view release on metacpan or  search on metacpan

t/36-NSEC3-covered.t  view on Meta::CPAN

#!/usr/bin/perl
# $Id: 36-NSEC3-covered.t 1910 2023-03-30 19:16:30Z willem $	-*-perl-*-
#

use strict;
use warnings;
use Test::More;
use Net::DNS;

my @prerequisite = qw(
		Digest::SHA
		Net::DNS::RR::NSEC3
		);

foreach my $package (@prerequisite) {
	next if eval "require $package";	## no critic
	plan skip_all => "$package not installed";
	exit;
}

plan tests => 16;


## Tests based on example zone from RFC5155, Appendix A

my %H = (
	'example'	=> '0p9mhaveqvm6t7vbl5lop2u3t2rp3tom',
	'ns1.example'	=> '2t7b4g4vsa5smi47k61mv5bv1a22bojr',
	'x.y.w.example' => '2vptu5timamqttgl4luu9kg21e0aor3s',
	'a.example'	=> '35mthgpgcu1qg68fab165klnsnk3dpvl',
	'x.w.example'	=> 'b4um86eghhds6nea196smvmlo4ors995',
	'ai.example'	=> 'gjeqe526plbf1g8mklp59enfd789njgi',
	'y.w.example'	=> 'ji6neoaepv8b5o6k4ev33abha8ht9fgc',
	'w.example'	=> 'k8udemvp1j2f7eg6jebps17vp3n8i58h',
	'ns2.example'	=> 'q04jkcevqvmu85r014c7dkba38o0ji5r',
	'*.w.example'	=> 'r53bq7cc2uvmubfu5ocmm6pers9tk9en',
	'xx.example'	=> 't644ebqk9bibcna874givr6joj62mlhv',
	);

my %name = reverse %H;
foreach ( sort keys %name ) { print "$_\t$name{$_}\n" }


## Exercise examples from RFC5155, Appendix B

my $rr1 = Net::DNS::RR->new(
	"0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd (
	2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG )"
	);
ok( $rr1->covers('a.c.x.w.example'), 'B.1(1):	NSEC3 covers "next closer" name (c.x.w.example.)' );	# Name Error

my $rr2 = Net::DNS::RR->new(
	"b4um86eghhds6nea196smvmlo4ors995.example. NSEC3 1 1 12 aabbccdd (
	gjeqe526plbf1g8mklp59enfd789njgi MX RRSIG )"
	);
ok( !$rr2->covers('a.c.x.w.example'), 'B.1(2):	NSEC3 matches closest encloser (x.w.example.)' );

my $rr3 = Net::DNS::RR->new(
	"35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd (
	b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )"
	);
ok( $rr3->covers('*.x.w.example'), 'B.1(3):	NSEC3 covers wildcard at closest encloser (*.x.w.example.)' );


my $rr4 = Net::DNS::RR->new(
	"2t7b4g4vsa5smi47k61mv5bv1a22bojr.example. NSEC3 1 1 12 aabbccdd (
	2vptu5timamqttgl4luu9kg21e0aor3s A RRSIG )"
	);
ok( !$rr4->covers('ns1.example'), 'B.2:	NSEC3 matches QNAME (ns1.example.) proving MX and CNAME absent' )
		;						# No Data Error

my $rr5 = Net::DNS::RR->new(
	"ji6neoaepv8b5o6k4ev33abha8ht9fgc.example. NSEC3 1 1 12 aabbccdd (
	k8udemvp1j2f7eg6jebps17vp3n8i58h )"
	);
ok( !$rr5->covers('y.w.example'), 'B.2.1:	NSEC3 matches QNAME (y.w.example.) proving A absent' )
		;						# No Data, Empty Non-Terminal


my $rr6 = Net::DNS::RR->new(
	"35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd (
	b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )"
	);
ok( $rr6->covers('mc.c.example'), 'B.3(1):	NSEC3 covers "next closer" name (c.example.)' )
		;						# Referral to an Opt_Out Unsigned Zone

my $rr7 = Net::DNS::RR->new(
	"0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd (
	2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG )"
	);
ok( !$rr7->covers('mc.c.example'), 'B.3(2):	NSEC3 matches closest provable encloser (example.)' );


my $rr8 = Net::DNS::RR->new(
	"q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd (
	r53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG )"
	);
ok( $rr8->covers('a.z.w.example'), 'B.4:	NSEC3 covers "next closer" name (z.w.example.)' );    # Wildcard Expansion


my $rr9 = Net::DNS::RR->new(
	"k8udemvp1j2f7eg6jebps17vp3n8i58h.example. NSEC3 1 1 12 aabbccdd (
	kohar7mbb8dc2ce8a9qvl8hon4k53uhi )"
	);
ok( !$rr9->covers('a.z.w.example'), 'B.5(1):	NSEC3 matches closest encloser (w.example.)' );	  # Wildcard No Data Error

my $rr10 = Net::DNS::RR->new(
	"q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd (
	r53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG )"
	);
ok( $rr10->covers('a.z.w.example'), 'B.5(2):	NSEC3 covers "next closer" name (z.w.example.)' );

my $rr11 = Net::DNS::RR->new(
	"r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. NSEC3 1 1 12 aabbccdd (
	t644ebqk9bibcna874givr6joj62mlhv MX RRSIG )"
	);
ok( !$rr11->covers('*.w.example'), 'B.5(3):	NSEC3 matches wildcard at closest encloser (*.w.example)' );


my $rr12 = Net::DNS::RR->new(
	"0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd (
	2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG )"
	);
ok( !$rr12->covers('example'), 'B.6:	NSEC3 matches QNAME (example.) DS type bit not set' )
		;						# DS Child Zone No Data Error


## covers() returns false for hashed name not strictly between ownerhash and nexthash

my $rr13 = Net::DNS::RR->new(
	"0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd (
	2t7b4g4vsa5smi47k61mv5bv1a22bojr A RRSIG )"
	);
ok( !$rr13->covers('.'), 'ancestor name not covered (.)' );	# too few matching labels

my $rr14 = Net::DNS::RR->new(
	"q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd (
	53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG )"
	);
ok( !$rr14->covers('unrelated.name'), 'name out of zone not covered (unrelated.name.)' );    # non-matching label