resolver: test that DS query is sent to parent zone
This commit is contained in:
parent
fef26b7139
commit
261b9f4428
@ -1 +1,2 @@
|
|||||||
|
mod section_3;
|
||||||
mod section_4;
|
mod section_4;
|
||||||
|
@ -0,0 +1 @@
|
|||||||
|
mod section_3_1;
|
@ -0,0 +1 @@
|
|||||||
|
mod section_3_1_4;
|
@ -0,0 +1,77 @@
|
|||||||
|
use dns_test::{
|
||||||
|
client::{Client, DigSettings},
|
||||||
|
name_server::{Graph, NameServer, Sign},
|
||||||
|
record::RecordType,
|
||||||
|
tshark::{Capture, Direction},
|
||||||
|
Network, Resolver, Result, FQDN,
|
||||||
|
};
|
||||||
|
|
||||||
|
#[test]
|
||||||
|
#[ignore]
|
||||||
|
fn on_clients_ds_query_it_queries_the_parent_zone() -> Result<()> {
|
||||||
|
let network = Network::new()?;
|
||||||
|
|
||||||
|
let leaf_ns = NameServer::new(&dns_test::PEER, FQDN::NAMESERVERS, &network)?;
|
||||||
|
|
||||||
|
let Graph {
|
||||||
|
nameservers,
|
||||||
|
root,
|
||||||
|
trust_anchor,
|
||||||
|
} = Graph::build(leaf_ns, Sign::Yes)?;
|
||||||
|
|
||||||
|
let mut com_ns_addr = None;
|
||||||
|
for nameserver in &nameservers {
|
||||||
|
if nameserver.zone() == &FQDN::COM {
|
||||||
|
com_ns_addr = Some(nameserver.ipv4_addr());
|
||||||
|
}
|
||||||
|
}
|
||||||
|
let com_ns_addr = com_ns_addr.expect("com. NS not found");
|
||||||
|
|
||||||
|
let trust_anchor = &trust_anchor.unwrap();
|
||||||
|
let resolver = Resolver::new(&network, root)
|
||||||
|
.trust_anchor(trust_anchor)
|
||||||
|
.start(&dns_test::SUBJECT)?;
|
||||||
|
|
||||||
|
let mut tshark = resolver.eavesdrop()?;
|
||||||
|
|
||||||
|
let resolver_addr = resolver.ipv4_addr();
|
||||||
|
|
||||||
|
let client = Client::new(&network)?;
|
||||||
|
let settings = *DigSettings::default().recurse();
|
||||||
|
let output = client.dig(settings, resolver_addr, RecordType::DS, &FQDN::NAMESERVERS)?;
|
||||||
|
|
||||||
|
tshark.wait_for_capture()?;
|
||||||
|
|
||||||
|
let captures = tshark.terminate()?;
|
||||||
|
|
||||||
|
// check that we were able to retrieve the DS record
|
||||||
|
assert!(output.status.is_noerror());
|
||||||
|
let [record] = output.answer.try_into().unwrap();
|
||||||
|
let ds = record.try_into_ds().unwrap();
|
||||||
|
assert_eq!(ds.zone, FQDN::NAMESERVERS);
|
||||||
|
|
||||||
|
// check that DS query was forwarded to the `com.` (parent zone) nameserver
|
||||||
|
let client_addr = client.ipv4_addr();
|
||||||
|
let mut outgoing_ds_query_count = 0;
|
||||||
|
for Capture { message, direction } in captures {
|
||||||
|
if let Direction::Outgoing { destination } = direction {
|
||||||
|
if destination != client_addr {
|
||||||
|
let queries = message.as_value()["Queries"]
|
||||||
|
.as_object()
|
||||||
|
.expect("expected Object");
|
||||||
|
for query in queries.keys() {
|
||||||
|
if query.contains("type DS") {
|
||||||
|
assert!(query.contains("nameservers.com"));
|
||||||
|
assert_eq!(com_ns_addr, destination);
|
||||||
|
|
||||||
|
outgoing_ds_query_count += 1;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
assert_eq!(1, outgoing_ds_query_count);
|
||||||
|
|
||||||
|
Ok(())
|
||||||
|
}
|
Loading…
Reference in New Issue
Block a user