test_api_rr_validation.py 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296
  1. from typing import List, Tuple
  2. import pytest
  3. from conftest import DeSECAPIV1Client, NSClient
  4. def generate_params(dict_value_lists_by_type: dict) -> List[Tuple[str, str]]:
  5. return [
  6. (rr_type, value)
  7. for rr_type in dict_value_lists_by_type.keys()
  8. for value in dict_value_lists_by_type[rr_type]
  9. ]
  10. VALID_RECORDS_CANONICAL = {
  11. 'A': ['127.0.0.1', '127.0.0.2'],
  12. 'AAAA': ['::1', '::2'],
  13. 'AFSDB': ['2 turquoise.femto.edu.'],
  14. 'APL': [
  15. # from RFC 3123 Sec. 4
  16. '1:192.168.32.0/21 !1:192.168.38.0/28',
  17. '1:192.168.42.0/26 1:192.168.42.64/26 1:192.168.42.128/25',
  18. '1:127.0.0.1/32 1:172.16.64.0/22',
  19. '1:224.0.0.0/4 2:ff00::/8',
  20. ],
  21. 'CAA': [
  22. '128 issue "letsencrypt.org"', '128 iodef "mailto:desec@example.com"',
  23. '1 issue "letsencrypt.org"'
  24. ],
  25. 'CERT': ['6 0 0 sadfdQ=='],
  26. 'CNAME': ['example.com.'],
  27. 'DHCID': ['aaaaaaaaaaaa', 'xxxx'],
  28. 'DLV': [
  29. '39556 13 1 aabbccddeeff',
  30. ],
  31. 'DS': [
  32. '39556 13 1 aabbccddeeff',
  33. ],
  34. 'EUI48': ['aa-bb-cc-dd-ee-ff'],
  35. 'EUI64': ['aa-bb-cc-dd-ee-ff-00-11'],
  36. 'HINFO': ['"ARMv8-A" "Linux"'],
  37. # 'IPSECKEY': ['12 0 2 . asdfdf==', '03 1 1 127.0.00.1 asdfdf==', '12 3 1 example.com. asdfdf==',],
  38. 'KX': ['4 example.com.', '28 io.'],
  39. 'LOC': [
  40. '23 12 59.000 N 42 22 48.500 W 65.00m 20.00m 10.00m 10.00m',
  41. ],
  42. 'MX': ['10 example.com.', '20 1.1.1.1.'],
  43. 'NAPTR': [
  44. '100 50 "s" "z3950+I2L+I2C" "" _z3950._tcp.gatech.edu.',
  45. ],
  46. 'NS': ['ns1.example.com.'],
  47. 'OPENPGPKEY': [
  48. 'mQINBF3yev8BEADR9GxB6OJ5AJlXBWc3nWyWZ+yNNVBiy73XjgOs0uowbxph'
  49. 'dIw6l75M6xw3i9xAlcjAGG2710FJaye7EZHot3RTIgHpn4FrErQSpNPuJKjD'
  50. 'IedZZ4av5SRtz5FfnXhNkQGs7jAVi6FmjR9/0GWMxj0BdbcOmeePCUfIIH7T'
  51. 'ujQJ2c3XHOu/kZ1h4zsFVSslcLEi4KXy0I52pEz0E2CyJrxCLdBd7uU7wDCg'
  52. 'G8KrIP3UJ5EtukP/LMq4D1eZ4FmtVqzkuDYlJJo70XQytEK9UqDdaDvlUeS5'
  53. 'FrVj4Zf7OaC5YcSvQemVV4VYSBgJIPb+iFY21/1mXAxyYaunqaR0j5qNaMjr'
  54. 'E2g3ADRxJiLExhhzlqwJU8+Lc+0QajF/s3lc+dB5usSPqGk6Eb4hBEMaqQvg'
  55. '5I0W8pFtHINYipNW5xGSrsX0pyWVai6EkoTXfjbBMC7khwmwsycJ8pYj3ipe'
  56. 'aNQuUP+XXqJKepoVOY2475Z7YT1NRRbGGEp743mbqKo4SnEKxS2kApo1UPd1'
  57. 'FbI50TZ62Vsv4tne3bR25eCycjdvIOp6zPm/Pf9LFVm5KF8Wd2U3vRi/uo4v'
  58. 'HPUK1RoIzjmirp3XUBGBgHd/mhlOADPWB9dE96eXK4yEHlbfomfFiKAisHDc'
  59. 'vUa0E/UbklYBhJjdWBaw1fDDyiSxsBCTsq4ObQARAQABtBFzdXBwb3J0QHBv'
  60. 'c3Rlby5kZYkCVAQTAQgAPhYhBJZxyBhcZRmrtOitn6TrgtJXP3x3BQJd8nr/'
  61. 'AhsDBQkDw7iABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEKTrgtJXP3x3'
  62. '+UIP/jpw6Nkp5hLbXxpPRSL2TyyWDfEHPKkBQfU+jnAUIN+WgAV27HpOa+vZ'
  63. '/hmTKOG6SlTOxHWACmDiUVfhLOYMV8QPDD3yPFCZWo4UxBKPZaai6GQwr44u'
  64. 'zCcU+E6AdFnb2nbzYSgACrErU5o5JoU2lPgleMI3FYsG8wb/kQAD7XGDX+Ev'
  65. 'tAbAQGK5EgevycJzot/hsR/S6EM/l0VsW74DIje3fbp3gaJY2fUG9fTdQu7a'
  66. 'gj6f9HuZAvXHIuSFeA/kwhUWuZfTcct8PV78gwQB4d6AOFMzoxLaFQAzxuTR'
  67. '60kZxsyyi4U5km6D/XzI9rTd228PD8xkGr/2Kx1YRU0ixZnohv9xNc4GP/69'
  68. 'GNWbbOZcyJcSL+kvych+ddbP5VjHea+b4vT35KV++PMndj+78BE1u5sdqWir'
  69. 'X9pi09go7SW1BlaJsMHrkR0P8yFCaFWLyCmIC7C/KcSuHVwcjVYWHynLq6CK'
  70. 'kkv4r8BNM/QFzPCeozXjMk7zq9TkJjLVxsUVNcZaNqzlWO0JzCfE6ICpHhyI'
  71. 'g/1bO/VJQyk+6llyX1LwRKCeKQCp6KcLx4qnjgZ8g1ArNvazNot9fAssgAUz'
  72. 'yoyOBF1SYJxWnzu9GE1F47zU1iD6FB8mjspvE00voDs8t2e+xtZoqsM12WtC'
  73. '8R4VbCY0LmTPGiWyxD9y7TnUlDfHuQINBF3yev8BEAC4dyN2BPiHCmwtKV/3'
  74. '9ZUMVCjb39wnsAA8CH7WAAM5j+k8/uXKUmTcFoZ7+9ya6PZCLXbPC64FIAwl'
  75. 'YalzCEP5Jx25Ct/DPhVJPIFWHMOYbyUbLJ8tlC1vnnDhd8czeGmozkuyofMh'
  76. '39QzR3SLzOqucJO3GC6Fx7eFNasajJsaAXaQToKx8YqKCGG4nHxn0Ucb79+G'
  77. '/0wQhtR0Mk3CxcajYJAsTV2ulW05P9xqovblXImXDZpgv0bQ2TX43SdR17yk'
  78. 'QzL33HRNCT7clLblHLMPQVxYy1yGS6hOAQj/Rmp+BO7d3S082+oyAFWeb7a9'
  79. 'fwzedbxPeiE2VOLtZizQUWIHHqwKP0tNEWRvSfCbc6ktvZQnHCIKyhmTC8N7'
  80. 'kvS4T6WjWzpc1M+GOMlOqhtW6t3zV1i2tkcpujduBGRIZ8ZQY+yo/i1HSL5t'
  81. 'N98606YXN1s2JyqwAkBJfPYiMp67J2uaFsML3YQEKAxR64GhkjFR/OqYtlIB'
  82. 'cx1PvcrPbVWQzXZBfFyjbAd55MnWVk6GrbM3y1QATN3NNhXfbMzLLU6cw/8p'
  83. 'sJw0+hxv1W2bJTftrs/5PyLryNOKYHbPEtC6aIyuzbIFFKWxkNshUiasd82Q'
  84. 'Jafgx3pFNnCtB61UV46QeqPI7sVueLslurqVgEGb2dS6unKYWXedoIMELm3C'
  85. 'g0XdJQARAQABiQI8BBgBCAAmFiEElnHIGFxlGau06K2fpOuC0lc/fHcFAl3y'
  86. 'ev8CGwwFCQPDuIAACgkQpOuC0lc/fHc/PxAAj29SBqW6ZRG8zOOw0Dmg1sg4'
  87. 'ONYtJ4hEzqPv2WbtOKxgtdcjQS1gMadtfcrH0omZPn8YmeojdbJCd5b9UBYr'
  88. 'h4Km3usURy79ouqvyQdZOIBOCUuvNcAUX2xvgUEHQW+rDpkd2mxdASsay1I7'
  89. 'yx2S0xE/QP/L2dH0470JWJ+tCIz3WuW2BEi+wijy2tqJfzIkIWA5ND2jwl4n'
  90. 'roY7srmAwZfXlh97/T5oOPIUsupIp+vmtMd4B0qa1wLGFDch+VwVvklLN5/Q'
  91. 'Vfbedy1Y8yHYiRWSrd3pHvkdtE5rI8qCOWaU/271plT9MZiwHe5WzCWESbKi'
  92. 'dwHQanM0Y6+Y8rrvUWGXrlPDvVd3Gd6TjqNhA8+AEiG+BHsw7Azc5in97/yW'
  93. '9cAYEldWv1tUjxgqvWWbGA8E6M/EuE3FuM48HNODfEh/b0ut+b2UAtuz3LzK'
  94. 'NVpqYZ9NIebpIMlUuJoQc9rPCWzMDNX37iGRBA016L7VizeJRpJ8VPRAQWHe'
  95. 'L5eC85dx9wcdK152fqlOUj729J2TZ5JYQdm9vF2cA6bsIB9m48j/UzNEeV3W'
  96. 'NZ3nuZqQ9VjVLYiPURbdkYxWfUvFdVawfqUZ4PGKbVWrFfod8WwHa+gsP4UJ'
  97. 'hLN/nxCalBbc3HnyYo0Inlytu4fumElS7kuUVNielOsJlyUr8kfxU3c6MPk=',
  98. ],
  99. 'PTR': ['example.com.', '*.example.com.'],
  100. 'RP': ['hostmaster.example.com. .'],
  101. 'SMIMEA': ['3 1 0 aabbccddeeff'],
  102. 'SPF': [
  103. '"v=spf1 ip4:10.1" ".1.1 ip4:127" ".0.0.0/16 ip4:192.168.0.0/27 include:example.com -all"',
  104. '"v=spf1 include:example.com ~all"',
  105. '"v=spf1 ip4:10.1.1.1 ip4:127.0.0.0/16 ip4:192.168.0.0/27 include:example.com -all"',
  106. '"spf2.0/pra,mfrom ip6:2001:558:fe14:76:68:87:28:0/120 -all"',
  107. ],
  108. 'SRV': ['0 0 0 .', '100 1 5061 example.com.'],
  109. 'SSHFP': ['2 2 aabbcceeddff'],
  110. 'TLSA': ['3 0 2 696b8f6b92a913560b23ef5720c378881faffe74432d04eb35db957c0a93987b47adf26abb5dac10ba482597ae16edb069b511bec3e26010d1927bf6392760dd 696b8f6b92a913560b23ef5720c378881faffe74432d04eb35db957c0a93987b47adf26abb5dac10ba482597ae16edb069b511bec3e26010d1927bf6392760dd',],
  111. 'TXT': [
  112. '"foobar"',
  113. '"foo" "bar"',
  114. '"foo" "" "bar"',
  115. '"" "" "foo" "" "bar"',
  116. r'"new\010line"',
  117. r'"\000" "NUL byte yo"',
  118. f'"{"a" * 255}" "{"a" * 243}"', # 500 byte total wire length
  119. ],
  120. 'URI': ['10 1 "ftp://ftp1.example.com/public"'],
  121. }
  122. VALID_RECORDS_NON_CANONICAL = {
  123. 'A': ['127.0.0.3'],
  124. 'AAAA': ['0000::0000:0003'],
  125. 'AFSDB': ['03 turquoise.FEMTO.edu.'],
  126. 'APL': ['2:FF00:0:0:0:0::/8 !1:192.168.38.0/28'],
  127. 'CAA': ['0128 "issue" "letsencrypt.org"'],
  128. 'CERT': ['06 00 00 sadfee=='],
  129. 'CNAME': ['EXAMPLE.TEST.'],
  130. 'DHCID': ['aa aaa aaaa a a a', 'xxxx'],
  131. 'DLV': [
  132. '6454 8 2 5CBA665A006F6487625C6218522F09BD3673C25FA10F25CB18459AA1 0DF1F520',
  133. '6454 8 2 5C BA665A006F6487625C6218522F09BD3673C25FA10F25CB18459AA1 0DF1F520',
  134. ],
  135. 'DS': [
  136. '6454 8 2 5CBA665A006F6487625C6218522F09BD3673C25FA10F25CB18459AA1 0DF1F520',
  137. '6454 8 2 5C BA665A006F6487625C6218522F09BD3673C25FA10F25CB18459AA1 0DF1F520',
  138. ],
  139. 'EUI48': ['AA-BB-CC-DD-EE-F1'],
  140. 'EUI64': ['AA-BB-CC-DD-EE-FF-00-12'],
  141. 'HINFO': ['cpu os'],
  142. # 'IPSECKEY': ['12 0 2 . asdfdf==', '03 1 1 127.0.00.1 asdfdf==', '12 3 1 example.com. asdfdf==',],
  143. 'KX': ['012 example.TEST.'],
  144. 'LOC': [
  145. '023 012 59 N 042 022 48.500 W 65.00m 20.00m 10.00m 10.00m',
  146. ],
  147. 'MX': ['10 010.1.1.1.'],
  148. 'NAPTR': [
  149. '100 50 "s" "z3950+I2L+I2C" "" _z3950._tcp.gatech.edu.',
  150. ],
  151. 'NS': ['EXaMPLE.COM.'],
  152. 'OPENPGPKEY': [
  153. 'mG8EXtVIsRMFK4EEAC==',
  154. 'mQINBF3yev8BEADR9GxB6OJ5AJlXBWc3nWyWZ+yNNVBiy73XjgOs0uowbxph '
  155. 'dIw6l75M6xw3i9xAlcjAGG2710FJaye7EZHot3RTIgHpn4FrErQSpNPuJKjD '
  156. 'IedZZ4av5SRtz5FfnXhNkQGs7jAVi6FmjR9/0GWMxj0BdbcOmeePCUfIIH7T '
  157. 'ujQJ2c3XHOu/kZ1h4zsFVSslcLEi4KXy0I52pEz0E2CyJrxCLdBd7uU7wDCg '
  158. 'G8KrIP3UJ5EtukP/LMq4D1eZ4FmtVqzkuDYlJJo70XQytEK9UqDdaDvlUeS5 '
  159. 'FrVj4Zf7OaC5YcSvQemVV4VYSBgJIPb+iFY21/1mXAxyYaunqaR0j5qNaMjr '
  160. 'E2g3ADRxJiLExhhzlqwJU8+Lc+0QajF/s3lc+dB5usSPqGk6Eb4hBEMaqQvg '
  161. '5I0W8pFtHINYipNW5xGSrsX0pyWVai6EkoTXfjbBMC7khwmwsycJ8pYj3ipe '
  162. 'aNQuUP+XXqJKepoVOY2475Z7YT1NRRbGGEp743mbqKo4SnEKxS2kApo1UPd1 '
  163. 'FbI50TZ62Vsv4tne3bR25eCycjdvIOp6zPm/Pf9LFVm5KF8Wd2U3vRi/uo4v '
  164. 'HPUK1RoIzjmirp3XUBGBgHd/mhlOADPWB9dE96eXK4yEHlbfomfFiKAisHDc '
  165. 'vUa0E/UbklYBhJjdWBaw1fDDyiSxsBCTsq4ObQARAQABtBFzdXBwb3J0QHBv '
  166. 'c3Rlby5kZYkCVAQTAQgAPhYhBJZxyBhcZRmrtOitn6TrgtJXP3x3BQJd8nr/ '
  167. 'AhsDBQkDw7iABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEKTrgtJXP3x3 '
  168. '+UIP/jpw6Nkp5hLbXxpPRSL2TyyWDfEHPKkBQfU+jnAUIN+WgAV27HpOa+vZ '
  169. '/hmTKOG6SlTOxHWACmDiUVfhLOYMV8QPDD3yPFCZWo4UxBKPZaai6GQwr44u '
  170. 'zCcU+E6AdFnb2nbzYSgACrErU5o5JoU2lPgleMI3FYsG8wb/kQAD7XGDX+Ev '
  171. 'tAbAQGK5EgevycJzot/hsR/S6EM/l0VsW74DIje3fbp3gaJY2fUG9fTdQu7a '
  172. 'gj6f9HuZAvXHIuSFeA/kwhUWuZfTcct8PV78gwQB4d6AOFMzoxLaFQAzxuTR '
  173. '60kZxsyyi4U5km6D/XzI9rTd228PD8xkGr/2Kx1YRU0ixZnohv9xNc4GP/69 '
  174. 'GNWbbOZcyJcSL+kvych+ddbP5VjHea+b4vT35KV++PMndj+78BE1u5sdqWir '
  175. 'X9pi09go7SW1BlaJsMHrkR0P8yFCaFWLyCmIC7C/KcSuHVwcjVYWHynLq6CK '
  176. 'kkv4r8BNM/QFzPCeozXjMk7zq9TkJjLVxsUVNcZaNqzlWO0JzCfE6ICpHhyI '
  177. 'g/1bO/VJQyk+6llyX1LwRKCeKQCp6KcLx4qnjgZ8g1ArNvazNot9fAssgAUz '
  178. 'yoyOBF1SYJxWnzu9GE1F47zU1iD6FB8mjspvE00voDs8t2e+xtZoqsM12WtC '
  179. '8R4VbCY0LmTPGiWyxD9y7TnUlDfHuQINBF3yev8BEAC4dyN2BPiHCmwtKV/3 '
  180. '9ZUMVCjb39wnsAA8CH7WAAM5j+k8/uXKUmTcFoZ7+9ya6PZCLXbPC64FIAwl '
  181. 'YalzCEP5Jx25Ct/DPhVJPIFWHMOYbyUbLJ8tlC1vnnDhd8czeGmozkuyofMh '
  182. '39QzR3SLzOqucJO3GC6Fx7eFNasajJsaAXaQToKx8YqKCGG4nHxn0Ucb79+G '
  183. '/0wQhtR0Mk3CxcajYJAsTV2ulW05P9xqovblXImXDZpgv0bQ2TX43SdR17yk '
  184. 'QzL33HRNCT7clLblHLMPQVxYy1yGS6hOAQj/Rmp+BO7d3S082+oyAFWeb7a9 '
  185. 'fwzedbxPeiE2VOLtZizQUWIHHqwKP0tNEWRvSfCbc6ktvZQnHCIKyhmTC8N7 '
  186. 'kvS4T6WjWzpc1M+GOMlOqhtW6t3zV1i2tkcpujduBGRIZ8ZQY+yo/i1HSL5t '
  187. 'N98606YXN1s2JyqwAkBJfPYiMp67J2uaFsML3YQEKAxR64GhkjFR/OqYtlIB '
  188. 'cx1PvcrPbVWQzXZBfFyjbAd55MnWVk6GrbM3y1QATN3NNhXfbMzLLU6cw/8p '
  189. 'sJw0+hxv1W2bJTftrs/5PyLryNOKYHbPEtC6aIyuzbIFFKWxkNshUiasd82Q '
  190. 'Jafgx3pFNnCtB61UV46QeqPI7sVueLslurqVgEGb2dS6unKYWXedoIMELm3C '
  191. 'g0XdJQARAQABiQI8BBgBCAAmFiEElnHIGFxlGau06K2fpOuC0lc/fHcFAl3y '
  192. 'ev8CGwwFCQPDuIAACgkQpOuC0lc/fHc/PxAAj29SBqW6ZRG8zOOw0Dmg1sg4 '
  193. 'ONYtJ4hEzqPv2WbtOKxgtdcjQS1gMadtfcrH0omZPn8YmeojdbJCd5b9UBYr '
  194. 'h4Km3usURy79ouqvyQdZOIBOCUuvNcAUX2xvgUEHQW+rDpkd2mxdASsay1I7 '
  195. 'yx2S0xE/QP/L2dH0470JWJ+tCIz3WuW2BEi+wijy2tqJfzIkIWA5ND2jwl4n '
  196. 'roY7srmAwZfXlh97/T5oOPIUsupIp+vmtMd4B0qa1wLGFDch+VwVvklLN5/Q '
  197. 'Vfbedy1Y8yHYiRWSrd3pHvkdtE5rI8qCOWaU/271plT9MZiwHe5WzCWESbKi '
  198. 'dwHQanM0Y6+Y8rrvUWGXrlPDvVd3Gd6TjqNhA8+AEiG+BHsw7Azc5in97/yW '
  199. '9cAYEldWv1tUjxgqvWWbGA8E6M/EuE3FuM48HNODfEh/b0ut+b2UAtuz3LzK '
  200. 'NVpqYZ9NIebpIMlUuJoQc9rPCWzMDNX37iGRBA016L7VizeJRpJ8VPRAQWHe '
  201. 'L5eC85dx9wcdK152fqlOUj729J2TZ5JYQdm9vF2cA6bsIB9m48j/UzNEeV3W '
  202. 'NZ3nuZqQ9VjVLYiPURbdkYxWfUvFdVawfqUZ4PGKbVWrFfod8WwHa+gsP4UJ '
  203. 'hLN/nxCalBbc3HnyYo0Inlytu4fumElS7kuUVNielOsJlyUr8kfxU3c6MPk=',
  204. ],
  205. 'PTR': ['EXAMPLE.TEST.'],
  206. 'RP': ['hostmaster.EXAMPLE.com. .'],
  207. 'SMIMEA': ['3 01 0 aabbccDDeeff'],
  208. 'SPF': [],
  209. 'SRV': ['100 01 5061 example.com.'],
  210. 'SSHFP': ['02 2 aabbcceeddff'],
  211. 'TLSA': ['003 00 002 696B8F6B92A913560b23ef5720c378881faffe74432d04eb35db957c0a93987b47adf26abb5dac10ba482597ae16edb069b511bec3e26010d1927bf6392760dd',],
  212. 'TXT': [
  213. f'"{"a" * 498}"',
  214. '"' + 124 * '🧥' + '==="', # 501 byte total length
  215. '"🧥 👚 👕 👖 👔 👗 👙 👘 👠 👡 👢 👞 👟 🥾 🥿 🧦 🧤 🧣 🎩 🧢 👒 🎓 ⛑ 👑 👝 👛 👜 💼 🎒 "',
  216. '"🧥 👚 👕 👖 👔 👗 👙 👘 👠 👡 👢 👞 👟 🥾 🥿 🧦 🧤 🧣 🎩 🧢 👒 🎓 ⛑ 👑 👝 👛 👜 💼 🎒 👓 🕶 🥽 🥼 🌂 🧵"',
  217. ],
  218. 'URI': ['10 01 "ftp://ftp1.example.test/public"',],
  219. }
  220. INVALID_RECORDS = {
  221. 'A': ['127.0.0.999', '127.000.0.01', '127.0.0.256', '::1', 'foobar', '10.0.1', '10!'],
  222. 'AAAA': ['::g', '1:1:1:1:1:1:1:1:', '1:1:1:1:1:1:1:1:1'],
  223. 'AFSDB': ['example.com.', '1 1', '1 de'],
  224. 'APL': [
  225. '0:192.168.32.0/21 !1:192.168.38.0/28',
  226. '1:192.168.32.0/21 !!1:192.168.38.0/28',
  227. '1:192.168.32.0/33',
  228. '18:12345/2',
  229. '1:127.0.0.1',
  230. '2:::/129',
  231. ],
  232. 'CAA': ['43235 issue "letsencrypt.org"'],
  233. 'CERT': ['6 0 sadfdd=='],
  234. 'CNAME': ['example.com', '10 example.com.'],
  235. 'DHCID': ['x', 'xx', 'xxx'],
  236. 'DLV': ['-34 13 1 aabbccddeeff'],
  237. 'DS': ['-34 13 1 aabbccddeeff'],
  238. 'EUI48': ['aa-bb-ccdd-ee-ff', 'AA-BB-CC-DD-EE-GG'],
  239. 'EUI64': ['aa-bb-cc-dd-ee-ff-gg-11', 'AA-BB-C C-DD-EE-FF-00-11'],
  240. 'HINFO': ['"ARMv8-A"', f'"a" "{"b" * 256}"'],
  241. # 'IPSECKEY': [],
  242. 'KX': ['-1 example.com', '10 example.com'],
  243. 'LOC': ['23 12 61.000 N 42 22 48.500 W 65.00m 20.00m 10.00m 10.00m', 'foo', '1.1.1.1'],
  244. 'MX': ['10 example.com', 'example.com.', '-5 asdf.', '65537 asdf.'],
  245. 'NAPTR': ['100 50 "s" "z3950+I2L+I2C" "" _z3950._tcp.gatech.edu',
  246. '100 50 "s" "" _z3950._tcp.gatech.edu.',
  247. '100 50 3 2 "z3950+I2L+I2C" "" _z3950._tcp.gatech.edu.'],
  248. 'NS': ['ns1.example.com', '127.0.0.1'],
  249. 'OPENPGPKEY': ['1 2 3'],
  250. 'PTR': ['"example.com."', '10 *.example.com.'],
  251. 'RP': ['hostmaster.example.com.', '10 foo.'],
  252. 'SMIMEA': ['3 1 0 aGVsbG8gd29ybGQh', 'x 0 0 aabbccddeeff'],
  253. 'SPF': ['"v=spf1', 'v=spf1 include:example.com ~all'],
  254. 'SRV': ['0 0 0 0', '100 5061 example.com.'],
  255. 'SSHFP': ['aabbcceeddff'],
  256. 'TLSA': ['3 1 1 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'],
  257. 'TXT': [
  258. 'foob"ar',
  259. 'v=spf1 include:example.com ~all',
  260. '"foo\nbar"',
  261. '"\x00" "Django rejects literal NUL byte"',
  262. ],
  263. 'URI': ['"1" "2" "3"'],
  264. }
  265. INVALID_RECORDS_PARAMS = [(rr_type, value) for rr_type in INVALID_RECORDS.keys() for value in INVALID_RECORDS[rr_type]]
  266. def test_soundness():
  267. assert INVALID_RECORDS.keys() == VALID_RECORDS_CANONICAL.keys() == VALID_RECORDS_NON_CANONICAL.keys()
  268. @pytest.mark.parametrize("rr_type,value", generate_params(VALID_RECORDS_CANONICAL))
  269. def test_create_valid_canonical(api_user_domain: DeSECAPIV1Client, ns_lord: NSClient, rr_type: str, value: str):
  270. assert api_user_domain.rr_set_create(api_user_domain.domains[0], rr_type, [value], subname="a").status_code == 201
  271. assert ns_lord.query(f"a.{api_user_domain.domains[0]}", rr_type) == {value}
  272. @pytest.mark.parametrize("rr_type,value", generate_params(VALID_RECORDS_NON_CANONICAL))
  273. def test_create_valid_non_canonical(api_user_domain: DeSECAPIV1Client, ns_lord: NSClient, rr_type: str, value: str):
  274. assert api_user_domain.rr_set_create(api_user_domain.domains[0], rr_type, [value], subname="a").status_code == 201
  275. assert len(ns_lord.query(f"a.{api_user_domain.domains[0]}", rr_type)) == 1
  276. @pytest.mark.parametrize("rr_type,value", INVALID_RECORDS_PARAMS)
  277. def test_create_invalid(api_user_domain: DeSECAPIV1Client, rr_type: str, value: str):
  278. assert api_user_domain.rr_set_create(api_user_domain.domains[0], rr_type, [value]).status_code == 400