X-Git-Url: https://git.exim.org/exim.git/blobdiff_plain/7d8d08c484958a90f5d5744894b9bc2f723bee4e..85f4056d71b45977bf269c7e595386647538d14b:/test/dnszones-src/db.example.com diff --git a/test/dnszones-src/db.example.com b/test/dnszones-src/db.example.com index 683772f77..5513b6056 100644 --- a/test/dnszones-src/db.example.com +++ b/test/dnszones-src/db.example.com @@ -25,28 +25,43 @@ example.com. NS exim.example.com. example.com. TXT v=spf1 -all +double TXT v=spf1 include:_spf.google.com ~all + TXT v=spf1 +a +mx -all + +doubleplus TXT v=spf1 include:_spf.google.com ~all + TXT google-site-verification=q-4MSVLjluQIsBztu5jzJBxAcJXzNcHAk0jHTZEamB8 + TXT v=spf1 +a +mx -all + +uppercase TXT v=sPf1 +all +passme.helo TXT v=spf1 +all + ; Alias A record for the local host, under the name "server1" -server1 A HOSTIPV4 +server1 A HOSTIPV4 +serverbadname A HOSTIPV4 +serverchain1 CNAME server1 +alternatename.server1 CNAME server1 ; DANE testing ; a broken dane config where the name does not match in the cert, TA-mode, dane-requested ; NOTE: the server uses the example.net cert hence the mismatch ; +; TLSA_AUTOGEN ; openssl x509 -in aux-fixed/exim-ca/example.net/CA/CA.pem -fingerprint -sha256 -noout \ ; | awk -F= '{print $2}' | tr -d : | tr '[A-F]' '[a-f]' ; ; DNSSEC danebroken7 A 127.0.0.1 -DNSSEC _1225._tcp.danebroken7 TLSA 2 0 1 3110db5e73708d6fc3ffed8dcd1eef2bcd3c35d8da86ed048a332cb9d9538a0f +DNSSEC _1225._tcp.danebroken7 TLSA 2 0 1 2ced61b091ad6127c99695c67e12bb2204c71c9ca1c4104659dc9a79ce88a549 ; the same, EE-mode ; +; TLSA_AUTOGEN ; openssl x509 -in aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.pem -noout -pubkey \ ; | openssl pkey -pubin -outform DER | openssl dgst -sha256 | awk '{print $2}' ; DNSSEC danebroken8 A 127.0.0.1 -DNSSEC _1225._tcp.danebroken8 TLSA 3 1 1 5384398f502c423736dcc42295808f7a84769eb96d009816fa077e00bebc768e +DNSSEC _1225._tcp.danebroken8 TLSA 3 1 1 97f62dede161e64c2428fd8c390234c17628fa17e6696b9614927fe38c443acf ; End