Fix DANE for multiple-MX when all TLSA lookup defer. Bug 1634

[users/heiko/exim.git] / test / src / fakens.c

diff --git a/test/src/fakens.c b/test/src/fakens.c
index 33bfe4f3e91aa07c216fac7eb66ba2b799e58f3e..be3a148b821dc12d088708db299c4829db6a3f67 100644 (file)
--- a/test/src/fakens.c
+++ b/test/src/fakens.c
@@ -55,7 +55,13 @@ a number of milliseconds (followed by whitespace).
 
 Any DNS record line in a zone file can be prefixed with "DNSSEC" and
 at least one space; if all the records found by a lookup are marked
-as such then the response will have the "AD" bit set. */
+as such then the response will have the "AD" bit set. 
+
+Any DNS record line in a zone file can be prefixed with "AA" and
+at least one space; if all the records found by a lookup are marked
+as such then the response will have the "AA" bit set.
+
+*/
 
 #include <ctype.h>
 #include <stdarg.h>
@@ -292,6 +298,8 @@ Arguments:
   qtypelen    the length of qtype
   pkptr       points to the output buffer pointer; this is updated
   countptr    points to the record count; this is updated
+  dnssec      points to the AD flag indicator; this updated
+  aa         points to the AA flag indicator; this updated
 
 Returns:      0 on success, else HOST_NOT_FOUND or NO_DATA or NO_RECOVERY or
               PASS_ON - the latter if a "PASS ON NOT FOUND" line is seen
@@ -299,7 +307,7 @@ Returns:      0 on success, else HOST_NOT_FOUND or NO_DATA or NO_RECOVERY or
 
 static int
 find_records(FILE *f, uschar *zone, uschar *domain, uschar *qtype,
-  int qtypelen, uschar **pkptr, int *countptr, BOOL * dnssec)
+  int qtypelen, uschar **pkptr, int *countptr, BOOL * dnssec, BOOL * aa)
 {
 int yield = HOST_NOT_FOUND;
 int domainlen = Ustrlen(domain);
@@ -324,6 +332,7 @@ rrdomain[0] = 0;                 /* No previous domain */
 (void)fseek(f, 0, SEEK_SET);     /* Start again at the beginning */
 
 *dnssec = TRUE;                        /* cancelled by first nonsecure rec found */ 
+*aa = TRUE;                    /* cancelled by first non-authoritive record */
 
 /* Scan for RRs */
 
@@ -336,6 +345,7 @@ while (fgets(CS buffer, sizeof(buffer), f) != NULL)
   int tvalue = typeptr->value;
   int qtlen = qtypelen;
   BOOL rr_sec = FALSE;
+  BOOL rr_aa = FALSE;
   int delay = 0;
 
   p = buffer;
@@ -354,21 +364,25 @@ while (fgets(CS buffer, sizeof(buffer), f) != NULL)
 
   p = buffer;
   for (;;)
-       {
-       if (Ustrncmp(p, US"DNSSEC ", 7) == 0)   /* tagged as secure */
-         {
-         rr_sec = TRUE;
-         p += 7;
-         }
-       else if (Ustrncmp(p, US"DELAY=", 6) == 0)       /* delay beforee response */
-         {
-         for (p += 6; *p >= '0' && *p <= '9'; p++)
-               delay = delay*10 + *p - '0';
-         while (isspace(*p)) p++;
-         }
-       else
-         break;
-       }
+    {
+    if (Ustrncmp(p, US"DNSSEC ", 7) == 0)      /* tagged as secure */
+      {
+      rr_sec = TRUE;
+      p += 7;
+      }
+    else if (Ustrncmp(p, US"AA ", 3) == 0)     /* tagged as authoritive */
+      {
+      rr_aa = TRUE;
+      p += 3;
+      }
+    else if (Ustrncmp(p, US"DELAY=", 6) == 0)  /* delay before response */
+      {
+      for (p += 6; *p >= '0' && *p <= '9'; p++) delay = delay*10 + *p - '0';
+      while (isspace(*p)) p++;
+      }
+    else
+      break;
+    }
 
   if (!isspace(*p))
     {
@@ -428,6 +442,9 @@ while (fgets(CS buffer, sizeof(buffer), f) != NULL)
   if (!rr_sec)
     *dnssec = FALSE;                   /* cancel AD return */
 
+  if (!rr_aa)
+    *aa = FALSE;                       /* cancel AA return */
+
   yield = 0;
   *countptr = *countptr + 1;
 
@@ -587,9 +604,10 @@ uschar *zonefile = NULL;
 uschar domain[256];
 uschar buffer[256];
 uschar qtype[12];
-uschar packet[512];
+uschar packet[2048 * 32 + 32];
 uschar *pk = packet;
 BOOL dnssec;
+BOOL aa;
 
 signal(SIGALRM, alarmfn);
 
@@ -636,7 +654,8 @@ Ustrncpy(qtype, argv[3], sizeof(qtype));
 qtypelen = Ustrlen(qtype);
 for (p = qtype; *p != 0; p++) *p = toupper(*p);
 
-/* Find the domain, lower case it, check that it is in a zone that we handle,
+/* Find the domain, lower case it, deal with any specials,
+check that it is in a zone that we handle,
 and set up the zone file name. The zone names in the table all start with a
 dot. */
 
@@ -646,6 +665,41 @@ Ustrncpy(domain, argv[2], domlen);
 domain[domlen] = 0;
 for (i = 0; i < domlen; i++) domain[i] = tolower(domain[i]);
 
+if (Ustrcmp(domain, "manyhome.test.ex") == 0 && Ustrcmp(qtype, "A") == 0)
+  {
+  uschar *pk = packet + 12;
+  uschar *rdlptr;
+  int i, j;
+
+  memset(packet, 0, 12);
+
+  for (i = 104; i <= 111; i++) for (j = 0; j <= 255; j++)
+    {
+    pk = packname(domain, pk);
+    *pk++ = (ns_t_a >> 8) & 255;
+    *pk++ = (ns_t_a) & 255;
+    *pk++ = 0;
+    *pk++ = 1;     /* class = IN */
+    pk += 4;       /* TTL field; don't care */
+    rdlptr = pk;   /* remember rdlength field */
+    pk += 2;
+
+    *pk++ = 10; *pk++ = 250; *pk++ = i; *pk++ = j;
+
+    rdlptr[0] = ((pk - rdlptr - 2) >> 8) & 255;
+    rdlptr[1] = (pk - rdlptr - 2) & 255;
+    }
+
+  packet[6] = (2048 >> 8) & 255;
+  packet[7] = 2048 & 255;
+  packet[10] = 0;
+  packet[11] = 0;
+
+  (void)fwrite(packet, 1, pk - packet, stdout);
+  return 0;
+  }
+
+
 if (Ustrchr(domain, '.') == NULL && qualify != NULL &&
     Ustrcmp(domain, "dontqualify") != 0)
   {
@@ -693,7 +747,7 @@ if (f == NULL)
 /* Find the records we want, and add them to the result. */
 
 count = 0;
-yield = find_records(f, zone, domain, qtype, qtypelen, &pk, &count, &dnssec);
+yield = find_records(f, zone, domain, qtype, qtypelen, &pk, &count, &dnssec, &aa);
 if (yield == NO_RECOVERY) goto END_OFF;
 
 packet[6] = (count >> 8) & 255;
@@ -708,6 +762,9 @@ packet[11] = 0;
 if (dnssec)
   ((HEADER *)packet)->ad = 1;
 
+if (aa)
+  ((HEADER *)packet)->aa = 1;
+
 /* Close the zone file, write the result, and return. */
 
 END_OFF:
@@ -716,6 +773,6 @@ END_OFF:
 return yield;
 }
 
-/* vi: aw ai sw=2
+/* vi: aw ai sw=2 sts=2 ts=8 et
 */
 /* End of fakens.c */