X-Git-Url: https://git.exim.org/exim.git/blobdiff_plain/28646fa9c74b94722eadd7bc2d9c285245aded80..b115023ebbd339f31eff6ed67491e562967464d8:/test/dnszones-src/db.example.com

diff --git a/test/dnszones-src/db.example.com b/test/dnszones-src/db.example.com
index b00c87d13..5513b6056 100644
--- a/test/dnszones-src/db.example.com
+++ b/test/dnszones-src/db.example.com
@@ -16,30 +16,52 @@
 ; the use of V4NET and V6NET. These networks should be such that no real
 ; host ever uses them.
 
+; really short neg-cache interval, for testing NXDOMAIN caching
+example.com.     SOA     exim.test.ex. hostmaster.exim.test.ex 1430683638 1200 120 604800 2
+
 example.com.     NS      exim.example.com.
 
+; The real example.com has an SPF record; duplicate that here
+
+example.com.	TXT     v=spf1 -all
+
+double		TXT	v=spf1 include:_spf.google.com ~all
+		TXT	v=spf1 +a +mx -all
+
+doubleplus	TXT	v=spf1 include:_spf.google.com ~all
+		TXT	google-site-verification=q-4MSVLjluQIsBztu5jzJBxAcJXzNcHAk0jHTZEamB8
+		TXT	v=spf1 +a +mx -all
+
+uppercase	TXT	v=sPf1 +all
+passme.helo	TXT	v=spf1 +all
+
 ; Alias A record for the local host, under the name "server1"
 
-server1     A       HOSTIPV4
+server1               A     HOSTIPV4
+serverbadname         A     HOSTIPV4
+serverchain1	      CNAME server1
+alternatename.server1 CNAME server1
 
 ; DANE testing
 
 ; a broken dane config where the name does not match in the cert, TA-mode, dane-requested
 ; NOTE: the server uses the example.net cert hence the mismatch
 ;
+; TLSA_AUTOGEN
 ; openssl x509 -in aux-fixed/exim-ca/example.net/CA/CA.pem -fingerprint -sha256 -noout \
 ;  | awk -F= '{print $2}' | tr -d : | tr '[A-F]' '[a-f]'
 ;
 ;
 DNSSEC danebroken7  A       127.0.0.1
-DNSSEC _1225._tcp.danebroken7 TLSA 2 0 1 13646cc92c038932f57f752559271b893045eda39f765fc8369b05b2b9c3ac88
+DNSSEC _1225._tcp.danebroken7 TLSA 2 0 1 2ced61b091ad6127c99695c67e12bb2204c71c9ca1c4104659dc9a79ce88a549
 
 ; the same, EE-mode
 ;
+; TLSA_AUTOGEN
 ; openssl x509 -in aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.pem -noout -pubkey \
 ; | openssl pkey -pubin -outform DER | openssl dgst -sha256 | awk '{print $2}'
 ;
 DNSSEC danebroken8  A       127.0.0.1
-DNSSEC _1225._tcp.danebroken8 TLSA 3 1 1 3cc2a6efabd847663b92f827681fd8612fd4d001ea85057d79ea541fb2de02ac
+DNSSEC _1225._tcp.danebroken8 TLSA 3 1 1 97f62dede161e64c2428fd8c390234c17628fa17e6696b9614927fe38c443acf
 
 ; End