OpenSSL: fail the handshake when SNI processing hits a problem
[exim.git] / test / dnszones-src / db.example.com
CommitLineData
a163908a
JH
1; This is a testing zone file for use when testing DNS handling in Exim. This
2; is a fake zone of no real use - hence no SOA record. The zone name is
3; example.com. This file is passed through the substitution mechanism before being
4; used by the fakens auxiliary program. This inserts the actual IP addresses
5; of the local host into the zone.
6
7; NOTE (1): apart from ::1, IPv6 addresses must always have 8 components. Do
8; not abbreviate them by using the :: feature. Leading zeros in components may,
9; however, be omitted.
10
11; NOTE (2): the fakens program is very simple and assumes that the buffer into
12; which is puts the response is always going to be big enough. In other words,
13; the expectation is for just a few RRs for each query.
14
15; NOTE (3): the top-level networks for testing addresses are parameterized by
16; the use of V4NET and V6NET. These networks should be such that no real
17; host ever uses them.
18
19example.com. NS exim.example.com.
20
21; Alias A record for the local host, under the name "server1"
22
23server1 A HOSTIPV4
24
28646fa9
JH
25; DANE testing
26
27; a broken dane config where the name does not match in the cert, TA-mode, dane-requested
28; NOTE: the server uses the example.net cert hence the mismatch
29;
30; openssl x509 -in aux-fixed/exim-ca/example.net/CA/CA.pem -fingerprint -sha256 -noout \
31; | awk -F= '{print $2}' | tr -d : | tr '[A-F]' '[a-f]'
32;
33;
34DNSSEC danebroken7 A 127.0.0.1
35DNSSEC _1225._tcp.danebroken7 TLSA 2 0 1 13646cc92c038932f57f752559271b893045eda39f765fc8369b05b2b9c3ac88
36
37; the same, EE-mode
38;
39; openssl x509 -in aux-fixed/exim-ca/example.net/server1.example.net/server1.example.net.pem -noout -pubkey \
40; | openssl pkey -pubin -outform DER | openssl dgst -sha256 | awk '{print $2}'
41;
42DNSSEC danebroken8 A 127.0.0.1
43DNSSEC _1225._tcp.danebroken8 TLSA 3 1 1 3cc2a6efabd847663b92f827681fd8612fd4d001ea85057d79ea541fb2de02ac
44
a163908a 45; End