddata-a.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-a.test.dnssec-tools.org
baddata-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-a.test.dnssec-tools.org 1 6}
proving non-existence for {baddata-a.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-baddata-A.test.dnssec-tools.org is provably unsecure.
Test Case 22: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:130
name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 22: ****END****
23: Test Case 23: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
nosig-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-futuredate-A.test.dnssec-tools.org
futuredate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-a.test.dnssec-tools.org 1 1}
nosig-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
futuredate-a.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-futuredate-A.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-futuredate-A.test.dnssec-tools.org 1 46}
nosig-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-futuredate-A.test.dnssec-tools.org
verifying next assertion: {futuredate-a.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:44:55 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
nosig-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-futuredate-A.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-futuredate-A.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-futuredate-A.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-futuredate-A.test.dnssec-tools.org
ask_cache(): looking for {futuredate-a.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {futuredate-a.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for futuredate-a.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-a.test.dnssec-tools.org
futuredate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-a.test.dnssec-tools.org 1 6}
proving non-existence for {futuredate-a.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-futuredate-A.test.dnssec-tools.org is provably unsecure.
Test Case 23: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:130
name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 23: ****END****
24: Test Case 24: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
nosig-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-pastdate-A.test.dnssec-tools.org
pastdate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-a.test.dnssec-tools.org 1 1}
nosig-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
pastdate-a.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-pastdate-A.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-pastdate-A.test.dnssec-tools.org 1 46}
nosig-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-pastdate-A.test.dnssec-tools.org
verifying next assertion: {pastdate-a.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:44:55 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
nosig-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-pastdate-A.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-pastdate-A.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-pastdate-A.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-pastdate-A.test.dnssec-tools.org
ask_cache(): looking for {pastdate-a.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {pastdate-a.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for pastdate-a.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-a.test.dnssec-tools.org
pastdate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-a.test.dnssec-tools.org 1 6}
proving non-existence for {pastdate-a.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-pastdate-A.test.dnssec-tools.org is provably unsecure.
Test Case 24: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:130
name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 24: ****END****
25: Test Case 25: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-good-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-cname-to-good-A.test.dnssec-tools.org 1 1}
baddata-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-good-A.test.dnssec-tools.org
other-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-a.test.dnssec-tools.org 1 1}
baddata-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
other-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-good-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x6a78a2852a2b43edd3c492389a5d8d3ae4c0de7b
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 25: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 25: ****END****
26: Test Case 26: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-badsign-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-cname-to-badsign-A.test.dnssec-tools.org 1 1}
baddata-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-badsign-A.test.dnssec-tools.org
other-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-a.test.dnssec-tools.org 1 1}
baddata-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
other-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-badsign-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf66d6e226a09a50085fad4c7890b5c0d9480008c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 26: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 26: ****END****
27: Test Case 27: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-nosig-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-cname-to-nosig-A.test.dnssec-tools.org 1 1}
baddata-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-nosig-A.test.dnssec-tools.org
other-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-a.test.dnssec-tools.org 1 1}
baddata-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
other-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-nosig-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf680c888fe30510628838273e64761e9ffeaf262
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 27: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 27: ****END****
28: Test Case 28: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-baddata-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-cname-to-baddata-A.test.dnssec-tools.org 1 1}
baddata-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-baddata-A.test.dnssec-tools.org
other-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-a.test.dnssec-tools.org 1 1}
baddata-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
other-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-baddata-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x87d9ee12f07366c93022dc2ee4df22e8dea40865
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 28: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 28: ****END****
29: Test Case 29: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
baddata-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-futuredate-A.test.dnssec-tools.org
other-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-a.test.dnssec-tools.org 1 1}
baddata-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
other-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-futuredate-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbe5ad5abb58b4a829ba9ad677bbac57b01b49dc1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 29: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 29: ****END****
30: Test Case 30: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
baddata-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-pastdate-A.test.dnssec-tools.org
other-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-a.test.dnssec-tools.org 1 1}
baddata-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
other-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-pastdate-A.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x93e3cafe6a2b17b4d504cc46b43eb6b6bf8daa45
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xe221ffc9ebade193806b1544466ce5aa80197f3c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 30: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 30: ****END****
31: Test Case 31: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-good-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-cname-to-good-A.test.dnssec-tools.org 1 1}
futuredate-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-good-A.test.dnssec-tools.org
good-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-a.test.dnssec-tools.org 1 1}
futuredate-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
good-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-good-A.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:44:56 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {good-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 31: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 31: ****END****
32: Test Case 32: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-badsign-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-cname-to-badsign-A.test.dnssec-tools.org 1 1}
futuredate-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-badsign-A.test.dnssec-tools.org
badsign-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-a.test.dnssec-tools.org 1 1}
futuredate-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
badsign-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-badsign-A.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:44:56 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {badsign-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 32: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 32: ****END****
33: Test Case 33: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-nosig-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-cname-to-nosig-A.test.dnssec-tools.org 1 1}
futuredate-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-nosig-A.test.dnssec-tools.org
nosig-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-a.test.dnssec-tools.org 1 1}
futuredate-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
nosig-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-nosig-A.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:44:56 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
proving non-existence for {nosig-A.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure.
Test Case 33: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:2
name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 33: ****END****
34: Test Case 34: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-baddata-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-cname-to-baddata-A.test.dnssec-tools.org 1 1}
futuredate-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-baddata-A.test.dnssec-tools.org
baddata-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-a.test.dnssec-tools.org 1 1}
futuredate-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
baddata-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-baddata-A.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:44:57 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {baddata-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 34: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 34: ****END****
35: Test Case 35: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
futuredate-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-futuredate-A.test.dnssec-tools.org
futuredate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-a.test.dnssec-tools.org 1 1}
futuredate-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
futuredate-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-futuredate-A.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:44:57 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {futuredate-a.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:44:57 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 35: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 35: ****END****
36: Test Case 36: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
futuredate-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-pastdate-A.test.dnssec-tools.org
pastdate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-a.test.dnssec-tools.org 1 1}
futuredate-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
pastdate-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-pastdate-A.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:44:57 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {pastdate-a.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:44:57 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 36: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 36: ****END****
37: Test Case 37: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-good-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-cname-to-good-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-cname-to-good-A.test.dnssec-tools.org 1 1}
pastdate-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-good-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-good-A.test.dnssec-tools.org
good-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-a.test.dnssec-tools.org 1 1}
pastdate-cname-to-good-A.test.dnssec-tools.org requires DNSSEC
good-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-good-A.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:44:57 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {good-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc6f42d66919817813631819d8b0bf57954bfb23c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 37: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-good-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=good-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 37: ****END****
38: Test Case 38: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-badsign-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-cname-to-badsign-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-cname-to-badsign-A.test.dnssec-tools.org 1 1}
pastdate-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-badsign-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-badsign-A.test.dnssec-tools.org
badsign-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-a.test.dnssec-tools.org 1 1}
pastdate-cname-to-badsign-A.test.dnssec-tools.org requires DNSSEC
badsign-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-badsign-A.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:44:57 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {badsign-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb3364d02b50b236aa2eee8e14e621f85790234a1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 38: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-badsign-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=badsign-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 38: ****END****
39: Test Case 39: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-nosig-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-cname-to-nosig-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-cname-to-nosig-A.test.dnssec-tools.org 1 1}
pastdate-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-nosig-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-nosig-A.test.dnssec-tools.org
nosig-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-a.test.dnssec-tools.org 1 1}
pastdate-cname-to-nosig-A.test.dnssec-tools.org requires DNSSEC
nosig-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-nosig-A.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:44:57 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
proving non-existence for {nosig-A.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-a.test.dnssec-tools.org is provably unsecure.
Test Case 39: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-nosig-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:2
name=nosig-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 39: ****END****
40: Test Case 40: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-baddata-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-cname-to-baddata-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-cname-to-baddata-A.test.dnssec-tools.org 1 1}
pastdate-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-baddata-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-baddata-A.test.dnssec-tools.org
baddata-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-a.test.dnssec-tools.org 1 1}
pastdate-cname-to-baddata-A.test.dnssec-tools.org requires DNSSEC
baddata-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-baddata-A.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:44:57 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {baddata-a.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x26d173e030bb655b112ca4229fa1a92d2e5b70ea
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 40: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-baddata-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=baddata-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 40: ****END****
41: Test Case 41: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-cname-to-futuredate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-cname-to-futuredate-A.test.dnssec-tools.org 1 1}
pastdate-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-futuredate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-futuredate-A.test.dnssec-tools.org
futuredate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-a.test.dnssec-tools.org 1 1}
pastdate-cname-to-futuredate-A.test.dnssec-tools.org requires DNSSEC
futuredate-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-futuredate-A.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:44:58 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {futuredate-a.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:44:58 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 41: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-futuredate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=futuredate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 41: ****END****
42: Test Case 42: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-cname-to-pastdate-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-cname-to-pastdate-A.test.dnssec-tools.org 1 1}
pastdate-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-pastdate-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-pastdate-A.test.dnssec-tools.org
pastdate-a.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-a.test.dnssec-tools.org 1 1}
pastdate-cname-to-pastdate-A.test.dnssec-tools.org requires DNSSEC
pastdate-a.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-pastdate-A.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:44:58 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {pastdate-a.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:44:58 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 42: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-pastdate-A.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=pastdate-a.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 42: ****END****
43: Test Case 43: ****START****
val_resolve_and_check(): looking for {good-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-AAAA.test.dnssec-tools.org 1 28}
good-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-AAAA.test.dnssec-tools.org
good-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-AAAA.test.dnssec-tools.org 1 28}
good-AAAA.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-AAAA.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 43: OK
Result: VAL_SUCCESS:131
name=good-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 43: ****END****
44: Test Case 44: ****START****
val_resolve_and_check(): looking for {badsign-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-AAAA.test.dnssec-tools.org 1 28}
badsign-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-AAAA.test.dnssec-tools.org
badsign-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-AAAA.test.dnssec-tools.org 1 28}
badsign-AAAA.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-AAAA.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 44: OK
Result: VAL_BOGUS:130
name=badsign-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 44: ****END****
45: Test Case 45: ****START****
val_resolve_and_check(): looking for {nosig-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 28}
nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.test.dnssec-tools.org
nosig-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.test.dnssec-tools.org 1 28}
nosig-AAAA.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 46}
nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.test.dnssec-tools.org
nosig-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-AAAA.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-AAAA.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.test.dnssec-tools.org
nosig-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-AAAA.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-AAAA.test.dnssec-tools.org is provably unsecure.
Test Case 45: OK
Result: VAL_BOGUS:2
name=nosig-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 45: ****END****
46: Test Case 46: ****START****
val_resolve_and_check(): looking for {baddata-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-AAAA.test.dnssec-tools.org 1 28}
baddata-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-AAAA.test.dnssec-tools.org
baddata-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-AAAA.test.dnssec-tools.org 1 28}
baddata-AAAA.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-AAAA.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 46: OK
Result: VAL_BOGUS:130
name=baddata-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 46: ****END****
47: Test Case 47: ****START****
val_resolve_and_check(): looking for {futuredate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-AAAA.test.dnssec-tools.org 1 28}
futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-AAAA.test.dnssec-tools.org
futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-AAAA.test.dnssec-tools.org 1 28}
futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-AAAA.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:44:59 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 47: OK
Result: VAL_BOGUS:130
name=futuredate-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 47: ****END****
48: Test Case 48: ****START****
val_resolve_and_check(): looking for {pastdate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-AAAA.test.dnssec-tools.org 1 28}
pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-AAAA.test.dnssec-tools.org
pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-AAAA.test.dnssec-tools.org 1 28}
pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-AAAA.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:44:59 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 48: OK
Result: VAL_BOGUS:130
name=pastdate-AAAA.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 48: ****END****
49: Test Case 49: ****START****
val_resolve_and_check(): looking for {good-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
good-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-good-AAAA.test.dnssec-tools.org
good-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-aaaa.test.dnssec-tools.org 1 28}
good-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
good-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-good-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbe1fb0a1390802bb025389dc70e9d41b17413b77
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {good-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 49: OK
Result: VAL_SUCCESS:131
name=good-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 49: ****END****
50: Test Case 50: ****START****
val_resolve_and_check(): looking for {good-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
good-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-badsign-AAAA.test.dnssec-tools.org
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-aaaa.test.dnssec-tools.org 1 28}
good-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-badsign-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x83da1c6cd8cdb11d3f7f9a840b0ff3acf638adc9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {badsign-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 50: OK
Result: VAL_SUCCESS:131
name=good-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 50: ****END****
51: Test Case 51: ****START****
val_resolve_and_check(): looking for {good-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
good-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-nosig-AAAA.test.dnssec-tools.org
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-aaaa.test.dnssec-tools.org 1 28}
good-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-nosig-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x192ab1499cbd6abb64bdce11989af978ccf5664b
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
proving non-existence for {nosig-AAAA.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure.
Test Case 51: OK
Result: VAL_SUCCESS:131
name=good-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:2
name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 51: ****END****
52: Test Case 52: ****START****
val_resolve_and_check(): looking for {good-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
good-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-baddata-AAAA.test.dnssec-tools.org
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-aaaa.test.dnssec-tools.org 1 28}
good-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-baddata-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x289f9937df9870543f639037fba11bbe3a72f1a5
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {baddata-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 52: OK
Result: VAL_SUCCESS:131
name=good-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 52: ****END****
53: Test Case 53: ****START****
val_resolve_and_check(): looking for {good-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
good-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-futuredate-AAAA.test.dnssec-tools.org
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-aaaa.test.dnssec-tools.org 1 28}
good-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-futuredate-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc9c602cb09c03f3c2b4f30a3638772f0c4a30bbf
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {futuredate-aaaa.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:00 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 53: OK
Result: VAL_SUCCESS:131
name=good-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 53: ****END****
54: Test Case 54: ****START****
val_resolve_and_check(): looking for {good-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
good-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-cname-to-pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-cname-to-pastdate-AAAA.test.dnssec-tools.org
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-aaaa.test.dnssec-tools.org 1 28}
good-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-cname-to-pastdate-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x995f3e1b31afcddd7f372fd9eb0a0e3c92af1f5d
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {pastdate-aaaa.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:00 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 54: OK
Result: VAL_SUCCESS:131
name=good-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 54: ****END****
55: Test Case 55: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
badsign-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-good-AAAA.test.dnssec-tools.org
good-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-aaaa.test.dnssec-tools.org 1 28}
badsign-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
good-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-good-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x8e17e0d36ab009634f8affc842f13b177a9af597
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {good-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 55: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 55: ****END****
56: Test Case 56: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
badsign-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-badsign-AAAA.test.dnssec-tools.org
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-aaaa.test.dnssec-tools.org 1 28}
badsign-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-badsign-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x32d426185cbafffa7da2802310ab468e7bfc9133
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {badsign-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 56: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 56: ****END****
57: Test Case 57: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
badsign-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-nosig-AAAA.test.dnssec-tools.org
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-aaaa.test.dnssec-tools.org 1 28}
badsign-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-nosig-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x4a3e0d3e3941e3500ee099361eb5e7116b5d5639
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
proving non-existence for {nosig-AAAA.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure.
Test Case 57: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:2
name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 57: ****END****
58: Test Case 58: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
badsign-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-baddata-AAAA.test.dnssec-tools.org
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-aaaa.test.dnssec-tools.org 1 28}
badsign-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-baddata-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x02634322562be7e03420a166e758e3eb4fdc1560
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {baddata-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 58: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 58: ****END****
59: Test Case 59: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-aaaa.test.dnssec-tools.org 1 28}
badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xfcfae5cc3bc4393b6316670fb70d7ecffbcc6e58
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {futuredate-aaaa.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:01 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 59: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 59: ****END****
60: Test Case 60: ****START****
val_resolve_and_check(): looking for {badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-aaaa.test.dnssec-tools.org 1 28}
badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xa5ae48d26bbaf2e7de743a738c29b0be1c07910f
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {pastdate-aaaa.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:01 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 60: OK
Result: VAL_BOGUS:130
name=badsign-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 60: ****END****
61: Test Case 61: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
nosig-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-good-AAAA.test.dnssec-tools.org
good-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-aaaa.test.dnssec-tools.org 1 28}
nosig-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
good-aaaa.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-good-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-good-AAAA.test.dnssec-tools.org 1 46}
nosig-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-good-AAAA.test.dnssec-tools.org
verifying next assertion: {good-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
nosig-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-good-AAAA.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-good-AAAA.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-good-AAAA.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-good-AAAA.test.dnssec-tools.org
ask_cache(): looking for {good-aaaa.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {good-aaaa.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for good-aaaa.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-aaaa.test.dnssec-tools.org
good-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-aaaa.test.dnssec-tools.org 1 6}
proving non-existence for {good-aaaa.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-good-AAAA.test.dnssec-tools.org is provably unsecure.
Test Case 61: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_SUCCESS:131
name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 61: ****END****
62: Test Case 62: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
nosig-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-badsign-AAAA.test.dnssec-tools.org
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-aaaa.test.dnssec-tools.org 1 28}
nosig-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org 1 46}
nosig-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-badsign-AAAA.test.dnssec-tools.org
verifying next assertion: {badsign-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
nosig-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-badsign-AAAA.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-badsign-AAAA.test.dnssec-tools.org
ask_cache(): looking for {badsign-aaaa.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {badsign-aaaa.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for badsign-aaaa.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-aaaa.test.dnssec-tools.org
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-aaaa.test.dnssec-tools.org 1 6}
proving non-existence for {badsign-aaaa.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-badsign-AAAA.test.dnssec-tools.org is provably unsecure.
Test Case 62: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:130
name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 62: ****END****
63: Test Case 63: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
nosig-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-nosig-AAAA.test.dnssec-tools.org
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-aaaa.test.dnssec-tools.org 1 28}
nosig-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org 1 46}
nosig-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-nosig-AAAA.test.dnssec-tools.org
proving non-existence for {nosig-AAAA.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure.
nosig-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-nosig-AAAA.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-nosig-AAAA.test.dnssec-tools.org
ask_cache(): looking for {nosig-aaaa.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-aaaa.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-aaaa.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-aaaa.test.dnssec-tools.org
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-aaaa.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-aaaa.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-nosig-AAAA.test.dnssec-tools.org is provably unsecure.
Test Case 63: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:2
name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 63: ****END****
64: Test Case 64: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
nosig-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-baddata-AAAA.test.dnssec-tools.org
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-aaaa.test.dnssec-tools.org 1 28}
nosig-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org 1 46}
nosig-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-baddata-AAAA.test.dnssec-tools.org
verifying next assertion: {baddata-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
nosig-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-baddata-AAAA.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-baddata-AAAA.test.dnssec-tools.org
ask_cache(): looking for {baddata-aaaa.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {baddata-aaaa.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for baddata-aaaa.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-aaaa.test.dnssec-tools.org
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-aaaa.test.dnssec-tools.org 1 6}
proving non-existence for {baddata-aaaa.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-baddata-AAAA.test.dnssec-tools.org is provably unsecure.
Test Case 64: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:130
name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 64: ****END****
65: Test Case 65: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-aaaa.test.dnssec-tools.org 1 28}
nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 46}
nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org
verifying next assertion: {futuredate-aaaa.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:03 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org
ask_cache(): looking for {futuredate-aaaa.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {futuredate-aaaa.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for futuredate-aaaa.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-aaaa.test.dnssec-tools.org
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-aaaa.test.dnssec-tools.org 1 6}
proving non-existence for {futuredate-aaaa.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org is provably unsecure.
Test Case 65: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:130
name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 65: ****END****
66: Test Case 66: ****START****
val_resolve_and_check(): looking for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-aaaa.test.dnssec-tools.org 1 28}
nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 46}
nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org
verifying next assertion: {pastdate-aaaa.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:03 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org
ask_cache(): looking for {pastdate-aaaa.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {pastdate-aaaa.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for pastdate-aaaa.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-aaaa.test.dnssec-tools.org
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-aaaa.test.dnssec-tools.org 1 6}
proving non-existence for {pastdate-aaaa.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org is provably unsecure.
Test Case 66: OK
Result: VAL_BOGUS:2
name=nosig-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Result: VAL_BOGUS:130
name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 66: ****END****
67: Test Case 67: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
baddata-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-good-AAAA.test.dnssec-tools.org
other-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-aaaa.test.dnssec-tools.org 1 28}
baddata-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
other-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-good-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xa844bc461ba3d50cfe2edd21d949226365d7a01f
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 67: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 67: ****END****
68: Test Case 68: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
baddata-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-badsign-AAAA.test.dnssec-tools.org
other-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-aaaa.test.dnssec-tools.org 1 28}
baddata-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
other-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-badsign-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x4d2bf4591e422a49d398943d1bf94d6723eaac17
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 68: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 68: ****END****
69: Test Case 69: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
baddata-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-nosig-AAAA.test.dnssec-tools.org
other-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-aaaa.test.dnssec-tools.org 1 28}
baddata-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
other-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-nosig-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x2bdf2702b92700f5debfed675528d2f4c8be9157
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 69: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 69: ****END****
70: Test Case 70: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
baddata-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-baddata-AAAA.test.dnssec-tools.org
other-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-aaaa.test.dnssec-tools.org 1 28}
baddata-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
other-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-baddata-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x7e59d59d0b3a005663342b6f2a6b2b593a687c82
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 70: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 70: ****END****
71: Test Case 71: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org
other-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-aaaa.test.dnssec-tools.org 1 28}
baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
other-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x5e070c9d21de997cf0d8bf9eaf0c07bf9a847628
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 71: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 71: ****END****
72: Test Case 72: ****START****
val_resolve_and_check(): looking for {baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org
other-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {other-aaaa.test.dnssec-tools.org 1 28}
baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
other-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org, 1, 5}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x3a00541af35197f652f20043c66b0fcb547e33b2
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
verifying next assertion: {other-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x23fbd1a6ec37f426f1e03f89af5dde532538aac9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 72: OK
Result: VAL_BOGUS:130
name=baddata-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=other-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 72: ****END****
73: Test Case 73: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
futuredate-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-good-AAAA.test.dnssec-tools.org
good-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-aaaa.test.dnssec-tools.org 1 28}
futuredate-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
good-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-good-AAAA.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:45:04 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {good-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 73: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 73: ****END****
74: Test Case 74: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-aaaa.test.dnssec-tools.org 1 28}
futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:45:05 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {badsign-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 74: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 74: ****END****
75: Test Case 75: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-aaaa.test.dnssec-tools.org 1 28}
futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:45:05 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
proving non-existence for {nosig-AAAA.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure.
Test Case 75: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:2
name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 75: ****END****
76: Test Case 76: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-aaaa.test.dnssec-tools.org 1 28}
futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:45:05 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {baddata-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 76: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 76: ****END****
77: Test Case 77: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-aaaa.test.dnssec-tools.org 1 28}
futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:45:05 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {futuredate-aaaa.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:05 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 77: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 77: ****END****
78: Test Case 78: ****START****
val_resolve_and_check(): looking for {futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-aaaa.test.dnssec-tools.org 1 28}
futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org, 1, 5}
Signature not yet valid. Current time (Fri Apr 27 12:45:05 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
verifying next assertion: {pastdate-aaaa.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:05 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 78: OK
Result: VAL_BOGUS:130
name=futuredate-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 78: ****END****
79: Test Case 79: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-cname-to-good-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-cname-to-good-AAAA.test.dnssec-tools.org 1 28}
pastdate-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-good-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-good-AAAA.test.dnssec-tools.org
good-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-aaaa.test.dnssec-tools.org 1 28}
pastdate-cname-to-good-AAAA.test.dnssec-tools.org requires DNSSEC
good-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-good-AAAA.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:45:05 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {good-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x60a96d7ab5e853379fa411c9f3bd23a0889b6d7d
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 79: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-good-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_SUCCESS:131
name=good-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 79: ****END****
80: Test Case 80: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org 1 28}
pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-aaaa.test.dnssec-tools.org 1 28}
pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org requires DNSSEC
badsign-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:45:05 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {badsign-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xbb05ad54b8946a8a799f27514252a05a20f9d436
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 80: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-badsign-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=badsign-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 80: ****END****
81: Test Case 81: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org 1 28}
pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-aaaa.test.dnssec-tools.org 1 28}
pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org requires DNSSEC
nosig-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:45:05 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
proving non-existence for {nosig-AAAA.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-aaaa.test.dnssec-tools.org is provably unsecure.
Test Case 81: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-nosig-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:2
name=nosig-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 81: ****END****
82: Test Case 82: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org 1 28}
pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-aaaa.test.dnssec-tools.org 1 28}
pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org requires DNSSEC
baddata-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:45:06 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {baddata-aaaa.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x0a369d58cb3032d3363230da5b9fe61691e686b4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 82: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-baddata-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=baddata-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 82: ****END****
83: Test Case 83: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org 1 28}
pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-aaaa.test.dnssec-tools.org 1 28}
pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org requires DNSSEC
futuredate-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:45:06 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {futuredate-aaaa.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:06 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 83: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-futuredate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=futuredate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 83: ****END****
84: Test Case 84: ****START****
val_resolve_and_check(): looking for {pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org 1 28}
pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-aaaa.test.dnssec-tools.org 1 28}
pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org requires DNSSEC
pastdate-aaaa.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org, 1, 5}
Signature expired. Current time (Fri Apr 27 12:45:06 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
verifying next assertion: {pastdate-aaaa.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:06 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 84: OK
Result: VAL_BOGUS:130
name=pastdate-cname-to-pastdate-AAAA.test.dnssec-tools.org class=IN type=CNAME from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Result: VAL_BOGUS:130
name=pastdate-aaaa.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 84: ****END****
85: Test Case 85: ****START****
val_resolve_and_check(): looking for {good-A.good-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-A.good-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-A.good-ns.test.dnssec-tools.org 1 1}
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-A.good-ns.test.dnssec-tools.org
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-A.good-ns.test.dnssec-tools.org 1 1}
good-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DNSKEY(48)}
ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 48}
good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-ns.test.dnssec-tools.org
good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-ns.test.dnssec-tools.org 1 48}
good-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 43}
good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-ns.test.dnssec-tools.org
verifying next assertion: {good-A.good-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xe2aeca277936616eae8620360c0c55a5cadb0951
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-ns.test.dnssec-tools.org 1 43}
good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-ns.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc1483be0d8118e392b22999caa74e78c5a26bda9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x71b0068f74ff0fde8efdff8fec46c6233477ba5d
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {good-ns.test.dnssec-tools.org, 1, 43}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc5c1bc86050b106c78caee26497cf6cdf9d1b890
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 85: OK
Result: VAL_SUCCESS:131
name=good-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 85: ****END****
86: Test Case 86: ****START****
val_resolve_and_check(): looking for {badsign-A.good-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-A.good-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-A.good-ns.test.dnssec-tools.org 1 1}
badsign-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-A.good-ns.test.dnssec-tools.org
badsign-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-A.good-ns.test.dnssec-tools.org 1 1}
badsign-A.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-A.good-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x4a1e635efa7556a00f7f84db9b62562f4d5d9a44
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 86: OK
Result: VAL_BOGUS:130
name=badsign-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 86: ****END****
87: Test Case 87: ****START****
val_resolve_and_check(): looking for {nosig-A.good-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-A.good-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-A.good-ns.test.dnssec-tools.org 1 1}
nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.good-ns.test.dnssec-tools.org
nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.good-ns.test.dnssec-tools.org 1 1}
nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-A.good-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-A.good-ns.test.dnssec-tools.org 1 46}
nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.good-ns.test.dnssec-tools.org
nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.good-ns.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-A.good-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-A.good-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.good-ns.test.dnssec-tools.org
nosig-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.good-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.good-ns.test.dnssec-tools.org, 1, 6}
ask_cache(): looking for {good-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {good-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-ns.test.dnssec-tools.org
good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.good-ns.test.dnssec-tools.org, 1, 6}
Test Case 87: FAILED: Remaining error values expected
VAL_BOGUS(2)
Result: VAL_PROVABLY_UNSECURE:159
name=nosig-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_PROVABLY_UNSECURE:11
Test Case 87: ****END****
88: Test Case 88: ****START****
val_resolve_and_check(): looking for {baddata-A.good-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-A.good-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-A.good-ns.test.dnssec-tools.org 1 1}
baddata-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-A.good-ns.test.dnssec-tools.org
baddata-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-A.good-ns.test.dnssec-tools.org 1 1}
baddata-A.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-A.good-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xd02720a1d7b7cbe31e598f4d339f5b7941333a4f
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 88: OK
Result: VAL_BOGUS:130
name=baddata-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 88: ****END****
89: Test Case 89: ****START****
val_resolve_and_check(): looking for {futuredate-A.good-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-A.good-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-A.good-ns.test.dnssec-tools.org 1 1}
futuredate-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-A.good-ns.test.dnssec-tools.org
futuredate-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-A.good-ns.test.dnssec-tools.org 1 1}
futuredate-A.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-A.good-ns.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:45:07 2007) is less than signature inception time (Sat Jun 16 07:33:45 2007).
Test Case 89: OK
Result: VAL_BOGUS:130
name=futuredate-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 89: ****END****
90: Test Case 90: ****START****
val_resolve_and_check(): looking for {pastdate-A.good-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-A.good-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-A.good-ns.test.dnssec-tools.org 1 1}
pastdate-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-A.good-ns.test.dnssec-tools.org
pastdate-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-A.good-ns.test.dnssec-tools.org 1 1}
pastdate-A.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-A.good-ns.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:45:07 2007) is greater than signature expiration time (Tue Apr 17 07:28:45 2007).
Test Case 90: OK
Result: VAL_BOGUS:130
name=pastdate-A.good-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 90: ****END****
91: Test Case 91: ****START****
val_resolve_and_check(): looking for {good-AAAA.good-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-AAAA.good-ns.test.dnssec-tools.org 1 28}
good-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-AAAA.good-ns.test.dnssec-tools.org
good-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-AAAA.good-ns.test.dnssec-tools.org 1 28}
good-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-AAAA.good-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xd9ffe84f4550b7e0296890bcd85409530d43e1a6
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 91: OK
Result: VAL_SUCCESS:131
name=good-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 91: ****END****
92: Test Case 92: ****START****
val_resolve_and_check(): looking for {badsign-AAAA.good-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-AAAA.good-ns.test.dnssec-tools.org 1 28}
badsign-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-AAAA.good-ns.test.dnssec-tools.org
badsign-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-AAAA.good-ns.test.dnssec-tools.org 1 28}
badsign-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-AAAA.good-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x216e8ddcc77f9609822fb3c81a17f60d0d111b88
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 92: OK
Result: VAL_BOGUS:130
name=badsign-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 92: ****END****
93: Test Case 93: ****START****
val_resolve_and_check(): looking for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 28}
nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org
nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 28}
nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-AAAA.good-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 46}
nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org
nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-AAAA.good-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.good-ns.test.dnssec-tools.org
nosig-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.good-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-AAAA.good-ns.test.dnssec-tools.org, 1, 6}
Test Case 93: FAILED: Remaining error values expected
VAL_BOGUS(2)
Result: VAL_PROVABLY_UNSECURE:159
name=nosig-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_PROVABLY_UNSECURE:11
Test Case 93: ****END****
94: Test Case 94: ****START****
val_resolve_and_check(): looking for {baddata-AAAA.good-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-AAAA.good-ns.test.dnssec-tools.org 1 28}
baddata-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-AAAA.good-ns.test.dnssec-tools.org
baddata-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-AAAA.good-ns.test.dnssec-tools.org 1 28}
baddata-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-AAAA.good-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x565ea952ddd423f454aadaf035ac6b99e9952385
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 94: OK
Result: VAL_BOGUS:130
name=baddata-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 94: ****END****
95: Test Case 95: ****START****
val_resolve_and_check(): looking for {futuredate-AAAA.good-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-AAAA.good-ns.test.dnssec-tools.org 1 28}
futuredate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-AAAA.good-ns.test.dnssec-tools.org
futuredate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-AAAA.good-ns.test.dnssec-tools.org 1 28}
futuredate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-AAAA.good-ns.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:08 2007) is less than signature inception time (Sat Jun 16 07:33:45 2007).
Test Case 95: OK
Result: VAL_BOGUS:130
name=futuredate-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 95: ****END****
96: Test Case 96: ****START****
val_resolve_and_check(): looking for {pastdate-AAAA.good-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-AAAA.good-ns.test.dnssec-tools.org 1 28}
pastdate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-AAAA.good-ns.test.dnssec-tools.org
pastdate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-AAAA.good-ns.test.dnssec-tools.org 1 28}
pastdate-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-AAAA.good-ns.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:08 2007) is greater than signature expiration time (Tue Apr 17 07:28:45 2007).
Test Case 96: OK
Result: VAL_BOGUS:130
name=pastdate-AAAA.good-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 96: ****END****
97: Test Case 97: ****START****
val_resolve_and_check(): looking for {addedlater-A.good-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {addedlater-A.good-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {addedlater-A.good-ns.test.dnssec-tools.org 1 1}
addedlater-A.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-A.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-A.good-ns.test.dnssec-tools.org
addedlater-A.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-A.good-ns.test.dnssec-tools.org 1 1}
good-ns.test.dnssec-tools.org requires DNSSEC
good-ns.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-ns.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf370483d5519af9a60d515479e41ca9aa0d6a21f
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {good-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x67f15fd24e42075eb44a1c1f6a78c927dbaf6ee4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x44e0cf7d8a9b30f5f4468322c35f624afece43f7
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
proving non-existence for {addedlater-A.good-ns.test.dnssec-tools.org, 1, 1}
Test Case 97: OK
Result: VAL_NONEXISTENT_NAME:168
Associated Proofs Follow:
name=good-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=good-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 97: ****END****
98: Test Case 98: ****START****
val_resolve_and_check(): looking for {addedlater-AAAA.good-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {addedlater-AAAA.good-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {addedlater-AAAA.good-ns.test.dnssec-tools.org 1 28}
addedlater-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-AAAA.good-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-AAAA.good-ns.test.dnssec-tools.org
addedlater-AAAA.good-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-AAAA.good-ns.test.dnssec-tools.org 1 28}
good-ns.test.dnssec-tools.org requires DNSSEC
good-ns.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-ns.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf370483d5519af9a60d515479e41ca9aa0d6a21f
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {good-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x67f15fd24e42075eb44a1c1f6a78c927dbaf6ee4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x44e0cf7d8a9b30f5f4468322c35f624afece43f7
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
proving non-existence for {addedlater-AAAA.good-ns.test.dnssec-tools.org, 1, 28}
Test Case 98: OK
Result: VAL_NONEXISTENT_NAME:168
Associated Proofs Follow:
name=good-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.good-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=good-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=37611] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=good-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 98: ****END****
99: Test Case 99: ****START****
val_resolve_and_check(): looking for {good-A.badsign-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-A.badsign-ns.test.dnssec-tools.org 1 1}
good-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-A.badsign-ns.test.dnssec-tools.org
good-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-A.badsign-ns.test.dnssec-tools.org 1 1}
good-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DNSKEY(48)}
ask_resolver(): sending query for {badsign-ns.test.dnssec-tools.org 1 48}
badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-ns.test.dnssec-tools.org
badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-ns.test.dnssec-tools.org 1 48}
badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {badsign-ns.test.dnssec-tools.org 1 43}
badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-ns.test.dnssec-tools.org
verifying next assertion: {good-A.badsign-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x8441595fb65ad8e761a7376a8f4322f0a65cc9b2
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-ns.test.dnssec-tools.org 1 43}
badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x87447de847a18dec23f44149756e8674b6d90203
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 43}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x5719b345d33f2b209521c6a9e9d8abaf91be50ec
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Test Case 99: OK
Result: VAL_BOGUS:130
name=good-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 99: ****END****
100: Test Case 100: ****START****
val_resolve_and_check(): looking for {badsign-A.badsign-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-A.badsign-ns.test.dnssec-tools.org 1 1}
badsign-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-A.badsign-ns.test.dnssec-tools.org
badsign-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-A.badsign-ns.test.dnssec-tools.org 1 1}
badsign-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-A.badsign-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xa26d65dc95016fdfc29e075f32314965467a8709
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
ask_cache(): looking for {test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for test.dnssec-tools.org to:
76.216.12.217
End of Sending query for test.dnssec-tools.org
test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {test.dnssec-tools.org 1 6}
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 100: OK
Result: VAL_BOGUS:2
name=badsign-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 100: ****END****
101: Test Case 101: ****START****
val_resolve_and_check(): looking for {nosig-A.badsign-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-A.badsign-ns.test.dnssec-tools.org 1 1}
nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.badsign-ns.test.dnssec-tools.org
nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.badsign-ns.test.dnssec-tools.org 1 1}
nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-A.badsign-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-A.badsign-ns.test.dnssec-tools.org 1 46}
nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.badsign-ns.test.dnssec-tools.org
nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.badsign-ns.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-A.badsign-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-A.badsign-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.badsign-ns.test.dnssec-tools.org
nosig-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.badsign-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.badsign-ns.test.dnssec-tools.org, 1, 6}
ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {badsign-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-ns.test.dnssec-tools.org
badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.badsign-ns.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-A.badsign-ns.test.dnssec-tools.org is provably unsecure.
Test Case 101: OK
Result: VAL_BOGUS:2
name=nosig-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 101: ****END****
102: Test Case 102: ****START****
val_resolve_and_check(): looking for {baddata-A.badsign-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-A.badsign-ns.test.dnssec-tools.org 1 1}
baddata-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-A.badsign-ns.test.dnssec-tools.org
baddata-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-A.badsign-ns.test.dnssec-tools.org 1 1}
baddata-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-A.badsign-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x1dc21e62efb3de86bf811544299da72c40d667e8
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {badsign-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_cache(): found matching ack/nack response for {badsign-ns.test.dnssec-tools.org 1 43}
badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x87447de847a18dec23f44149756e8674b6d90203
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 43}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x5719b345d33f2b209521c6a9e9d8abaf91be50ec
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 102: OK
Result: VAL_BOGUS:2
name=baddata-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 102: ****END****
103: Test Case 103: ****START****
val_resolve_and_check(): looking for {futuredate-A.badsign-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-A.badsign-ns.test.dnssec-tools.org 1 1}
futuredate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-A.badsign-ns.test.dnssec-tools.org
futuredate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-A.badsign-ns.test.dnssec-tools.org 1 1}
futuredate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-A.badsign-ns.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:45:09 2007) is less than signature inception time (Sat Jun 16 07:09:22 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 103: OK
Result: VAL_BOGUS:2
name=futuredate-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 103: ****END****
104: Test Case 104: ****START****
val_resolve_and_check(): looking for {pastdate-A.badsign-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-A.badsign-ns.test.dnssec-tools.org 1 1}
pastdate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-A.badsign-ns.test.dnssec-tools.org
pastdate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-A.badsign-ns.test.dnssec-tools.org 1 1}
pastdate-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-A.badsign-ns.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:45:10 2007) is greater than signature expiration time (Tue Apr 17 07:04:22 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 104: OK
Result: VAL_BOGUS:2
name=pastdate-A.badsign-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 104: ****END****
105: Test Case 105: ****START****
val_resolve_and_check(): looking for {good-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
good-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-AAAA.badsign-ns.test.dnssec-tools.org
good-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
good-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-AAAA.badsign-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xff7a6d026647e21937fb67cfc689435014a29ee4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 105: OK
Result: VAL_BOGUS:130
name=good-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 105: ****END****
106: Test Case 106: ****START****
val_resolve_and_check(): looking for {badsign-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
badsign-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-AAAA.badsign-ns.test.dnssec-tools.org
badsign-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
badsign-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-AAAA.badsign-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x18277622b1554000be50df7c486d4cae820e0a06
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 106: OK
Result: VAL_BOGUS:2
name=badsign-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 106: ****END****
107: Test Case 107: ****START****
val_resolve_and_check(): looking for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org
nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-AAAA.badsign-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 46}
nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org
nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-AAAA.badsign-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.badsign-ns.test.dnssec-tools.org
nosig-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.badsign-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-AAAA.badsign-ns.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-AAAA.badsign-ns.test.dnssec-tools.org is provably unsecure.
Test Case 107: OK
Result: VAL_BOGUS:2
name=nosig-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 107: ****END****
108: Test Case 108: ****START****
val_resolve_and_check(): looking for {baddata-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
baddata-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-AAAA.badsign-ns.test.dnssec-tools.org
baddata-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
baddata-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-AAAA.badsign-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb0632f5a6df3aa21817e8c53e03b1bca384858cd
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {badsign-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {badsign-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_cache(): found matching ack/nack response for {badsign-ns.test.dnssec-tools.org 1 43}
badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x87447de847a18dec23f44149756e8674b6d90203
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 43}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x5719b345d33f2b209521c6a9e9d8abaf91be50ec
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 108: OK
Result: VAL_BOGUS:2
name=baddata-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 108: ****END****
109: Test Case 109: ****START****
val_resolve_and_check(): looking for {futuredate-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
futuredate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-AAAA.badsign-ns.test.dnssec-tools.org
futuredate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
futuredate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-AAAA.badsign-ns.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:10 2007) is less than signature inception time (Sat Jun 16 07:09:22 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 109: OK
Result: VAL_BOGUS:2
name=futuredate-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 109: ****END****
110: Test Case 110: ****START****
val_resolve_and_check(): looking for {pastdate-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
pastdate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-AAAA.badsign-ns.test.dnssec-tools.org
pastdate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
pastdate-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-AAAA.badsign-ns.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:10 2007) is greater than signature expiration time (Tue Apr 17 07:04:22 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 110: OK
Result: VAL_BOGUS:2
name=pastdate-AAAA.badsign-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 110: ****END****
111: Test Case 111: ****START****
val_resolve_and_check(): looking for {addedlater-A.badsign-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {addedlater-A.badsign-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {addedlater-A.badsign-ns.test.dnssec-tools.org 1 1}
addedlater-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-A.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-A.badsign-ns.test.dnssec-tools.org
addedlater-A.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-A.badsign-ns.test.dnssec-tools.org 1 1}
badsign-ns.test.dnssec-tools.org requires DNSSEC
badsign-ns.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x3d47364281e1e54953c2d9df68d3967976d8efc1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xde4690b2c88f56e951f724a747cce5806a7c86f1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x1f645d3d1f0d663d5f2159a4dd0699901b045590
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Bogus Proof
Test Case 111: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=badsign-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=badsign-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 111: ****END****
112: Test Case 112: ****START****
val_resolve_and_check(): looking for {addedlater-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {addedlater-AAAA.badsign-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {addedlater-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
addedlater-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-AAAA.badsign-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-AAAA.badsign-ns.test.dnssec-tools.org
addedlater-AAAA.badsign-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-AAAA.badsign-ns.test.dnssec-tools.org 1 28}
badsign-ns.test.dnssec-tools.org requires DNSSEC
badsign-ns.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x3d47364281e1e54953c2d9df68d3967976d8efc1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {badsign-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xde4690b2c88f56e951f724a747cce5806a7c86f1
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x1f645d3d1f0d663d5f2159a4dd0699901b045590
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Bogus Proof
Test Case 112: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=badsign-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=badsign-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567.badsign-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=22827] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=badsign-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 112: ****END****
113: Test Case 113: ****START****
val_resolve_and_check(): looking for {good-A.nosig-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-A.nosig-ns.test.dnssec-tools.org 1 1}
good-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-A.nosig-ns.test.dnssec-tools.org
good-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-A.nosig-ns.test.dnssec-tools.org 1 1}
good-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) DNSKEY(48)}
ask_resolver(): sending query for {nosig-ns.test.dnssec-tools.org 1 48}
nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-ns.test.dnssec-tools.org
nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-ns.test.dnssec-tools.org 1 48}
nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nosig-ns.test.dnssec-tools.org 1 43}
nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-ns.test.dnssec-tools.org
verifying next assertion: {good-A.nosig-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x6154fd5964ad55b39f0fc3cace943ce70fb7cdb7
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-ns.test.dnssec-tools.org 1 43}
nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-ns.test.dnssec-tools.org 1 46}
nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-ns.test.dnssec-tools.org
verifying next assertion: {nosig-ns.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xdbacd15ab29e9351e171d8c6479ea66e51f3ae50
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x70499de2fdf2096d41a47631efd94d62a73a8110
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-ns.test.dnssec-tools.org 1 46}
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 113: OK
Result: VAL_BOGUS:2
name=good-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 113: ****END****
114: Test Case 114: ****START****
val_resolve_and_check(): looking for {badsign-A.nosig-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-A.nosig-ns.test.dnssec-tools.org 1 1}
badsign-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-A.nosig-ns.test.dnssec-tools.org
badsign-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-A.nosig-ns.test.dnssec-tools.org 1 1}
badsign-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-A.nosig-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xca88490e4f0e62cb0e57436058b31567bc683dea
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 114: OK
Result: VAL_BOGUS:2
name=badsign-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 114: ****END****
115: Test Case 115: ****START****
val_resolve_and_check(): looking for {nosig-A.nosig-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-A.nosig-ns.test.dnssec-tools.org 1 1}
nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.nosig-ns.test.dnssec-tools.org
nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.nosig-ns.test.dnssec-tools.org 1 1}
nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-A.nosig-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-A.nosig-ns.test.dnssec-tools.org 1 46}
nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.nosig-ns.test.dnssec-tools.org
nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.nosig-ns.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-A.nosig-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-A.nosig-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.nosig-ns.test.dnssec-tools.org
nosig-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.nosig-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.nosig-ns.test.dnssec-tools.org, 1, 6}
ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-ns.test.dnssec-tools.org
nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.nosig-ns.test.dnssec-tools.org, 1, 6}
Cannot show that test.dnssec-tools.org is provably unsecure.
Cannot show that nosig-A.nosig-ns.test.dnssec-tools.org is provably unsecure.
Test Case 115: OK
Result: VAL_BOGUS:2
name=nosig-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 115: ****END****
116: Test Case 116: ****START****
val_resolve_and_check(): looking for {baddata-A.nosig-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-A.nosig-ns.test.dnssec-tools.org 1 1}
baddata-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-A.nosig-ns.test.dnssec-tools.org
baddata-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-A.nosig-ns.test.dnssec-tools.org 1 1}
baddata-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-A.nosig-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x59fe12454aaee1ec63922b850b723ccbdfdef082
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {nosig-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_cache(): found matching ack/nack response for {nosig-ns.test.dnssec-tools.org 1 43}
nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {nosig-ns.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xdbacd15ab29e9351e171d8c6479ea66e51f3ae50
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x70499de2fdf2096d41a47631efd94d62a73a8110
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 116: OK
Result: VAL_BOGUS:2
name=baddata-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 116: ****END****
117: Test Case 117: ****START****
val_resolve_and_check(): looking for {futuredate-A.nosig-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-A.nosig-ns.test.dnssec-tools.org 1 1}
futuredate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-A.nosig-ns.test.dnssec-tools.org
futuredate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-A.nosig-ns.test.dnssec-tools.org 1 1}
futuredate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-A.nosig-ns.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:45:12 2007) is less than signature inception time (Sat Jun 16 07:33:47 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 117: OK
Result: VAL_BOGUS:2
name=futuredate-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 117: ****END****
118: Test Case 118: ****START****
val_resolve_and_check(): looking for {pastdate-A.nosig-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-A.nosig-ns.test.dnssec-tools.org 1 1}
pastdate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-A.nosig-ns.test.dnssec-tools.org
pastdate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-A.nosig-ns.test.dnssec-tools.org 1 1}
pastdate-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-A.nosig-ns.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:45:12 2007) is greater than signature expiration time (Tue Apr 17 07:28:47 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 118: OK
Result: VAL_BOGUS:2
name=pastdate-A.nosig-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 118: ****END****
119: Test Case 119: ****START****
val_resolve_and_check(): looking for {good-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
good-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-AAAA.nosig-ns.test.dnssec-tools.org
good-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
good-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-AAAA.nosig-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x134434f893741828037b1e4d1fba985460aeab49
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 119: OK
Result: VAL_BOGUS:2
name=good-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 119: ****END****
120: Test Case 120: ****START****
val_resolve_and_check(): looking for {badsign-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
badsign-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-AAAA.nosig-ns.test.dnssec-tools.org
badsign-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
badsign-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-AAAA.nosig-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x2dff4a98ccb0cb9e4517db6246fa7df87268de31
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 120: OK
Result: VAL_BOGUS:2
name=badsign-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 120: ****END****
121: Test Case 121: ****START****
val_resolve_and_check(): looking for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org
nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-AAAA.nosig-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 46}
nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org
nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-AAAA.nosig-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.nosig-ns.test.dnssec-tools.org
nosig-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.nosig-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-AAAA.nosig-ns.test.dnssec-tools.org, 1, 6}
Cannot show that test.dnssec-tools.org is provably unsecure.
Cannot show that nosig-AAAA.nosig-ns.test.dnssec-tools.org is provably unsecure.
Test Case 121: OK
Result: VAL_BOGUS:2
name=nosig-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 121: ****END****
122: Test Case 122: ****START****
val_resolve_and_check(): looking for {baddata-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
baddata-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-AAAA.nosig-ns.test.dnssec-tools.org
baddata-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
baddata-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-AAAA.nosig-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x8aa6ad4fa921b50b19066633c1e3ecebda625471
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {nosig-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nosig-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_cache(): found matching ack/nack response for {nosig-ns.test.dnssec-tools.org 1 43}
nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {nosig-ns.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xdbacd15ab29e9351e171d8c6479ea66e51f3ae50
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x70499de2fdf2096d41a47631efd94d62a73a8110
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 122: OK
Result: VAL_BOGUS:2
name=baddata-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 122: ****END****
123: Test Case 123: ****START****
val_resolve_and_check(): looking for {futuredate-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
futuredate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-AAAA.nosig-ns.test.dnssec-tools.org
futuredate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
futuredate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-AAAA.nosig-ns.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:13 2007) is less than signature inception time (Sat Jun 16 07:33:47 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 123: OK
Result: VAL_BOGUS:2
name=futuredate-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 123: ****END****
124: Test Case 124: ****START****
val_resolve_and_check(): looking for {pastdate-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
pastdate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-AAAA.nosig-ns.test.dnssec-tools.org
pastdate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
pastdate-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-AAAA.nosig-ns.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:13 2007) is greater than signature expiration time (Tue Apr 17 07:28:47 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 124: OK
Result: VAL_BOGUS:2
name=pastdate-AAAA.nosig-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 124: ****END****
125: Test Case 125: ****START****
val_resolve_and_check(): looking for {addedlater-A.nosig-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {addedlater-A.nosig-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {addedlater-A.nosig-ns.test.dnssec-tools.org 1 1}
addedlater-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-A.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-A.nosig-ns.test.dnssec-tools.org
addedlater-A.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-A.nosig-ns.test.dnssec-tools.org 1 1}
nosig-ns.test.dnssec-tools.org requires DNSSEC
nosig-ns.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {nosig-ns.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x607c6437f44ee14fa0f52bbc4daeac0cf46a2ce5
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
verifying next assertion: {nosig-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x15c92a9bea90a7c31159c10c3ee0cd917a397952
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xee0a31eb8a1a1a3c372ee96cba46f44a9a8a3273
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
Bogus Proof
Test Case 125: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=nosig-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
name=nosig-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 125: ****END****
126: Test Case 126: ****START****
val_resolve_and_check(): looking for {addedlater-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {addedlater-AAAA.nosig-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {addedlater-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
addedlater-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-AAAA.nosig-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-AAAA.nosig-ns.test.dnssec-tools.org
addedlater-AAAA.nosig-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-AAAA.nosig-ns.test.dnssec-tools.org 1 28}
nosig-ns.test.dnssec-tools.org requires DNSSEC
nosig-ns.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {nosig-ns.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x607c6437f44ee14fa0f52bbc4daeac0cf46a2ce5
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
verifying next assertion: {nosig-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x15c92a9bea90a7c31159c10c3ee0cd917a397952
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xee0a31eb8a1a1a3c372ee96cba46f44a9a8a3273
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Cannot show that test.dnssec-tools.org is provably unsecure.
Bogus Proof
Test Case 126: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=nosig-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
name=nosig-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789.nosig-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DNSKEY[tag=27306] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nosig-ns.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 126: ****END****
127: Test Case 127: ****START****
val_resolve_and_check(): looking for {good-A.nods-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-A.nods-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-A.nods-ns.test.dnssec-tools.org 1 1}
good-A.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-A.nods-ns.test.dnssec-tools.org
good-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-A.nods-ns.test.dnssec-tools.org 1 1}
good-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DNSKEY(48)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 48}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nods-ns.test.dnssec-tools.org 1 48}
nods-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
verifying next assertion: {good-A.nods-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x1e0eed7ffc8a268a64d10b6f492bad760e434a93
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nods-ns.test.dnssec-tools.org 1 6}
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 127: OK
Result: VAL_BOGUS:2
name=good-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 127: ****END****
128: Test Case 128: ****START****
val_resolve_and_check(): looking for {badsign-A.nods-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-A.nods-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-A.nods-ns.test.dnssec-tools.org 1 1}
badsign-A.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-A.nods-ns.test.dnssec-tools.org
badsign-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-A.nods-ns.test.dnssec-tools.org 1 1}
badsign-A.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-A.nods-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x6b502a0b34e67c555de1409f52b98c00be01714a
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 128: OK
Result: VAL_BOGUS:2
name=badsign-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 128: ****END****
129: Test Case 129: ****START****
val_resolve_and_check(): looking for {nosig-A.nods-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-A.nods-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-A.nods-ns.test.dnssec-tools.org 1 1}
nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.nods-ns.test.dnssec-tools.org
nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.nods-ns.test.dnssec-tools.org 1 1}
nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-A.nods-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-A.nods-ns.test.dnssec-tools.org 1 46}
nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.nods-ns.test.dnssec-tools.org
nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.nods-ns.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-A.nods-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-A.nods-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.nods-ns.test.dnssec-tools.org
nosig-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.nods-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.nods-ns.test.dnssec-tools.org, 1, 6}
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
proving non-existence for {nosig-A.nods-ns.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-A.nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 129: OK
Result: VAL_BOGUS:2
name=nosig-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 129: ****END****
130: Test Case 130: ****START****
val_resolve_and_check(): looking for {baddata-A.nods-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-A.nods-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-A.nods-ns.test.dnssec-tools.org 1 1}
baddata-A.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-A.nods-ns.test.dnssec-tools.org
baddata-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-A.nods-ns.test.dnssec-tools.org 1 1}
baddata-A.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-A.nods-ns.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xfc4f363b5d8b2eecd3b2c416949d4c088cd1a37e
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 130: OK
Result: VAL_BOGUS:2
name=baddata-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 130: ****END****
131: Test Case 131: ****START****
val_resolve_and_check(): looking for {futuredate-A.nods-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-A.nods-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-A.nods-ns.test.dnssec-tools.org 1 1}
futuredate-A.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-A.nods-ns.test.dnssec-tools.org
futuredate-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-A.nods-ns.test.dnssec-tools.org 1 1}
futuredate-A.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-A.nods-ns.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:45:15 2007) is less than signature inception time (Sat Jun 16 07:33:49 2007).
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 131: OK
Result: VAL_BOGUS:2
name=futuredate-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 131: ****END****
132: Test Case 132: ****START****
val_resolve_and_check(): looking for {pastdate-A.nods-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-A.nods-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-A.nods-ns.test.dnssec-tools.org 1 1}
pastdate-A.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-A.nods-ns.test.dnssec-tools.org
pastdate-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-A.nods-ns.test.dnssec-tools.org 1 1}
pastdate-A.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-A.nods-ns.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:45:15 2007) is greater than signature expiration time (Tue Apr 17 07:28:49 2007).
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 132: OK
Result: VAL_BOGUS:2
name=pastdate-A.nods-ns.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 132: ****END****
133: Test Case 133: ****START****
val_resolve_and_check(): looking for {good-AAAA.nods-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-AAAA.nods-ns.test.dnssec-tools.org 1 28}
good-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-AAAA.nods-ns.test.dnssec-tools.org
good-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-AAAA.nods-ns.test.dnssec-tools.org 1 28}
good-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-AAAA.nods-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x3201167fb064d8eb2f15e11e7b5885ecba907727
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 133: OK
Result: VAL_BOGUS:2
name=good-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 133: ****END****
134: Test Case 134: ****START****
val_resolve_and_check(): looking for {badsign-AAAA.nods-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-AAAA.nods-ns.test.dnssec-tools.org 1 28}
badsign-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-AAAA.nods-ns.test.dnssec-tools.org
badsign-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-AAAA.nods-ns.test.dnssec-tools.org 1 28}
badsign-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-AAAA.nods-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf9311efc0b9608bf0b6a32db341ea392e814dbde
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 134: OK
Result: VAL_BOGUS:2
name=badsign-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 134: ****END****
135: Test Case 135: ****START****
val_resolve_and_check(): looking for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 28}
nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org
nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 28}
nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-AAAA.nods-ns.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 46}
nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org
nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-AAAA.nods-ns.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.nods-ns.test.dnssec-tools.org
nosig-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.nods-ns.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-AAAA.nods-ns.test.dnssec-tools.org, 1, 6}
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
proving non-existence for {nosig-AAAA.nods-ns.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-AAAA.nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 135: OK
Result: VAL_BOGUS:2
name=nosig-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 135: ****END****
136: Test Case 136: ****START****
val_resolve_and_check(): looking for {baddata-AAAA.nods-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-AAAA.nods-ns.test.dnssec-tools.org 1 28}
baddata-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-AAAA.nods-ns.test.dnssec-tools.org
baddata-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-AAAA.nods-ns.test.dnssec-tools.org 1 28}
baddata-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-AAAA.nods-ns.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xa0905833a928f288dbbbb27960ad4c37b0ee00f9
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 136: OK
Result: VAL_BOGUS:2
name=baddata-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 136: ****END****
137: Test Case 137: ****START****
val_resolve_and_check(): looking for {futuredate-AAAA.nods-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-AAAA.nods-ns.test.dnssec-tools.org 1 28}
futuredate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-AAAA.nods-ns.test.dnssec-tools.org
futuredate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-AAAA.nods-ns.test.dnssec-tools.org 1 28}
futuredate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-AAAA.nods-ns.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:16 2007) is less than signature inception time (Sat Jun 16 07:33:49 2007).
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 137: OK
Result: VAL_BOGUS:2
name=futuredate-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 137: ****END****
138: Test Case 138: ****START****
val_resolve_and_check(): looking for {pastdate-AAAA.nods-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-AAAA.nods-ns.test.dnssec-tools.org 1 28}
pastdate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-AAAA.nods-ns.test.dnssec-tools.org
pastdate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-AAAA.nods-ns.test.dnssec-tools.org 1 28}
pastdate-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-AAAA.nods-ns.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:17 2007) is greater than signature expiration time (Tue Apr 17 07:28:49 2007).
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Test Case 138: OK
Result: VAL_BOGUS:2
name=pastdate-AAAA.nods-ns.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 138: ****END****
139: Test Case 139: ****START****
val_resolve_and_check(): looking for {addedlater-A.nods-ns.test.dnssec-tools.org 1 1}
ask_cache(): looking for {addedlater-A.nods-ns.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {addedlater-A.nods-ns.test.dnssec-tools.org 1 1}
addedlater-A.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-A.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-A.nods-ns.test.dnssec-tools.org
addedlater-A.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-A.nods-ns.test.dnssec-tools.org 1 1}
nods-ns.test.dnssec-tools.org requires DNSSEC
nods-ns.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {nods-ns.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xdb918996ad3b2573f8dc6923b73e151ad6bbd31c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
verifying next assertion: {nods-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x3154258fab98779a2a5d61dc5f705758386e4d7c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x01e48d5d24e4b57e07670515f951cc342087bc4a
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Bogus Proof
Test Case 139: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=nods-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
name=nods-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 139: ****END****
140: Test Case 140: ****START****
val_resolve_and_check(): looking for {addedlater-AAAA.nods-ns.test.dnssec-tools.org 1 28}
ask_cache(): looking for {addedlater-AAAA.nods-ns.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {addedlater-AAAA.nods-ns.test.dnssec-tools.org 1 28}
addedlater-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-AAAA.nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-AAAA.nods-ns.test.dnssec-tools.org
addedlater-AAAA.nods-ns.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-AAAA.nods-ns.test.dnssec-tools.org 1 28}
nods-ns.test.dnssec-tools.org requires DNSSEC
nods-ns.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {nods-ns.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xdb918996ad3b2573f8dc6923b73e151ad6bbd31c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Data in cache timed out: {nods-ns.test.dnssec-tools.org 1 43}
verifying next assertion: {nods-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x3154258fab98779a2a5d61dc5f705758386e4d7c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x01e48d5d24e4b57e07670515f951cc342087bc4a
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
ask_cache(): looking for {nods-ns.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {nods-ns.test.dnssec-tools.org 1 43}
nods-ns.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nods-ns.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nods-ns.test.dnssec-tools.org
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Cannot show that nods-ns.test.dnssec-tools.org is provably unsecure.
Bogus Proof
Test Case 140: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=nods-ns.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
name=nods-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234567890.nods-ns.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=nods-ns.test.dnssec-tools.org class=IN type=DNSKEY from-server=76.216.12.217 status=VAL_AC_DS_MISSING:16
Test Case 140: ****END****
141: Test Case 141: ****START****
val_resolve_and_check(): looking for {good-A.futuredate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-A.futuredate-ds.test.dnssec-tools.org 1 1}
good-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-A.futuredate-ds.test.dnssec-tools.org
good-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-A.futuredate-ds.test.dnssec-tools.org 1 1}
good-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DNSKEY(48)}
ask_resolver(): sending query for {futuredate-ds.test.dnssec-tools.org 1 48}
futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-ds.test.dnssec-tools.org
futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-ds.test.dnssec-tools.org 1 48}
futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {futuredate-ds.test.dnssec-tools.org 1 43}
futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-ds.test.dnssec-tools.org
verifying next assertion: {good-A.futuredate-ds.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xdc8eb6c53ce7b8b948e0fc212f398350e106eff4
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-ds.test.dnssec-tools.org 1 43}
futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc15744415b7576f27c1162df8131df4e557cf86c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 43}
Signature not yet valid. Current time (Fri Apr 27 12:45:17 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Test Case 141: OK
Result: VAL_BOGUS:130
name=good-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 141: ****END****
142: Test Case 142: ****START****
val_resolve_and_check(): looking for {badsign-A.futuredate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-A.futuredate-ds.test.dnssec-tools.org 1 1}
badsign-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-A.futuredate-ds.test.dnssec-tools.org
badsign-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-A.futuredate-ds.test.dnssec-tools.org 1 1}
badsign-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-A.futuredate-ds.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xfe00bb648a94392eaf11d6fa3fa5df9d5730f7d5
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 142: OK
Result: VAL_BOGUS:2
name=badsign-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 142: ****END****
143: Test Case 143: ****START****
val_resolve_and_check(): looking for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 1}
nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org
nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 1}
nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-A.futuredate-ds.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 46}
nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org
nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-A.futuredate-ds.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.futuredate-ds.test.dnssec-tools.org
nosig-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.futuredate-ds.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.futuredate-ds.test.dnssec-tools.org, 1, 6}
ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {futuredate-ds.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-ds.test.dnssec-tools.org
futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-ds.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.futuredate-ds.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-A.futuredate-ds.test.dnssec-tools.org is provably unsecure.
Test Case 143: OK
Result: VAL_BOGUS:2
name=nosig-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 143: ****END****
144: Test Case 144: ****START****
val_resolve_and_check(): looking for {baddata-A.futuredate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-A.futuredate-ds.test.dnssec-tools.org 1 1}
baddata-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-A.futuredate-ds.test.dnssec-tools.org
baddata-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-A.futuredate-ds.test.dnssec-tools.org 1 1}
baddata-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-A.futuredate-ds.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x3dd6ea06d28477189fbbd04f69673582ebb938d3
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {futuredate-ds.test.dnssec-tools.org 1 43}
ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DS(43)}
ask_cache(): found matching ack/nack response for {futuredate-ds.test.dnssec-tools.org 1 43}
futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc15744415b7576f27c1162df8131df4e557cf86c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 43}
Signature not yet valid. Current time (Fri Apr 27 12:45:19 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 144: OK
Result: VAL_BOGUS:2
name=baddata-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 144: ****END****
145: Test Case 145: ****START****
val_resolve_and_check(): looking for {futuredate-A.futuredate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-A.futuredate-ds.test.dnssec-tools.org 1 1}
futuredate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-A.futuredate-ds.test.dnssec-tools.org
futuredate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-A.futuredate-ds.test.dnssec-tools.org 1 1}
futuredate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-A.futuredate-ds.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:45:19 2007) is less than signature inception time (Sat Jun 16 07:09:27 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 145: OK
Result: VAL_BOGUS:2
name=futuredate-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 145: ****END****
146: Test Case 146: ****START****
val_resolve_and_check(): looking for {pastdate-A.futuredate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-A.futuredate-ds.test.dnssec-tools.org 1 1}
pastdate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-A.futuredate-ds.test.dnssec-tools.org
pastdate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-A.futuredate-ds.test.dnssec-tools.org 1 1}
pastdate-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-A.futuredate-ds.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:45:19 2007) is greater than signature expiration time (Tue Apr 17 07:04:27 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 146: OK
Result: VAL_BOGUS:2
name=pastdate-A.futuredate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 146: ****END****
147: Test Case 147: ****START****
val_resolve_and_check(): looking for {good-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
good-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-AAAA.futuredate-ds.test.dnssec-tools.org
good-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
good-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-AAAA.futuredate-ds.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x6974425c7387a9f98cd7defc80cebdf58f360ce8
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 147: OK
Result: VAL_BOGUS:130
name=good-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 147: ****END****
148: Test Case 148: ****START****
val_resolve_and_check(): looking for {badsign-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
badsign-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-AAAA.futuredate-ds.test.dnssec-tools.org
badsign-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
badsign-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-AAAA.futuredate-ds.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x7d77866d60cd86de81560a98cc745fcc992825fb
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 148: OK
Result: VAL_BOGUS:2
name=badsign-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 148: ****END****
149: Test Case 149: ****START****
val_resolve_and_check(): looking for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org
nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 46}
nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org
nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.futuredate-ds.test.dnssec-tools.org
nosig-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-AAAA.futuredate-ds.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-AAAA.futuredate-ds.test.dnssec-tools.org is provably unsecure.
Test Case 149: OK
Result: VAL_BOGUS:2
name=nosig-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 149: ****END****
150: Test Case 150: ****START****
val_resolve_and_check(): looking for {baddata-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
baddata-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-AAAA.futuredate-ds.test.dnssec-tools.org
baddata-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
baddata-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-AAAA.futuredate-ds.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x681b621b7c9bc18af78be08194f5559ce2a41d40
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {futuredate-ds.test.dnssec-tools.org 1 43}
ask_cache(): looking for {futuredate-ds.test.dnssec-tools.org IN(1) DS(43)}
ask_cache(): found matching ack/nack response for {futuredate-ds.test.dnssec-tools.org 1 43}
futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc15744415b7576f27c1162df8131df4e557cf86c
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 43}
Signature not yet valid. Current time (Fri Apr 27 12:45:20 2007) is less than signature inception time (Sat Jun 16 07:34:00 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 150: OK
Result: VAL_BOGUS:2
name=baddata-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 150: ****END****
151: Test Case 151: ****START****
val_resolve_and_check(): looking for {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
futuredate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-AAAA.futuredate-ds.test.dnssec-tools.org
futuredate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
futuredate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-AAAA.futuredate-ds.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:20 2007) is less than signature inception time (Sat Jun 16 07:09:27 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 151: OK
Result: VAL_BOGUS:2
name=futuredate-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 151: ****END****
152: Test Case 152: ****START****
val_resolve_and_check(): looking for {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
pastdate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-AAAA.futuredate-ds.test.dnssec-tools.org
pastdate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
pastdate-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-AAAA.futuredate-ds.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:20 2007) is greater than signature expiration time (Tue Apr 17 07:04:27 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 152: OK
Result: VAL_BOGUS:2
name=pastdate-AAAA.futuredate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 152: ****END****
153: Test Case 153: ****START****
val_resolve_and_check(): looking for {addedlater-A.futuredate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {addedlater-A.futuredate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {addedlater-A.futuredate-ds.test.dnssec-tools.org 1 1}
addedlater-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-A.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-A.futuredate-ds.test.dnssec-tools.org
addedlater-A.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-A.futuredate-ds.test.dnssec-tools.org 1 1}
futuredate-ds.test.dnssec-tools.org requires DNSSEC
futuredate-ds.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc813d29c415a1c275e9fd67f9225d7cb7c30618b
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb57f80adc253549aaac67aa2da4d2ea344b77746
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x01dc239a6c5ecca02f3586d10f0a930398b3893e
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Bogus Proof
Test Case 153: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=futuredate-ds.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=futuredate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 153: ****END****
154: Test Case 154: ****START****
val_resolve_and_check(): looking for {addedlater-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {addedlater-AAAA.futuredate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {addedlater-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
addedlater-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-AAAA.futuredate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-AAAA.futuredate-ds.test.dnssec-tools.org
addedlater-AAAA.futuredate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-AAAA.futuredate-ds.test.dnssec-tools.org 1 28}
futuredate-ds.test.dnssec-tools.org requires DNSSEC
futuredate-ds.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xc813d29c415a1c275e9fd67f9225d7cb7c30618b
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {futuredate-ds.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xb57f80adc253549aaac67aa2da4d2ea344b77746
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x01dc239a6c5ecca02f3586d10f0a930398b3893e
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Bogus Proof
Test Case 154: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=futuredate-ds.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=futuredate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.0123456789012345678901234.futuredate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=5343] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=futuredate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 154: ****END****
155: Test Case 155: ****START****
val_resolve_and_check(): looking for {good-A.pastdate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {good-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {good-A.pastdate-ds.test.dnssec-tools.org 1 1}
good-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-A.pastdate-ds.test.dnssec-tools.org
good-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-A.pastdate-ds.test.dnssec-tools.org 1 1}
good-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DNSKEY(48)}
ask_resolver(): sending query for {pastdate-ds.test.dnssec-tools.org 1 48}
pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-ds.test.dnssec-tools.org
pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-ds.test.dnssec-tools.org 1 48}
pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DS(43)}
ask_resolver(): sending query for {pastdate-ds.test.dnssec-tools.org 1 43}
pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-ds.test.dnssec-tools.org
verifying next assertion: {good-A.pastdate-ds.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x6abe831c541d838c2981121c1f8f20a97e864e61
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-ds.test.dnssec-tools.org 1 43}
pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x56e308e85bd2ef30136137a45ea27cf877148814
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 43}
Signature expired. Current time (Fri Apr 27 12:45:20 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Test Case 155: OK
Result: VAL_BOGUS:130
name=good-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 155: ****END****
156: Test Case 156: ****START****
val_resolve_and_check(): looking for {badsign-A.pastdate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {badsign-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {badsign-A.pastdate-ds.test.dnssec-tools.org 1 1}
badsign-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-A.pastdate-ds.test.dnssec-tools.org
badsign-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-A.pastdate-ds.test.dnssec-tools.org 1 1}
badsign-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-A.pastdate-ds.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x49982a4fb07e9c98f60cf1b30b4663892c9392d6
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 156: OK
Result: VAL_BOGUS:2
name=badsign-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 156: ****END****
157: Test Case 157: ****START****
val_resolve_and_check(): looking for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {nosig-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 1}
nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org
nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 1}
nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-A.pastdate-ds.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 46}
nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org
nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-A.pastdate-ds.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-A.pastdate-ds.test.dnssec-tools.org
nosig-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-A.pastdate-ds.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.pastdate-ds.test.dnssec-tools.org, 1, 6}
ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {pastdate-ds.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-ds.test.dnssec-tools.org
pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-ds.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-A.pastdate-ds.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-A.pastdate-ds.test.dnssec-tools.org is provably unsecure.
Test Case 157: OK
Result: VAL_BOGUS:2
name=nosig-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 157: ****END****
158: Test Case 158: ****START****
val_resolve_and_check(): looking for {baddata-A.pastdate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {baddata-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {baddata-A.pastdate-ds.test.dnssec-tools.org 1 1}
baddata-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-A.pastdate-ds.test.dnssec-tools.org
baddata-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-A.pastdate-ds.test.dnssec-tools.org 1 1}
baddata-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-A.pastdate-ds.test.dnssec-tools.org, 1, 1}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x994b2b84fad8a1ad01f968959e59bc0b1d110236
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {pastdate-ds.test.dnssec-tools.org 1 43}
ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DS(43)}
ask_cache(): found matching ack/nack response for {pastdate-ds.test.dnssec-tools.org 1 43}
pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x56e308e85bd2ef30136137a45ea27cf877148814
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 43}
Signature expired. Current time (Fri Apr 27 12:45:21 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 158: OK
Result: VAL_BOGUS:2
name=baddata-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 158: ****END****
159: Test Case 159: ****START****
val_resolve_and_check(): looking for {futuredate-A.pastdate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {futuredate-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {futuredate-A.pastdate-ds.test.dnssec-tools.org 1 1}
futuredate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-A.pastdate-ds.test.dnssec-tools.org
futuredate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-A.pastdate-ds.test.dnssec-tools.org 1 1}
futuredate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-A.pastdate-ds.test.dnssec-tools.org, 1, 1}
Signature not yet valid. Current time (Fri Apr 27 12:45:21 2007) is less than signature inception time (Sat Jun 16 07:09:29 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 159: OK
Result: VAL_BOGUS:2
name=futuredate-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 159: ****END****
160: Test Case 160: ****START****
val_resolve_and_check(): looking for {pastdate-A.pastdate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {pastdate-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {pastdate-A.pastdate-ds.test.dnssec-tools.org 1 1}
pastdate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-A.pastdate-ds.test.dnssec-tools.org
pastdate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-A.pastdate-ds.test.dnssec-tools.org 1 1}
pastdate-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-A.pastdate-ds.test.dnssec-tools.org, 1, 1}
Signature expired. Current time (Fri Apr 27 12:45:21 2007) is greater than signature expiration time (Tue Apr 17 07:04:29 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 160: OK
Result: VAL_BOGUS:2
name=pastdate-A.pastdate-ds.test.dnssec-tools.org class=IN type=A from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 160: ****END****
161: Test Case 161: ****START****
val_resolve_and_check(): looking for {good-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {good-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {good-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
good-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for good-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for good-AAAA.pastdate-ds.test.dnssec-tools.org
good-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {good-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
good-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {good-AAAA.pastdate-ds.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x3531de2843df78a7c994b60cae33cb9983600a77
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Test Case 161: OK
Result: VAL_BOGUS:130
name=good-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 161: ****END****
162: Test Case 162: ****START****
val_resolve_and_check(): looking for {badsign-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {badsign-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {badsign-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
badsign-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for badsign-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for badsign-AAAA.pastdate-ds.test.dnssec-tools.org
badsign-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {badsign-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
badsign-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {badsign-AAAA.pastdate-ds.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x8bc738daa5fcd8bb03f7efcd979903874215657b
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 162: OK
Result: VAL_BOGUS:2
name=badsign-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 162: ****END****
163: Test Case 163: ****START****
val_resolve_and_check(): looking for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org
nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_cache(): looking for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) RRSIG(46)}
ask_resolver(): sending query for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 46}
nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org
nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 46}
ask_cache(): looking for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) SOA(6)}
ask_resolver(): sending query for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 6}
Not setting D0 bit nor using EDNS0
Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for nosig-AAAA.pastdate-ds.test.dnssec-tools.org
nosig-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org 1 6}
proving non-existence for {nosig-AAAA.pastdate-ds.test.dnssec-tools.org, 1, 6}
Cannot show that nosig-AAAA.pastdate-ds.test.dnssec-tools.org is provably unsecure.
Test Case 163: OK
Result: VAL_BOGUS:2
name=nosig-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_RRSIG_MISSING:14
Test Case 163: ****END****
164: Test Case 164: ****START****
val_resolve_and_check(): looking for {baddata-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {baddata-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {baddata-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
baddata-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for baddata-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for baddata-AAAA.pastdate-ds.test.dnssec-tools.org
baddata-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {baddata-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
baddata-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {baddata-AAAA.pastdate-ds.test.dnssec-tools.org, 1, 28}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x5196dd5543f9098d61c062add7f2156f2c54b810
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned FAILURE
Data in cache timed out: {pastdate-ds.test.dnssec-tools.org 1 43}
ask_cache(): looking for {pastdate-ds.test.dnssec-tools.org IN(1) DS(43)}
ask_cache(): found matching ack/nack response for {pastdate-ds.test.dnssec-tools.org 1 43}
pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 48}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x56e308e85bd2ef30136137a45ea27cf877148814
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 43}
Signature expired. Current time (Fri Apr 27 12:45:22 2007) is greater than signature expiration time (Tue Apr 17 07:29:01 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 164: OK
Result: VAL_BOGUS:2
name=baddata-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 164: ****END****
165: Test Case 165: ****START****
val_resolve_and_check(): looking for {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
futuredate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for futuredate-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for futuredate-AAAA.pastdate-ds.test.dnssec-tools.org
futuredate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
futuredate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {futuredate-AAAA.pastdate-ds.test.dnssec-tools.org, 1, 28}
Signature not yet valid. Current time (Fri Apr 27 12:45:22 2007) is less than signature inception time (Sat Jun 16 07:09:29 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 165: OK
Result: VAL_BOGUS:2
name=futuredate-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 165: ****END****
166: Test Case 166: ****START****
val_resolve_and_check(): looking for {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
pastdate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for pastdate-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for pastdate-AAAA.pastdate-ds.test.dnssec-tools.org
pastdate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
pastdate-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-AAAA.pastdate-ds.test.dnssec-tools.org, 1, 28}
Signature expired. Current time (Fri Apr 27 12:45:22 2007) is greater than signature expiration time (Tue Apr 17 07:04:29 2007).
Cannot show that test.dnssec-tools.org is provably unsecure.
Test Case 166: OK
Result: VAL_BOGUS:2
name=pastdate-AAAA.pastdate-ds.test.dnssec-tools.org class=IN type=AAAA from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 166: ****END****
167: Test Case 167: ****START****
val_resolve_and_check(): looking for {addedlater-A.pastdate-ds.test.dnssec-tools.org 1 1}
ask_cache(): looking for {addedlater-A.pastdate-ds.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {addedlater-A.pastdate-ds.test.dnssec-tools.org 1 1}
addedlater-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-A.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-A.pastdate-ds.test.dnssec-tools.org
addedlater-A.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-A.pastdate-ds.test.dnssec-tools.org 1 1}
pastdate-ds.test.dnssec-tools.org requires DNSSEC
pastdate-ds.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xcb39f0803beb747c827ec10fd3bb00317921bb05
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x4df859390bf2f76b3717a56daffadbda8c3f2efd
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x5a3b6a860e6eb977b698ddd9824de113a629f80e
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Bogus Proof
Test Case 167: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=pastdate-ds.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=pastdate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 167: ****END****
168: Test Case 168: ****START****
val_resolve_and_check(): looking for {addedlater-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
ask_cache(): looking for {addedlater-AAAA.pastdate-ds.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {addedlater-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
addedlater-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-AAAA.pastdate-ds.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-AAAA.pastdate-ds.test.dnssec-tools.org
addedlater-AAAA.pastdate-ds.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-AAAA.pastdate-ds.test.dnssec-tools.org 1 28}
pastdate-ds.test.dnssec-tools.org requires DNSSEC
pastdate-ds.test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xcb39f0803beb747c827ec10fd3bb00317921bb05
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {pastdate-ds.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x4df859390bf2f76b3717a56daffadbda8c3f2efd
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x5a3b6a860e6eb977b698ddd9824de113a629f80e
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
Bogus Proof
Test Case 168: OK
Result: VAL_BOGUS:2
Associated Proofs Follow:
name=pastdate-ds.test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=pastdate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456.pastdate-ds.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DNSKEY[tag=55041] from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=pastdate-ds.test.dnssec-tools.org class=IN type=DS from-server=76.216.12.217 status=VAL_AC_NOT_VERIFIED:51
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 168: ****END****
169: Test Case 169: ****START****
val_resolve_and_check(): looking for {addedlater-A.test.dnssec-tools.org 1 1}
ask_cache(): looking for {addedlater-A.test.dnssec-tools.org IN(1) A(1)}
ask_resolver(): sending query for {addedlater-A.test.dnssec-tools.org 1 1}
addedlater-A.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-A.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-A.test.dnssec-tools.org
addedlater-A.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-A.test.dnssec-tools.org 1 1}
test.dnssec-tools.org requires DNSSEC
test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf32eb34a78e1d1296f71df53083c84c1bc2d284a
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf46af5fe5d289b686acd74c30f2c18e27333c63e
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x2cf44c841283440ff08976971aaac19845510d68
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
proving non-existence for {addedlater-A.test.dnssec-tools.org, 1, 1}
Test Case 169: OK
Result: VAL_NONEXISTENT_NAME:168
Associated Proofs Follow:
name=test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 169: ****END****
170: Test Case 170: ****START****
val_resolve_and_check(): looking for {addedlater-AAAA.test.dnssec-tools.org 1 28}
ask_cache(): looking for {addedlater-AAAA.test.dnssec-tools.org IN(1) AAAA(28)}
ask_resolver(): sending query for {addedlater-AAAA.test.dnssec-tools.org 1 28}
addedlater-AAAA.test.dnssec-tools.org requires DNSSEC
Setting D0 bit and using EDNS0
Sending query for addedlater-AAAA.test.dnssec-tools.org to:
76.216.12.217
End of Sending query for addedlater-AAAA.test.dnssec-tools.org
addedlater-AAAA.test.dnssec-tools.org requires DNSSEC
ask_resolver(): found matching ack/nack response for {addedlater-AAAA.test.dnssec-tools.org 1 28}
test.dnssec-tools.org requires DNSSEC
test.dnssec-tools.org requires DNSSEC
longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org requires DNSSEC
verifying next assertion: {test.dnssec-tools.org, 1, 6}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf32eb34a78e1d1296f71df53083c84c1bc2d284a
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0xf46af5fe5d289b686acd74c30f2c18e27333c63e
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
verifying next assertion: {longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org, 1, 47}
rsasha1_sigverify(): parsing the public key...
rsasha1_sigverify(): SHA-1 hash = 0x2cf44c841283440ff08976971aaac19845510d68
rsasha1_sigverify(): verifying RSA signature...
RSA_verify returned SUCCESS
proving non-existence for {addedlater-AAAA.test.dnssec-tools.org, 1, 28}
Test Case 170: OK
Result: VAL_NONEXISTENT_NAME:168
Associated Proofs Follow:
name=test.dnssec-tools.org class=IN type=SOA from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=longrecord-0123456789012345678901234567890123456789012345678901.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678901234567890123456789012.012345678901234567890123456789012345678.test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
name=test.dnssec-tools.org class=IN type=NSEC from-server=76.216.12.217 status=VAL_AC_VERIFIED:81
name=test.dnssec-tools.org class=IN type=DNSKEY[tag=28827] from-server=76.216.12.217 status=VAL_AC_TRUST_KEY:10
Test Case 170: ****END****
Suite '': Final results: 2/170 tests failed