TLS: use RFC 6125 rules for certifucate name checks when CNAMES are present....

[users/heiko/exim.git] / test / dnszones-src / db.example.com

diff --git a/test/dnszones-src/db.example.com b/test/dnszones-src/db.example.com
index b00c87d130b4ac060f565a0a10a7321923bcb71a..2d2cca0b7cce6fc2ed99f448b49bfc845de2c2f6 100644 (file)
--- a/test/dnszones-src/db.example.com
+++ b/test/dnszones-src/db.example.com
@@ -16,11 +16,30 @@
 ; the use of V4NET and V6NET. These networks should be such that no real
 ; host ever uses them.
 
 ; the use of V4NET and V6NET. These networks should be such that no real
 ; host ever uses them.
 

+; really short neg-cache interval, for testing NXDOMAIN caching
+example.com.     SOA     exim.test.ex. hostmaster.exim.test.ex 1430683638 1200 120 604800 2
+

 example.com.     NS      exim.example.com.
 
 example.com.     NS      exim.example.com.
 

+; The real example.com has an SPF record; duplicate that here
+
+example.com.   TXT     v=spf1 -all
+
+double         TXT     v=spf1 include:_spf.google.com ~all
+               TXT     v=spf1 +a +mx -all
+
+doubleplus     TXT     v=spf1 include:_spf.google.com ~all
+               TXT     google-site-verification=q-4MSVLjluQIsBztu5jzJBxAcJXzNcHAk0jHTZEamB8
+               TXT     v=spf1 +a +mx -all
+
+uppercase      TXT     v=sPf1 +all
+

 ; Alias A record for the local host, under the name "server1"
 
 ; Alias A record for the local host, under the name "server1"
 

-server1     A       HOSTIPV4
+server1               A     HOSTIPV4
+serverbadname         A     HOSTIPV4
+serverchain1         CNAME server1
+alternatename.server1 CNAME server1

 
 ; DANE testing
 
 
 ; DANE testing
 


@@ -32,7 +51,7 @@ server1     A       HOSTIPV4
 ;
 ;
 DNSSEC danebroken7  A       127.0.0.1
 ;
 ;
 DNSSEC danebroken7  A       127.0.0.1

-DNSSEC _1225._tcp.danebroken7 TLSA 2 0 1 13646cc92c038932f57f752559271b893045eda39f765fc8369b05b2b9c3ac88
+DNSSEC _1225._tcp.danebroken7 TLSA 2 0 1 3110db5e73708d6fc3ffed8dcd1eef2bcd3c35d8da86ed048a332cb9d9538a0f

 
 ; the same, EE-mode
 ;
 
 ; the same, EE-mode
 ;


@@ -40,6 +59,6 @@ DNSSEC _1225._tcp.danebroken7 TLSA 2 0 1 13646cc92c038932f57f752559271b893045eda
 ; | openssl pkey -pubin -outform DER | openssl dgst -sha256 | awk '{print $2}'
 ;
 DNSSEC danebroken8  A       127.0.0.1
 ; | openssl pkey -pubin -outform DER | openssl dgst -sha256 | awk '{print $2}'
 ;
 DNSSEC danebroken8  A       127.0.0.1

-DNSSEC _1225._tcp.danebroken8 TLSA 3 1 1 3cc2a6efabd847663b92f827681fd8612fd4d001ea85057d79ea541fb2de02ac
+DNSSEC _1225._tcp.danebroken8 TLSA 3 1 1 5384398f502c423736dcc42295808f7a84769eb96d009816fa077e00bebc768e

 
 ; End
 
 ; End