do-ip6: no

; config options
        trust-anchor: ". IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5"
	val-override-date: "20160220000000"
	stub-addr: 202.12.27.33 # M.ROOT-SERVERS.NET.
	query-minimization: off
CONFIG_END

SCENARIO_BEGIN Test validator NSEC3 B.3 referral to optout unsigned zone, cache timeout.

; K.ROOT-SERVERS.NET.
RANGE_BEGIN 0 100
	ADDRESS 202.12.27.33 
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
. IN NS
SECTION ANSWER
.      518400 IN	NS	a.root-servers.net.
.      518400 IN	NS	b.root-servers.net.
.      518400 IN	NS	c.root-servers.net.
.      518400 IN	NS	d.root-servers.net.
.      518400 IN	NS	e.root-servers.net.
.      518400 IN	NS	f.root-servers.net.
.      518400 IN	NS	g.root-servers.net.
.      518400 IN	NS	h.root-servers.net.
.      518400 IN	NS	i.root-servers.net.
.      518400 IN	NS	j.root-servers.net.
.      518400 IN	NS	k.root-servers.net.
.      518400 IN	NS	l.root-servers.net.
.      518400 IN	NS	m.root-servers.net.
.      518400 IN	RRSIG	NS 8 0 518400 20160227170000 20160217160000 54549 . Qtgnr2k192gjdx3bLZgzkvqoEhTE4LXfFcPtrGPKawn/78LX6M4LuCZh rSXYMJERXVDQcQbX88EYh8kN3ALgLKpGdyu8HJ6B0vZiDc8yMbn2TuA0 RDqEPTp5om1LbQ0nEWa5XnrTi1fJTNzhT6eBJlcmkJ1/jMfmPG9J4dKJ x/Q=
SECTION ADDITIONAL
M.ROOT-SERVERS.NET.	IN	A	202.12.27.33
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR RD RA AD
SECTION QUESTION
. IN DNSKEY
SECTION ANSWER
. 		13943	IN DNSKEY	256 3 8 AwEAAbr/RV0stAWYbmKOldjShp4AOQGOyY3ATI1NUpP4X1qBs6lsXpc+1ABgv6zkg02IktjZrHnmD0HsElu3wqXMrT5KL1W7Spmg0Pou9WZ8QttdTKXwrVXrASsaGI2z/pLBSnK8EdzqUrTVxY4TEGZtxV519isM06CCMihxTn5cfFBF
. 		13943 IN DNSKEY	257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
. 		13943 IN RRSIG	DNSKEY 8 0 172800 20160224235959 20160210000000 19036 . Y2Ktm7gpEXcFg02ZlPNaRhO+GUPSvB2z8tsqe199vO9Rx7tIT/8F2A6OBjiyR6GqPGcPKaXADAt+QjmV174123QJ6UDrk2cPiGPXfEleDlJVtBV5oAVaBedeZxqnmw9WpVCIV6cY5wZbO8mYltA5oZMg8XInokVm6qGPA4wo2Miai5st/KhY+2Ke29StiXeVDdQ4p3e25dE4z1QW3ISxJ0zqvkTMHgQZZiP7IlfXKlCyyrd/Ddrxd22GWY53/oy9/Bry4K8naAw4m5+Q5tEf2zvtiAoaIbi2cM3Lf8AzQU25I6zaERJeQXhyA8cqn4WrbsAANn128Q+9Aibyiol9xg==
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
SECTION AUTHORITY
net.	172800	IN 	NS	a.gtld-servers.net.
net.    86400	IN	DS	35886 8 2 7862B27F5F516EBE19680444D4CE5E762981931842C465F00236401D8BD973EE
net.    86400	IN	RRSIG	DS 8 1 86400 20160228050000 20160218040000 54549 . HXdj4gjShkf/LpyxcxthJyRJE/YAB+NHsbwkfoMJvcdJa6u6J0H4K55BSB5UdR6vFGtY5NHl8tnEQIUeHOrxqMzDoMLofs05So9CdphNhsOdR25sCXLAIAL6l9KfI0+oEFXrCNA2GpU1S6SjNmk0NPzslYBSjAVY8RkTNDJGwqE=
SECTION ADDITIONAL
a.gtld-servers.net.	IN 	A	192.5.6.30
ENTRY_END
RANGE_END

RANGE_BEGIN 0 100
	ADDRESS 192.5.6.30
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
net.     	IN DNSKEY
SECTION ANSWER
net.	86400	IN	DNSKEY	257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmXSuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQDS4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn
net.   	86400	IN	DNSKEY	256 3 8 AQPAQAy1b2gx5xTywO8c6kI7OGIMt8yhN1iAemwNkd67cv8CAqNuDi0M3uOIrsVofliQFwp5HgNeIHFWbf8KxUlueZ6Wol2LTe/LnK9QKrczPSHr+q+lEH0cCoe8Cwmuc9y3GwkxqFWGHPCsHLZyVMuvdr3cenc0fvk1dDL7Rg7AlQ==
net.   	86400	IN	RRSIG	DNSKEY 8 1 86400 20160301173857 20160215173357 35886 net. BHm4lkpvTReitAK4JpVCLStI+JBswb9OEEmdKCCiiGe8zt3aVb6A+b2YCaJcWSA/RRrzASaOWvW7Lb5gyqxV/quEdLgB+xrMlnVUUQclLsF4EvdPMRzm+i8fVK//uo3IPDp/uyzVwR8dRpbPuJud1Mhttt0JZTNg0KqJZQEbq0odNdVWGln6PrvXd8f7L4VUaEJQI5H2SiUD8Iz56+EGmV9a6KIEJDKC0tiwPd1gQChaa5JcJBE9z1baSDX3H1f/tprOz/2H2kr0SDAL4Pztik5uer3bETQtmUK0s9Bq16AKSb3Fjs31LF/7bVwWyOVzIZJlfGk19w7c0seBr7f4gA==SECTION AUTHORITY
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
SECTION AUTHORITY
sample.net.         	172800	IN	NS	ns.sample.net.
a1rt98bs5qgc9nfi51s9hci47uljg6jh.net. 86400	IN	NSEC3	1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM
a1rt98bs5qgc9nfi51s9hci47uljg6jh.net. 86400	IN	RRSIG	NSEC3 8 2 86400 20160224061807 20160217050807 51128 net. N9aNNHsSDLSSXMHpw1Bo200V2dqtDc68f4JyCg4ZFCvIKSs5lNeiptWrdfbluQJmdhJK9gz6t3ITbFsnnJjLqwihBiiFbwd1FPctuMK3bGUpZfGXem+3zu4mGKzozQ8nr8KjDUX6fYoLri2vOuCv82a7vbp8RF/6QU6MqvsT4Qw=
55j4p0id76bnr9pf6341vkh0aga83vi2.net. 86400	IN	NSEC3	1 1 0 - 55JHR77O5IJ0MSJFOSIA68OGIQIN5N15 NS DS RRSIG
55j4p0id76bnr9pf6341vkh0aga83vi2.net. 86400	IN	RRSIG	NSEC3 8 2 86400 20160223061458 20160216050458 51128 net. QGDWMjAF7ziCridkheQEMH42INj+mHGnPuor/UvkNr2nZz1DDSewqG6/6uQR9FFSzRXINCZT6fdwhoIyTfxfLlNNXxABSqauTFXJ4ZXaBvDh0kwPwFBYOGSeKFukNLDiBhiUVLeMa1Va0M3H7ehWcOn1jsH301KTwu+6F5n6b/Q=
SECTION ADDITIONAL
ns.sample.net.			172800	IN	A	192.0.2.1
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
sample.net.     	IN DS
SECTION ANSWER
SECTION AUTHORITY
a1rt98bs5qgc9nfi51s9hci47uljg6jh.net. 86400	IN	NSEC3	1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM
a1rt98bs5qgc9nfi51s9hci47uljg6jh.net. 86400	IN	RRSIG	NSEC3 8 2 86400 20160224061807 20160217050807 51128 net. N9aNNHsSDLSSXMHpw1Bo200V2dqtDc68f4JyCg4ZFCvIKSs5lNeiptWrdfbluQJmdhJK9gz6t3ITbFsnnJjLqwihBiiFbwd1FPctuMK3bGUpZfGXem+3zu4mGKzozQ8nr8KjDUX6fYoLri2vOuCv82a7vbp8RF/6QU6MqvsT4Qw=
net.                	900	IN	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1455877597 1800 900 604800 86400
net.                	900	IN	RRSIG	SOA 8 1 900 20160226102637 20160219091637 51128 net. TDZlVntb/Dun6Ng0o5eeaXhJw+3HqEcoAEjwrd+xs1D1/+JlhIoP/bnrpcW0pkDxBf8Byg+Jx6J+y7jfPiEboL6aWzSZhX+bqgLGlKlU4oHf3ahUtuyEHxBZ0m/pPDGZQGW35U/9iZ3a1Ga1aPR4zsxoXfQLwwRpDfr3lGKGCrw=
55j4p0id76bnr9pf6341vkh0aga83vi2.net. 86400	IN	NSEC3	1 1 0 - 55JHR77O5IJ0MSJFOSIA68OGIQIN5N15 NS DS RRSIG
55j4p0id76bnr9pf6341vkh0aga83vi2.net. 86400	IN	RRSIG	NSEC3 8 2 86400 20160223061458 20160216050458 51128 net. QGDWMjAF7ziCridkheQEMH42INj+mHGnPuor/UvkNr2nZz1DDSewqG6/6uQR9FFSzRXINCZT6fdwhoIyTfxfLlNNXxABSqauTFXJ4ZXaBvDh0kwPwFBYOGSeKFukNLDiBhiUVLeMa1Va0M3H7ehWcOn1jsH301KTwu+6F5n6b/Q=
SECTION ADDITIONAL
ENTRY_END
RANGE_END

RANGE_BEGIN 0 100
	ADDRESS 192.0.2.1
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
a.b.sample.net.		IN	A
SECTION ANSWER
SECTION AUTHORITY
b.sample.net.		6000	IN	NS	ns.b.sample.net
SECTION ADDITIONAL
ns.b.sample.net		6000	IN	A	192.0.2.2
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
b.sample.net.     	IN DS
SECTION ANSWER
SECTION AUTHORITY
sample.net.         	180	IN	SOA	internal.sample.net. hostmaster.sample.com. 1455875127 90000 90000 90000 180
SECTION ADDITIONAL
ENTRY_END
RANGE_END

RANGE_BEGIN 10 10
	ADDRESS 192.0.2.2
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
a.b.sample.net. 	20	IN	A	192.0.2.3
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END
RANGE_END

;; must not be fetched due to cache
RANGE_BEGIN 30 30
	ADDRESS 192.0.2.2
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
a.b.sample.net. 	20	IN	A	192.0.2.4
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END
RANGE_END

RANGE_BEGIN 50 50
	ADDRESS 192.0.2.2
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
a.b.sample.net.	IN	A
SECTION ANSWER
a.b.sample.net. 	20	IN	A	192.0.2.5
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END
RANGE_END


STEP 10 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
a.b.sample.net.		IN	A
ENTRY_END

STEP 20 CHECK_ANSWER
ENTRY_BEGIN
MATCH flags rcode question answer additional authority
REPLY QR RD RA
SECTION QUESTION
a.b.sample.net.		IN	A
SECTION ANSWER
a.b.sample.net. 	IN	A	192.0.2.3
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

;; cache hit
STEP 30 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
a.b.sample.net.		IN	A
ENTRY_END

STEP 40 CHECK_ANSWER
ENTRY_BEGIN
MATCH flags rcode question answer additional authority
REPLY QR RD RA
SECTION QUESTION
a.b.sample.net.		IN	A
SECTION ANSWER
a.b.sample.net.		IN	A	192.0.2.3
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

STEP 45 TIME_PASSES ELAPSE 25

STEP 50 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
a.b.sample.net.		IN	A
ENTRY_END

STEP 60 CHECK_ANSWER
ENTRY_BEGIN
MATCH flags rcode question answer additional authority
REPLY QR RD RA
SECTION QUESTION
a.b.sample.net.		IN	A
SECTION ANSWER
a.b.sample.net.		IN	A	192.0.2.5
SECTION AUTHORITY
SECTION ADDITIONAL
ENTRY_END

SCENARIO_END
