1eaad808eSchristos; config options 2eaad808eSchristosserver: 3eaad808eSchristos target-fetch-policy: "0 0 0 0 0" 4eaad808eSchristos log-time-ascii: yes 5*762909a6Schristos fake-sha1: yes 6*762909a6Schristos trust-anchor-signaling: no 7eaad808eSchristosstub-zone: 8eaad808eSchristos name: "." 9eaad808eSchristos stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 10eaad808eSchristos; initial content (say from dig example.com DNSKEY > example.com.key) 11eaad808eSchristosAUTOTRUST_FILE example.com 12eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55582 (ksk), size = 512b} 13eaad808eSchristosexample.com. 10800 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 14eaad808eSchristosAUTOTRUST_END 15eaad808eSchristosCONFIG_END 16eaad808eSchristos 17eaad808eSchristosSCENARIO_BEGIN Test autotrust with ADDPEND twice and exceeded time 18eaad808eSchristos; should work even though not signed with old key at latest time. 19eaad808eSchristos 20eaad808eSchristos; K-ROOT 21eaad808eSchristosRANGE_BEGIN 0 100 22eaad808eSchristos ADDRESS 193.0.14.129 23eaad808eSchristosENTRY_BEGIN 24eaad808eSchristosMATCH opcode qname qtype 25eaad808eSchristosADJUST copy_id copy_query 26eaad808eSchristosREPLY QR AA 27eaad808eSchristosSECTION QUESTION 28eaad808eSchristos. IN NS 29eaad808eSchristosSECTION ANSWER 30eaad808eSchristos. IN NS k.root-servers.net. 31eaad808eSchristosSECTION ADDITIONAL 32eaad808eSchristosk.root-servers.net IN A 193.0.14.129 33eaad808eSchristosENTRY_END 34eaad808eSchristos 35eaad808eSchristosENTRY_BEGIN 36eaad808eSchristosMATCH opcode subdomain 37eaad808eSchristosADJUST copy_id copy_query 38eaad808eSchristosREPLY QR 39eaad808eSchristosSECTION QUESTION 40eaad808eSchristoscom. IN NS 41eaad808eSchristosSECTION AUTHORITY 42eaad808eSchristoscom. IN NS a.gtld-servers.net. 43eaad808eSchristosSECTION ADDITIONAL 44eaad808eSchristosa.gtld-servers.net. IN A 192.5.6.30 45eaad808eSchristosENTRY_END 46eaad808eSchristosRANGE_END 47eaad808eSchristos 48eaad808eSchristos; a.gtld-servers.net. 49eaad808eSchristosRANGE_BEGIN 0 100 50eaad808eSchristos ADDRESS 192.5.6.30 51eaad808eSchristosENTRY_BEGIN 52eaad808eSchristosMATCH opcode subdomain 53eaad808eSchristosADJUST copy_id copy_query 54eaad808eSchristosREPLY QR 55eaad808eSchristosSECTION QUESTION 56eaad808eSchristosexample.com. IN NS 57eaad808eSchristosSECTION AUTHORITY 58eaad808eSchristosexample.com. IN NS ns.example.com. 59eaad808eSchristosSECTION ADDITIONAL 60eaad808eSchristosns.example.com. IN A 1.2.3.4 61eaad808eSchristosENTRY_END 62eaad808eSchristosRANGE_END 63eaad808eSchristos 64eaad808eSchristos; ns.example.com. KSK 55582 65eaad808eSchristosRANGE_BEGIN 0 10 66eaad808eSchristos ADDRESS 1.2.3.4 67eaad808eSchristosENTRY_BEGIN 68eaad808eSchristosMATCH opcode qname qtype 69eaad808eSchristosADJUST copy_id 70eaad808eSchristosREPLY QR AA 71eaad808eSchristosSECTION QUESTION 72eaad808eSchristoswww.example.com. IN A 73eaad808eSchristosSECTION ANSWER 74eaad808eSchristoswww.example.com. 3600 IN A 10.20.30.40 75eaad808eSchristoswww.example.com. 3600 IN RRSIG A 5 3 3600 20090924111500 20090821111500 30899 example.com. pYGxVLsWUvOp1wSf0iwPap+JnECfC5GAm1lRqy3YEqecNGld7U7x/5Imo3CerbdZrVptUQs2oH0lcjwYJXMnsw== ;{id = 30899} 76eaad808eSchristosSECTION AUTHORITY 77eaad808eSchristosexample.com. 3600 IN NS ns.example.com. 78eaad808eSchristosexample.com. 3600 IN RRSIG NS 5 2 3600 20090924111500 20090821111500 30899 example.com. J5wxRq0jgwQL6yy530kvo9cHqNAUHV8IF4dvaYZL0bNraO2Oe6dVXqlJl4+cxNHI2TMsstwFPr2Zz8tv6Az2mQ== ;{id = 30899} 79eaad808eSchristosSECTION ADDITIONAL 80eaad808eSchristosns.example.com. 3600 IN A 1.2.3.4 81eaad808eSchristosns.example.com. 3600 IN RRSIG A 5 3 3600 20090924111500 20090821111500 30899 example.com. JsXbS18oyc0zkVaOWGSFdIQuOsZKflT0GraT9afDPoWLCgH4ApF7jNgfJV7Pqy1sTBRajME5IUAhpANwGBuW4A== ;{id = 30899} 82eaad808eSchristosENTRY_END 83eaad808eSchristos 84eaad808eSchristosENTRY_BEGIN 85eaad808eSchristosMATCH opcode qname qtype 86eaad808eSchristosADJUST copy_id 87eaad808eSchristosREPLY QR AA 88eaad808eSchristosSECTION QUESTION 89eaad808eSchristosexample.com. IN DNSKEY 90eaad808eSchristosSECTION ANSWER 91eaad808eSchristos; KSK 1 92eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55582 (ksk), size = 512b} 93eaad808eSchristos; ZSK 1 94eaad808eSchristosexample.com. 10800 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 95eaad808eSchristos; signatures 96eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20090924111500 20090821111500 30899 example.com. b/HK231jIQLX8IhlZfup3r0yhpXaasbPE6LzxoEVVvWaTZWcLmeV8jDIcn0qO7Yvs7bIJN20lwVAV0GcHH3hWQ== ;{id = 30899} 97eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20090924111500 20090821111500 55582 example.com. PCHme1QLoULxqjhg5tMlpR0qJlBfstEUVq18TtNoKQe9le1YhJ9caheXcTWoK+boLhXxg9u6Yyvq8FboQh0OjA== ;{id = 55582} 98eaad808eSchristosENTRY_END 99eaad808eSchristosRANGE_END 100eaad808eSchristos 101eaad808eSchristos; ns.example.com. KSK 55582 and 60946 102eaad808eSchristosRANGE_BEGIN 11 40 103eaad808eSchristos ADDRESS 1.2.3.4 104eaad808eSchristosENTRY_BEGIN 105eaad808eSchristosMATCH opcode qname qtype 106eaad808eSchristosADJUST copy_id 107eaad808eSchristosREPLY QR AA 108eaad808eSchristosSECTION QUESTION 109eaad808eSchristosexample.com. IN DNSKEY 110eaad808eSchristosSECTION ANSWER 111eaad808eSchristos; KSK 1 112eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55582 (ksk), size = 512b} 113eaad808eSchristos; KSK 2 114eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} 115eaad808eSchristos; ZSK 1 116eaad808eSchristosexample.com. 10800 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 117eaad808eSchristos; signatures 118eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091024111500 20090921111500 30899 example.com. rkaCUpTFPWVu4Om5oMTR+39Mct6ZMs56xrE0rbxMMOokfvIQheIxsAEc5BFJeA/2y5WTewl6diCD6yQXCybrDg== ;{id = 30899} 119eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091024111500 20090921111500 55582 example.com. CoMon+lWPAsUvgfpCTDPx8Zn8dQpky3lu2O6T+oJ2Mat9a/u1YwGhSQHGPn7ZNG/4vKM97tx84sSlUGz3geD1w== ;{id = 55582} 120eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091024111500 20090921111500 60946 example.com. o+Cbs7DcYPYlSLd4hi3vkSVQpXGnKgKSi9MpHGfu1Uahv5190U2DUOxP1du/HOYbf+IHYL8zLbMZjVEG5wgnTg== ;{id = 60946} 121eaad808eSchristosENTRY_END 122eaad808eSchristosRANGE_END 123eaad808eSchristos 124eaad808eSchristos; ns.example.com. KSK 60946 125eaad808eSchristosRANGE_BEGIN 41 50 126eaad808eSchristos ADDRESS 1.2.3.4 127eaad808eSchristosENTRY_BEGIN 128eaad808eSchristosMATCH opcode qname qtype 129eaad808eSchristosADJUST copy_id 130eaad808eSchristosREPLY QR AA 131eaad808eSchristosSECTION QUESTION 132eaad808eSchristosexample.com. IN DNSKEY 133eaad808eSchristosSECTION ANSWER 134eaad808eSchristos; KSK 2 135eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} 136eaad808eSchristos; ZSK 1 137eaad808eSchristosexample.com. 10800 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 138eaad808eSchristos; signatures 139eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091124111500 20091018111500 30899 example.com. YHX8pWL0LsJ4HGuEgu/9cFbC+pQnN3QWA50p+Q6ukY+fTALxiBFlaLUXzNqMqxl7CoYU3Ty2LVd8acEoGLwy/g== ;{id = 30899} 140eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091124111500 20091018111500 60946 example.com. CZUdTyi3yebXMoyhMsna153k+WIiOk3jDPv8ixgwnw4u+ys/EB2UeQF0Laf1nDVziPhsQgu7/DYZQwfpvvpmmQ== ;{id = 60946} 141eaad808eSchristosENTRY_END 142eaad808eSchristosRANGE_END 143eaad808eSchristos 144eaad808eSchristos; ns.example.com. KSK 55582-REVOKED and 60946 145eaad808eSchristosRANGE_BEGIN 51 60 146eaad808eSchristos ADDRESS 1.2.3.4 147eaad808eSchristosENTRY_BEGIN 148eaad808eSchristosMATCH opcode qname qtype 149eaad808eSchristosADJUST copy_id 150eaad808eSchristosREPLY QR AA 151eaad808eSchristosSECTION QUESTION 152eaad808eSchristosexample.com. IN DNSKEY 153eaad808eSchristosSECTION ANSWER 154eaad808eSchristos; KSK 1 155eaad808eSchristosexample.com. 10800 IN DNSKEY 385 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55710 (ksk), size = 512b} 156eaad808eSchristos; KSK 2 157eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} 158eaad808eSchristos; ZSK 1 159eaad808eSchristosexample.com. 10800 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 160eaad808eSchristos; signatures 161eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091224111500 20091118111500 30899 example.com. qLKZUJEi3ajSJ4/b7xl0BwhzW6JtjsojpZ+2nUx1PvaeQVoTmyWxjxc2tAmJGcBPqMqzeY470xvyMDvGTOiQCQ== ;{id = 30899} 162eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091224111500 20091118111500 55710 example.com. EW2YB+2yNX9LTNDPVwkcGnRTTx38pOiwBaixdwxmDgqWKXLDLM6Kd2Xv9tveS39RnSZ5H1inRXE55q+rL6Re3g== ;{id = 55710} 163eaad808eSchristos; wrong keytag: 164eaad808eSchristos;example.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091224111500 20091118111500 55582 example.com. nH/6HauVJI4GGz78UoK/38cOOrEqsYZP0jFzfCC3OyIlclVTjAFvjVPlVMGK7sA5Nw1v20YtFTQkXZgbrRuInQ== ;{id = 55582} 165eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20091224111500 20091118111500 60946 example.com. xKSBZr4vOsEUKlVoNb6SOV69DM7xFOJI4gPFKq5Tv4APIMJ/9G3odoDmNcLCVyYGzhoDik5hciJnZio6UHgzAA== ;{id = 60946} 166eaad808eSchristosENTRY_END 167eaad808eSchristosRANGE_END 168eaad808eSchristos 169eaad808eSchristos; ns.example.com. KSK 60946 170eaad808eSchristosRANGE_BEGIN 61 70 171eaad808eSchristos ADDRESS 1.2.3.4 172eaad808eSchristosENTRY_BEGIN 173eaad808eSchristosMATCH opcode qname qtype 174eaad808eSchristosADJUST copy_id 175eaad808eSchristosREPLY QR AA 176eaad808eSchristosSECTION QUESTION 177eaad808eSchristosexample.com. IN DNSKEY 178eaad808eSchristosSECTION ANSWER 179eaad808eSchristos; KSK 2 180eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} 181eaad808eSchristos; ZSK 1 182eaad808eSchristosexample.com. 10800 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 183eaad808eSchristos; signatures 184eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20101224111500 20101118111500 30899 example.com. TfFGz1kDtkn3ixbKMJvQDZ0uGw/eW+inIiPqQVPQtO2WiocKrnYnzwv/AqwnFvEar70dF15/zffNIF+ipOS5/g== ;{id = 30899} 185eaad808eSchristosexample.com. 10800 IN RRSIG DNSKEY 5 2 10800 20101224111500 20101118111500 60946 example.com. X0Ci//w0czN/J5RvypHGqp56n1tLdapi92ODAqjM7QpZXbSHaJ7wfPG1PZzvdxHUZUVyf8uy2stjg/XoLGHMWA== ;{id = 60946} 186eaad808eSchristosENTRY_END 187eaad808eSchristosRANGE_END 188eaad808eSchristos 189eaad808eSchristos; set date/time to Aug 24 07:46:40 (2009). 190eaad808eSchristosSTEP 5 TIME_PASSES ELAPSE 1251100000 191eaad808eSchristosSTEP 6 TRAFFIC ; the initial probe 192eaad808eSchristosSTEP 7 ASSIGN t0 = ${time} 193eaad808eSchristosSTEP 8 ASSIGN probe0 = ${range 4800 ${timeout} 5400} 194eaad808eSchristos 195eaad808eSchristos; the auto probing should have been done now. 196eaad808eSchristosSTEP 10 CHECK_AUTOTRUST example.com 197eaad808eSchristosFILE_BEGIN 198eaad808eSchristos; autotrust trust anchor file 199eaad808eSchristos;;id: example.com. 1 200eaad808eSchristos;;last_queried: ${$t0} ;;${ctime $t0} 201eaad808eSchristos;;last_success: ${$t0} ;;${ctime $t0} 202eaad808eSchristos;;next_probe_time: ${$t0 + $probe0} ;;${ctime $t0 + $probe0} 203eaad808eSchristos;;query_failed: 0 204eaad808eSchristos;;query_interval: 5400 205eaad808eSchristos;;retry_time: 3600 206eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55582 (ksk), size = 512b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=${$t0} ;;${ctime $t0} 207eaad808eSchristosFILE_END 208eaad808eSchristos 209eaad808eSchristos; key prepublished. First poll. 30 days later 210eaad808eSchristosSTEP 11 TIME_PASSES EVAL ${30*24*3600} 211eaad808eSchristosSTEP 12 TRAFFIC 212eaad808eSchristosSTEP 13 ASSIGN t1 = ${time} 213eaad808eSchristosSTEP 14 ASSIGN probe1 = ${range 4800 ${timeout} 5400} 214eaad808eSchristosSTEP 15 CHECK_AUTOTRUST example.com 215eaad808eSchristosFILE_BEGIN 216eaad808eSchristos; autotrust trust anchor file 217eaad808eSchristos;;id: example.com. 1 218eaad808eSchristos;;last_queried: ${$t1} ;;${ctime $t1} 219eaad808eSchristos;;last_success: ${$t1} ;;${ctime $t1} 220eaad808eSchristos;;next_probe_time: ${$t1 + $probe1} ;;${ctime $t1 + $probe1} 221eaad808eSchristos;;query_failed: 0 222eaad808eSchristos;;query_interval: 5400 223eaad808eSchristos;;retry_time: 3600 224eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} ;;state=1 [ ADDPEND ] ;;count=1 ;;lastchange=${$t1} ;;${ctime $t1} 225eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55582 (ksk), size = 512b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=${$t0} ;;${ctime $t0} 226eaad808eSchristosFILE_END 227eaad808eSchristos 228eaad808eSchristos; Second poll. 10 days later 229eaad808eSchristosSTEP 21 TIME_PASSES EVAL ${10*24*3600} 230eaad808eSchristosSTEP 22 TRAFFIC 231eaad808eSchristosSTEP 23 ASSIGN t2 = ${time} 232eaad808eSchristosSTEP 24 ASSIGN probe2 = ${range 4800 ${timeout} 5400} 233eaad808eSchristosSTEP 25 CHECK_AUTOTRUST example.com 234eaad808eSchristosFILE_BEGIN 235eaad808eSchristos; autotrust trust anchor file 236eaad808eSchristos;;id: example.com. 1 237eaad808eSchristos;;last_queried: ${$t2} ;;${ctime $t2} 238eaad808eSchristos;;last_success: ${$t2} ;;${ctime $t2} 239eaad808eSchristos;;next_probe_time: ${$t2 + $probe2} ;;${ctime $t2 + $probe2} 240eaad808eSchristos;;query_failed: 0 241eaad808eSchristos;;query_interval: 5400 242eaad808eSchristos;;retry_time: 3600 243eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} ;;state=1 [ ADDPEND ] ;;count=2 ;;lastchange=${$t1} ;;${ctime $t1} 244eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55582 (ksk), size = 512b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=${$t0} ;;${ctime $t0} 245eaad808eSchristosFILE_END 246eaad808eSchristos 247eaad808eSchristos; t3 is removed third poll time. 248eaad808eSchristos 249eaad808eSchristos; 21 days later, hold down has lapsed. 250eaad808eSchristosSTEP 41 TIME_PASSES EVAL ${21*24*3600} 251eaad808eSchristosSTEP 42 TRAFFIC 252eaad808eSchristosSTEP 43 ASSIGN t4 = ${time} 253eaad808eSchristosSTEP 44 ASSIGN probe4 = ${range 4800 ${timeout} 5400} 254eaad808eSchristosSTEP 45 CHECK_AUTOTRUST example.com 255eaad808eSchristosFILE_BEGIN 256eaad808eSchristos; autotrust trust anchor file 257eaad808eSchristos;;id: example.com. 1 258eaad808eSchristos;;last_queried: ${$t4} ;;${ctime $t4} 259eaad808eSchristos;;last_success: ${$t4} ;;${ctime $t4} 260eaad808eSchristos;;next_probe_time: ${$t4 + $probe4} ;;${ctime $t4 + $probe4} 261eaad808eSchristos;;query_failed: 0 262eaad808eSchristos;;query_interval: 5400 263eaad808eSchristos;;retry_time: 3600 264eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=${$t4} ;;${ctime $t4} 265eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55582 (ksk), size = 512b} ;;state=3 [ MISSING ] ;;count=0 ;;lastchange=${$t4} ;;${ctime $t4} 266eaad808eSchristosFILE_END 267eaad808eSchristos 268eaad808eSchristos; 30 days later, the old key is revoked 269eaad808eSchristosSTEP 51 TIME_PASSES EVAL ${30*24*3600} 270eaad808eSchristosSTEP 52 TRAFFIC 271eaad808eSchristosSTEP 53 ASSIGN t5 = ${time} 272eaad808eSchristosSTEP 54 ASSIGN probe5 = ${range 4800 ${timeout} 5400} 273eaad808eSchristosSTEP 55 CHECK_AUTOTRUST example.com 274eaad808eSchristosFILE_BEGIN 275eaad808eSchristos; autotrust trust anchor file 276eaad808eSchristos;;id: example.com. 1 277eaad808eSchristos;;last_queried: ${$t5} ;;${ctime $t5} 278eaad808eSchristos;;last_success: ${$t5} ;;${ctime $t5} 279eaad808eSchristos;;next_probe_time: ${$t5 + $probe5} ;;${ctime $t5 + $probe5} 280eaad808eSchristos;;query_failed: 0 281eaad808eSchristos;;query_interval: 5400 282eaad808eSchristos;;retry_time: 3600 283eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=${$t4} ;;${ctime $t4} 284eaad808eSchristosexample.com. 10800 IN DNSKEY 385 3 5 AwEAAc3Z5DQDJpH4oPdNtC4BUQHk50XMD+dHr4r8psHmivIa83hxR5CRgCtd9sENCW9Ae8OIO19xw9t/RPaEAqQa+OE= ;{id = 55710 (ksk), size = 512b} ;;state=4 [ REVOKED ] ;;count=0 ;;lastchange=${$t5} ;;${ctime $t5} 285eaad808eSchristosFILE_END 286eaad808eSchristos 287eaad808eSchristos; 370 days later, the old key is removed from storage 288eaad808eSchristosSTEP 61 TIME_PASSES EVAL ${370*24*3600} 289eaad808eSchristosSTEP 62 TRAFFIC 290eaad808eSchristosSTEP 63 ASSIGN t6 = ${time} 291eaad808eSchristosSTEP 64 ASSIGN probe6 = ${range 4800 ${timeout} 5400} 292eaad808eSchristosSTEP 65 CHECK_AUTOTRUST example.com 293eaad808eSchristosFILE_BEGIN 294eaad808eSchristos; autotrust trust anchor file 295eaad808eSchristos;;id: example.com. 1 296eaad808eSchristos;;last_queried: ${$t6} ;;${ctime $t6} 297eaad808eSchristos;;last_success: ${$t6} ;;${ctime $t6} 298eaad808eSchristos;;next_probe_time: ${$t6 + $probe6} ;;${ctime $t6 + $probe6} 299eaad808eSchristos;;query_failed: 0 300eaad808eSchristos;;query_interval: 5400 301eaad808eSchristos;;retry_time: 3600 302eaad808eSchristosexample.com. 10800 IN DNSKEY 257 3 5 AwEAAeiaUiUIpWMfYz5L0sfJTZWnuN9IyBX4em9VjsoqQTsOD1HDQpNb4buvJo7pN2aBCxNS7e0OL8e2mVB6CLZ+8ek= ;{id = 60946 (ksk), size = 512b} ;;state=2 [ VALID ] ;;count=0 ;;lastchange=${$t4} ;;${ctime $t4} 303eaad808eSchristosFILE_END 304eaad808eSchristos 305eaad808eSchristos 306eaad808eSchristosSCENARIO_END 307