upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-02-24 10:21:10 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
bind9/bin/tests/system/doth
History
Mark Andrews 2e997e2248 doth: skip 'doth' test if FIPS mode when DH is broken 
'doth' depends on a working DH implementation.
2023-04-03 12:44:27 +10:00
..
CA Fix a typo in doth system test's CA.cfg 2022-09-23 13:23:49 +00:00
ns1 doth system test: increase transfers-in/out limits 2022-10-12 21:52:52 +03:00
ns2 doth system test: increase transfers-in/out limits 2022-10-12 21:52:52 +03:00
ns3 Extend the 'doth' system test with Strict/Mutual TLS checks 2022-03-28 16:22:53 +03:00
ns4 Extend the 'doth' system test with Strict/Mutual TLS checks 2022-03-28 16:22:53 +03:00
.gitignore Extend the 'doth' system test with Strict/Mutual TLS checks 2022-03-28 16:22:53 +03:00
clean.sh Add regression test for CVE-2022-1183 2022-06-27 22:50:00 +02:00
conftest.py Add regression test for CVE-2022-1183 2022-06-27 22:50:00 +02:00
dhparam3072.pem Extend the 'doth' system test with Strict/Mutual TLS checks 2022-03-28 16:22:53 +03:00
example.axfr.good Parse and print HTTPS and SVCB records 2021-08-18 13:49:48 +10:00
example8.axfr.good Extend the 'doth' system test with Strict/Mutual TLS checks 2022-03-28 16:22:53 +03:00
get_openssl_version.py Auto-format Python files with black 2022-06-08 10:28:08 +02:00
prereq.sh doth: skip 'doth' test if FIPS mode when DH is broken 2023-04-03 12:44:27 +10:00
README.curl Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
setup.sh Update the copyright information in all files in the repository 2022-01-11 09:05:02 +01:00
stress_http_quota.py Auto-format Python files with black 2022-06-08 10:28:08 +02:00
tests.sh Retry multiple times in doth test when checking if the zone file exists 2023-03-09 10:03:19 +00:00
tests_gnutls.py Auto-format Python files with black 2022-06-08 10:28:08 +02:00
tests_sslyze.py Also test DNS-over-TLS code using sslyze 2022-06-27 22:50:00 +02:00

README.curl 

<!--
Copyright (C) Internet Systems Consortium, Inc. ("ISC")

SPDX-License-Identifier: MPL-2.0

This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0.  If a copy of the MPL was not distributed with this
file, you can obtain one at https://mozilla.org/MPL/2.0/.

See the COPYRIGHT file distributed with this work for additional
information regarding copyright ownership.
-->

DoH query values that can be passed on the command line for testing
with curl can be obtained by encoding binary DNS messages into
base64url, with trailing '='s removed.

For example:

$ perl bin/tests/system/fromhex.pl << EOF | base64url
    # Transaction ID
    0001
    # Standard query
    0000
    # Questions: 1, Additional: 0
    0001 0000 0000 0000
    # QNAME: example
    07 6578616d706c65 00
    # Type: SOA
    0006
    Class: IN
    0001
EOF

This produces the string "AAEAAAABAAAAAAAAB2V4YW1wbGUAAAbFrMonAAE=". With
the trailing '=' removed, this can then be passed to curl:

curl "https://<server>/dns-query?dns=AAEAAAABAAAAAAAAB2V4YW1wbGUAAAbFrMonAAE"